No SinginLogs in Azure Log analytics

wawa-2377 26 Reputation points
2020-08-19T08:38:09.673+00:00

I can't see any SigninLogs of my Azure AD of in my Log analytics workspace.

I did follow the how-to-guide here.

  • Created an Log analytics workspace
  • In the Diagnostic settings menu of Azure AD, I have selected the Audit Logs & Sign-inLogs and selected Send to Log Analytics workspace.
  • I have an azure Azure AD P2 license (trial).

However when I go to Logs under my Azure AD, I don't see the SigninLogs table as mentioned here.
Both AuditLogs and SigninLogs are not visible in my Log analytics workspace.

Do I maybe have to change the scope in Log Analytics workspace? Maybe to tenant level? If so how?
The scope is set on subscription level.

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,812 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,568 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,246 Reputation points
    2020-08-19T17:22:09.357+00:00

    In the query editor type AuditLogs and click Run. Open a new query, type SigninLogs and click Run.

    --
    Please let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.

    1 person found this answer helpful.
  2. Vladimir Abramovich 6 Reputation points
    2021-01-15T20:36:41.477+00:00

    hello, we're having same issue and same setup @wawa-2377 , have you managed to resolve it?

    1 person found this answer helpful.
    0 comments
  3. Vivek Mankar 1 Reputation point
    2021-03-24T15:12:17.9+00:00

    Hello, we are having the same issue. Updated the license to P2, but sign -in logs are still arent flowing into the log analytics. Any suggestions.

    0 comments