Forum Discussion
SignInLogs are not showing in Log Analytics / Azure Monitor
Ben Owens This can take a while before showing up. How long did you wait?
- Ben OwensSep 22, 2020Brass Contributor
Thanks JanBakkerOrphaned . I left it running on Friday afternoon, over the weekend but saw no results.
When I've set this up on other tenants, I usually see some data after an hour or so. The fact I can see the AuditLogs after 15-30 mins but no the SigninLogs suggested (to me) that I had missed at step or needed a licensing prereq.
On the Monday, I ended up creating a new Resource Group, new LogAnalytics workspace. I then removed and then re-added the Diagnostics Settings (pointing to the new LogAnalytics workspace. Same result so far.... AuditLogs only.
Any other suggestions welcome.I've logged a ticket with MS support as I think I've met the requirements. I'll update the thread with the outcome of the ticket.
- Ben OwensSep 24, 2020Brass Contributor
JanBakkerOrphanedraised the ticket with Microsoft but no real insight from them.
Interestingly, this appeared to be a license issue (from what I can gather).
We previously signed up to an Azure AD Premium P2 license (25 licenses) to unlock the ability to send the SigninLogs logs. However, after waiting a few days, no SignInLogs.
Whilst I was waiting for it to start working, some Azure AD Premium P1 licenses were purchased and assigned to the tenant (not assigned to any users though). Within about 30 minutes of those showing in the tenant, the SignInLogs showed up in LogAnalytics.So if anybody hits this issue when using a trial Azure AD Premium license, I would advise purchasing 1 Azure AD Premium P1 license instead to see if that kicks it into action.