There is a session ID in Entra GSA traffic logs. This is used to indicate an end user's traffic session. This is different from the Entra GSA audit logs, which is used to track Entra portal admin activities. The audit logs and traffic logs have different use cases and the information included in the logs are not correlated. Hope this answers the question. Thanks.