question

CharlieBrown-6402 avatar image
0 Votes"
CharlieBrown-6402 asked ·

Export a report of Azure Active Directory Sign Ins

I have setup a conditional access to report-only and I see user logons as interrupted in the log. I would like to export the interrupted logins to a weekly report in a CSV file. I can run queries to retrieve the data but struggling on how to run report weekly and then email as csv.

azure-ad-sign-in-logs
· 1
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@CharlieBrown-6402
Thank you for your post and I apologize for the delayed response!

For exporting the AzureAD sign-in logs, were you able to review our Download a sign-in report using the Azure portal documentation? This walks you through how to download the sign-in data for your tenant for the past 24 hours. However, if you need a weekly report you can easily filter the date to - "Date: Last 7 days" to get the logs for an interrupted sign-in for that week.

78859-image.png

  • Are you trying to do this by automating the process?

  • Or are you having issues emailing the .CSV?


If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

0 Votes 0 ·
image.png (33.3 KiB)

1 Answer

CharlieBrown-6402 avatar image
1 Vote"
CharlieBrown-6402 answered ·

Thanks for the reply, I found an article on how to use logic app to create a task to export and put data in a csv.


https://thomasthornton.cloud/2020/11/09/log-analytics-queries-to-csv-emailed-using-azure-logic-apps/

· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@CharlieBrown-6402
Thank you for providing your solution to this issue so others that are running into this can easily find a solution!


Thank you for your time and patience throughout this issue.


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 Votes 0 ·