Hi,
I found an issue:
Audit log is missing on failed user login.
I used to get logs on login failure with Operation=UserLoginFailed via https://compliance.microsoft.com/ or API calls https://manage.office.com/api/v1.0/%s/activity/feed/%s
As of now when I failed login and received log, it looks like login log on success - Operation=UserLoggedIn and ResultStatus=Success.
Please clarify how I can recognise which logs belong to success and which to failure login or what API I should use to get history of failed logins.
Thanks in advance