How long does/should a Sign-In Log take to show in Sign-In Logs?

gone2 5 Reputation points
2023-08-07T08:59:26.14+00:00

When a user attempts to sign in but the sign in fails, they are given a request ID.

Entering that Request ID into Azure AD Sign-in logs initially returns nothing. 5 minutes goes by, click refresh, nothing. 10 minutes, nothing. Half an hour, hit the refresh button, up comes the sign in log.

Is this by design? Seems strange that a relatively simple log doesn't immediately show in Azure(/Entra).

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} vote

2 answers

Sort by: Most helpful
  1. Andy David - MVP 157.8K Reputation points MVP Volunteer Moderator
    2023-08-07T10:31:48.1233333+00:00

    Its rare to take that long, usually within 15 minutes I see them, but every once in awhile, it takes longer than usual.


  2. Jose Benjamin Solis Nolasco 3,511 Reputation points
    2025-06-06T18:55:52.16+00:00

    @Adam Johnson Microsoft does not provide strict SLAs on log ingestion time for Entra ID sign-in logs, but from both Microsoft documentation and real-world experience, you should expect logs to appear within 5–15 minutes, and usually faster.

    However last sign in could take up to 24hr I have seen this before check this documentation https://learn.microsoft.com/en-us/entra/identity/monitoring-health/reference-log-latencyUser's image

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.