Forum Discussion
SignInLogs are not showing in Log Analytics / Azure Monitor
I have followed the steps to create an Log Analytics workspace, and configured the Diagnostic Settings in Azure AD to send the SignInLogs and AuditLogs to LogAnalytics. However, I cannot see the...
ibnmbodji the license does matter to export sign in logs to Log Analytics (Azure Monitor) - https://twitter.com/BenjaminOwens/status/1354701842106650626
Hi yes it seems that even if you can configure it and send it to log analytics you need P1 license to query and export data settings . I thought that i can because of this :
How long does Azure AD store the data?
Activity reports
HOW LONG DOES AZURE AD STORE THE DATA?Report Azure AD Free Azure AD Premium P1 Azure AD Premium P2
| Audit logs | 7 days | 30 days | 30 days |
| Sign-ins | 7 days | 30 days | 30 days |
| Azure AD MFA usage | 30 days | 30 days | 30 days |
- Hello, I got the same issue in my purpose built demo tenant - all the eval licenses present, everything is configured, EMS E5 (Eval), Azure (Free Eval with credit), AAD is P2 (eval) but SignIn logs are not showing in Log Analytics Workspace. What is the final take on this? It is about 12 hours since config applied. How to get this flushed?
- You note that your using eval licenses. Along with your eval licenses, I personally think you should buy just one Azure AD Premium 1 license to help get things outputting to Log Analytics more quickly.
If be interested to know if that speeds things along.Ben Owens Sergg I am also missing sign-in logs even after waiting 24 hours.
Are evaluation trial licensing not supposed to be full featured or is it a bug that Microsoft needs to fix?
Are there some extra steps required to test setting up email alerts for sign-in activity (breakglass account etc.) when using P1/P2 trial licensing?
