question

TechTeam-7287 avatar image
0 Votes"
TechTeam-7287 asked olufemiaMSFT answered

No sign-in data in Azure log analytics

I have followed the Microsoft guide - Integrate Azure AD logs with Azure Monitor logs
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-logs-with-log-analytics

All users have Azure AD P1 licenses, I have waited 24 hours

When I run these queries in log analytics I get results for audit logs but no results for sign-in logs
auditlogs | take 10
signinlogs | take 10

Everything is setup correctly but it looks like Azure AD sign-in data is not being sent to log analytics.
Is there anything I can check to confirm that data is being sent to log analytics?
Thanks for your help

azure-active-directoryazure-monitor
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

This has now started working after 2 days. I can now see sign-in log and audit log data when I run these queries
auditlogs | take 10
signinlogs | take 10

Not sure if anything was changed on the back end? But it seems to be working fine now!

1 Vote 1 ·

1 Answer

olufemiaMSFT avatar image
0 Votes"
olufemiaMSFT answered

Thanks for the post, @TechTeam-7287 , Glad this is now working for you. AFAIK, nothing was changed on the back-end.

According to related documentation, it can take up to 2 days post-configuration before sign-in activity data start appear in your Azure monitor/Log analytics workspace.

110092-signinlatent2days.png



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.