question

wawa-2377 avatar image
0 Votes"
wawa-2377 asked VivekMankar-6015 published

No SinginLogs in Azure Log analytics

I can't see any SigninLogs of my Azure AD of in my Log analytics workspace.

I did follow the how-to-guide here.
- Created an Log analytics workspace
- In the Diagnostic settings menu of Azure AD, I have selected the Audit Logs & Sign-inLogs and selected Send to Log Analytics workspace.
- I have an azure Azure AD P2 license (trial).

However when I go to Logs under my Azure AD, I don't see the SigninLogs table as mentioned here.
Both AuditLogs and SigninLogs are not visible in my Log analytics workspace.

Do I maybe have to change the scope in Log Analytics workspace? Maybe to tenant level? If so how?
The scope is set on subscription level.



azure-monitorazure-ad-audit-logs
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

alfredorevilla-msft avatar image
1 Vote"
alfredorevilla-msft answered alfredorevilla-msft edited

In the query editor type AuditLogs and click Run. Open a new query, type SigninLogs and click Run.


Please let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

it did work for AuditLogs but not for SigninLogs. I tried with various time rages as well.

The funny thing is that I do see logs under 'Sign-ins' in the 'Monitor' blade of Azure AD.
But somehow these logs don't show up in my log analytics.

i did read somewhere that it take some time for Signinlogs to populate log analytics... any idea how long?

0 Votes 0 ·

No more than 15 minutes.

0 Votes 0 ·
VladimirAbramovich-0929 avatar image
1 Vote"
VladimirAbramovich-0929 answered VladimirAbramovich-0929 published

hello, we're having same issue and same setup @wawa-2377 , have you managed to resolve it?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VivekMankar-6015 avatar image
0 Votes"
VivekMankar-6015 answered VivekMankar-6015 published

Hello, we are having the same issue. Updated the license to P2, but sign -in logs are still arent flowing into the log analytics. Any suggestions.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.