Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

Retrieve old reporting data

Silver Contributor

My client did not realize that SSPR reporting data was only kept for 30 days and now they want to do some historical trending but don't have the older data. Is there any way to get that data or are they out of luck?

1 Reply
best response confirmed by VI_Migration (Silver Contributor)
Solution
Your client is out of luck. "Currently, the Azure AD Reports and Events API retrieves up to 75,000 individual events of the SsprActivityEvent and SsprRegistrationActivityEvent types, spanning the last 30 days.+ If you need to retrieve or store data beyond this window, we suggest persisting it in an external database and using the API to query the deltas that result. Our recommendation is to begin retrieving this data when you start using SSPR in your organization, persist it externally, and then continue to track the deltas from this point forward." Reference: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-passwords-reporting
1 best response

Accepted Solutions
best response confirmed by VI_Migration (Silver Contributor)
Solution
Your client is out of luck. "Currently, the Azure AD Reports and Events API retrieves up to 75,000 individual events of the SsprActivityEvent and SsprRegistrationActivityEvent types, spanning the last 30 days.+ If you need to retrieve or store data beyond this window, we suggest persisting it in an external database and using the API to query the deltas that result. Our recommendation is to begin retrieving this data when you start using SSPR in your organization, persist it externally, and then continue to track the deltas from this point forward." Reference: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-passwords-reporting

View solution in original post