Graph Diagnostics Logging Delay and Availability Status

Question

Why is there a delay in receiving Microsoft Graph Activity Logs, and what is the current availability status of this feature?

PS - Based on common issues that we have seen from customers and other sources, we are posting these questions to help the Azure community.

Answer 1

Microsoft Graph activity logs is now generally available.Microsoft Graph activity logs give you visibility into HTTP requests made to the Microsoft Graph service in your tenant. With rapidly growing security threats and an increasing number of attacks, this log data source allows you to perform security analysis, threat hunting, and monitor application activity in your tenant.

One of the limitations of Microsoft Graph is that in most regions, events may take up to 30 minutes to be delivered to the configuration destination. In rare cases, it may take up to 2 hours for certain events to reach the destination.

Resources:

• Microsoft Graph Activity Logs General Availiablity
• Overview of Microsoft Graph Activity Logs

Please do not forget to "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.