Get-AzureADAuditSignInLogs | Export more than 1000 lines

%3CLINGO-SUB%20id%3D%22lingo-sub-1380617%22%20slang%3D%22en-US%22%3EGet-AzureADAuditSignInLogs%20%7C%20Export%20more%20than%201000%20lines%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1380617%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20trying%20to%20export%20sign-in%20log%20using%26nbsp%3BGet-AzureADAuditSignInLogs%20but%20it%20is%20only%20exporting%201000%20lines.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20can%20I%20export%20more%20than%201000%20lines%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1380617%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGet-AzureADAuditSignInLogs%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1381695%22%20slang%3D%22en-US%22%3ERe%3A%20Get-AzureADAuditSignInLogs%20%7C%20Export%20more%20than%201000%20lines%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1381695%22%20slang%3D%22en-US%22%3E%3CP%3EThat%20issue%20should%20be%20fixed%20in%20the%26nbsp%3B%3CSPAN%20style%3D%22color%3A%20%2324292e%3B%20font-family%3A%20-apple-system%2C%20BlinkMacSystemFont%2C%20'Segoe%20UI'%2C%20Helvetica%2C%20Arial%2C%20sans-serif%2C%20'Apple%20Color%20Emoji'%2C%20'Segoe%20UI%20Emoji'%3B%20font-size%3A%2014px%3B%20font-style%3A%20normal%3B%20font-variant-ligatures%3A%20normal%3B%20font-variant-caps%3A%20normal%3B%20font-weight%3A%20400%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20start%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20white-space%3A%20normal%3B%20widows%3A%202%3B%20word-spacing%3A%200px%3B%20-webkit-text-stroke-width%3A%200px%3B%20background-color%3A%20%23ffffff%3B%20text-decoration-style%3A%20initial%3B%20text-decoration-color%3A%20initial%3B%20display%3A%20inline%20!important%3B%20float%3A%20none%3B%22%3E2.0.2.89%3C%2FSPAN%3E%20version%20of%20the%20(preview)%20module.%20Or%20you%20can%20use%20the%20Graph%20endpoint%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Fsignin-list%3Fview%3Dgraph-rest-1.0%26amp%3Btabs%3Dhttp%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Fsignin-list%3Fview%3Dgraph-rest-1.0%26amp%3Btabs%3Dhttp%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1401840%22%20slang%3D%22en-US%22%3ERe%3A%20Get-AzureADAuditSignInLogs%20%7C%20Export%20more%20than%201000%20lines%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401840%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20the%20latest%20version%20of%20Azure%20AD%20Preview%20module%20installed%20-%26nbsp%3B2.0.2.89.%20Still%20the%20same%20issue%2C%20cannot%20export%20more%20than%201000%20lines.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1402811%22%20slang%3D%22en-US%22%3ERe%3A%20Get-AzureADAuditSignInLogs%20%7C%20Export%20more%20than%201000%20lines%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1402811%22%20slang%3D%22en-US%22%3E%3CP%3EUse%20the%20Graph%20API%20then%2C%20it's%20way%20better%20when%20dealing%20with%20large%20amounts%20of%20data%20anyway.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1466665%22%20slang%3D%22en-US%22%3ERe%3A%20Get-AzureADAuditSignInLogs%20%7C%20Export%20more%20than%201000%20lines%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1466665%22%20slang%3D%22en-US%22%3EThe%20Microsoft%20Graph%20also%20looks%20like%20its%20limited%20to%201000%20lines%20per%20page%20and%20then%20have%20to%20run%20a%20command%20to%20get%20the%20next%20page.%20Is%20this%20correct%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1467203%22%20slang%3D%22en-US%22%3ERe%3A%20Get-AzureADAuditSignInLogs%20%7C%20Export%20more%20than%201000%20lines%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1467203%22%20slang%3D%22en-US%22%3EThis%20is%20true%3CBR%20%2F%3EYou%20have%20to%20use%20paging%20%3D%26gt%3B%20%3CA%20href%3D%22https%3A%2F%2Fdeveloper.microsoft.com%2Fen-us%2Fgraph%2Fblogs%2F30daysmsgraph-day-7-paging-and-nextlink%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdeveloper.microsoft.com%2Fen-us%2Fgraph%2Fblogs%2F30daysmsgraph-day-7-paging-and-nextlink%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I am trying to export sign-in log using Get-AzureADAuditSignInLogs but it is only exporting 1000 lines.

 

How can I export more than 1000 lines?

5 Replies

That issue should be fixed in the 2.0.2.89 version of the (preview) module. Or you can use the Graph endpoint: https://docs.microsoft.com/en-us/graph/api/signin-list?view=graph-rest-1.0&tabs=http

@Vasil Michev 

 

I have the latest version of Azure AD Preview module installed - 2.0.2.89. Still the same issue, cannot export more than 1000 lines.

Use the Graph API then, it's way better when dealing with large amounts of data anyway.

The Microsoft Graph also looks like its limited to 1000 lines per page and then have to run a command to get the next page. Is this correct?