Not Monitored
Tag not monitored by Microsoft.
39,002 questions
A community member has associated this post with a similar question:
Sign-in Logs no longer being sent to Eventhub
Only moderators can edit this content.
Sign-in Logs no longer being sent to Eventhub
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 93%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGT%3C/text%3E%3C/svg%3E)
Gord Taylor
0
Reputation points
Using a SIEM to collect Entra Sign-in logs via eventhub. This has been working since Dec/2023, but Sign-in logs stopped being sent to eventhub on Aug 15th. The evenhub is still reachable and getting Provisioning logs, etc, but just Sign-in logs aren't being delivered.
I validated connections strings, and can see a significant drop in eventhub activity on Aug 15th as well, so I'm sure it's not the SIEM connector. I've also disabled/enabled Sign-in logs to eventhub to force it to re-save the configuration, but still no logs. Canada Central also shows no health issues.
Licensing is Business Premium with Entra AD P2.
Anyone else experiencing this or have ideas on how to troubleshoot?
Thanks.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 8%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EST%3C/text%3E%3C/svg%3E)
Smaran Thoomu 15,520 Reputation points Microsoft Vendor2024-08-22T14:05:58.4433333+00:00