Oct 06 2019
08:17 AM
- last edited on
Apr 08 2022
10:08 AM
by
TechCommunityAP
Oct 06 2019
08:17 AM
- last edited on
Apr 08 2022
10:08 AM
by
TechCommunityAP
Hi
I've setup the Audit logs and Sign-in logs from AAD to be sent to Log Analytics Workspace. The user has EMS E5 license. I could see the sign in logs being populated when i view it from the Azure AD tile. However ,when i click on LA workspace and filter for Sign-in logs, there are no results. I could see the Auditlogs in this LA workspace just fine. Not sure if there are any configuration i'm missing which blocks me to see the logs under LA workspace. Any suggestions?
Thank You!
Regards
Mohan
Oct 07 2019 01:25 AM
Jan 30 2020 11:17 PM
I've checked all the pre-req's . All of them are met. I could see the Audit logs just not the Sign in logs.
Jan 31 2020 08:51 AM
If you have recent logs (within 12hrs) but nothing on this screen for sign-in a support call may be needed - unless anyone else has an idea? I assume you have RBAC right to the Signinlogs table as well as Auditlogs?
Jan 13 2021 12:55 PM
I have the same issue on a brand new tenant. I am able to see the SignIn logs from the AAD > Monitoring > Sign-ins blade, but it won't stream to my Log Workspace. I replicated the process with AuditLogs and it worked fine within 5 minutes.
The account is a Global Admin, so permissions shouldn't be an issue. I tried fixing it via Support today, but we were unable to resolve and it has been escalated. I'll respond here if I find a resolution.
Apr 19 2021 12:06 AM
May 18 2021 03:53 PM
Jun 28 2021 02:02 PM
@JukesnthingsWere you able to find a solution?
Jun 29 2021 01:05 AM
@VPIDev In my environment the problem was solved by itself after some days. I've raised a support ticket but they haven't found anything and were happy after the "self-healing" ;)