Best open a support case. Some audit/reporting features require Azure AD P1 licenses, but you should be able to see at least 30 days of data even for the "free" tier.
Missing/Inaccurate Audit Logs and Sign-in Logs
Hello,
I have a admin whose Sign-in logs & Audit logs (under Azure Monitoring) only appear for 5 of 22 users. All the users have a Exchange P1 license. Is there any explanation/troubleshooting as to why Audit and/or Sign-in logs would appear for some users and not others?
Troubleshooting steps taken:
-Removed all filters during the audit search
-Checked for compromised accounts
-Verified licenses
-Verified user activity within the last 30 days
-Attempted to reproduce the issue in my own tenant with the same license (Exchange P1). Audit logs and sign in logs populate accurate data.
I appreciate any feedback.