Best tool to query AzureAD audit logs from Storage Account.

Shawn Goodwin 156 Reputation points
2022-11-09T20:48:12.437+00:00

My company offloads Azure AD audit logs to an Azure Storage Account. I need to dig into those logs to determine last modification date for some user accounts. I installed the Azure Storage Explorer on my local machine, but that does not have the capability to query the audit logs. What is the best tool to query the logs in the Storage Account? Thank you for your time.

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,836 questions
0 comments No comments
{count} votes

Accepted answer
  1. Carlos Solís Salazar 17,521 Reputation points MVP
    2022-11-09T21:10:52.073+00:00

    Hi @Shawn Goodwin

    Thank you for asking this question on the **Microsoft Q&A Platform. **

    The best way is to download the logs and use a tool like Visual Studio Code to look for the information that you require.

    Hope this helps!

    ----------

    Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.
    NOTE: To answer you as quickly as possible, please mention me in your reply.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful