User Audit Logs empty

Question

User Audit Logs empty

Windows10 0

For one user we have no actual audit logs and Sign-in logs, how can we solve this problem ?

User's image

Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-05-08T17:38:36.1833333+00:00

@Windows10

Thank you for posting your question in Microsoft Q&A.

I am looking into this issue and will get back to you post my research
Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-05-10T04:10:38.31+00:00

@Windows10

I wanted to check if this user is a newly created user or when was this user created?

Since when are you facing this issue?

Is there any license assigned to that user account?
Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-06-07T11:12:15.0266667+00:00

@Windows10

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.

1 answer

Your answer

Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-05-08T17:38:36.1833333+00:00

@Windows10

Thank you for posting your question in Microsoft Q&A.

I am looking into this issue and will get back to you post my research
Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-05-10T04:10:38.31+00:00

@Windows10

I wanted to check if this user is a newly created user or when was this user created?

Since when are you facing this issue?

Is there any license assigned to that user account?
Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-06-07T11:12:15.0266667+00:00

@Windows10

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.

Answer 1

@Windows10

To view audit logs for objects in Azure AD you need to have premium licenses. With premium licenses you can view up to last 30 days logs.

If you do not have premium licenses in your tenant then you can view only last 7 days logs.

Were there any operations performed on the problematic user in last 7 days.

You can try to perform any operation like, authentications, password reset, user property edits etc and then you can check the audit logs if you are able to see audit logs.

If you are unable to see the logs, feel free to let me know so that we can work on this issue offline.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

User Audit Logs empty

1 answer

Your answer