Forum Discussion

Ben Owens's avatar
Ben Owens
Brass Contributor
Sep 21, 2020

SignInLogs are not showing in Log Analytics / Azure Monitor

I have followed the steps to create an Log Analytics workspace, and configured the Diagnostic Settings in Azure AD to send the SignInLogs and AuditLogs to LogAnalytics. However, I cannot see the...
Azure Active Directory (AAD)
Log Analytics
JanBakkerOrphaned's avatar
JanBakkerOrphaned
Iron Contributor
Sep 22, 2020

Ben Owens This can take a while before showing up. How long did you wait? :smile:

Ben Owens's avatar
Ben Owens
Brass Contributor
Sep 22, 2020

Thanks JanBakkerOrphaned .  I left it running on Friday afternoon, over the weekend but saw no results.

 

When I've set this up on other tenants, I usually see some data after an hour or so.  The fact I can see the AuditLogs after 15-30 mins but no the SigninLogs suggested (to me) that I had missed at step or needed a licensing prereq.

 

On the Monday, I ended up creating a new Resource Group, new LogAnalytics workspace.  I then removed and then re-added the Diagnostics Settings (pointing to the new LogAnalytics workspace.  Same result so far....  AuditLogs only.

Any other suggestions welcome.

 

I've logged a ticket with MS support as I think I've met the requirements.  I'll update the thread with the outcome of the ticket.

Resources