When I test user flows after about a 5 minute delay I can query the AuditLogs in the Log Analytics Workspace but cannot see the SigninLogs. The SigninLogs took over 24 hours to appear in the Log Analytics Workspace after the initial setup. After this long initial delay they started to flow into the Log Analytics Workspace with the same 5 minute or so lag as the AuditLogs.
Is it normal that the SigninLogs take a long to time to appear in a Log Analytics Workspace after you first set things up? Or is there some setup I'm missing?
Update: I've tested this twice now with different B2C tenants. On both occasions Audit logs were available to query in the log analytics workspace roughly 5 minutes after creating the diagnostic settings. Sign-in logs were available to query in the log analytics workspace roughly 24 hours later.
After that initial 24 hour wait the Sign-in logs then became available to query in the log analytics workspace with the same 5 minute lag as the Audit logs.