This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 72%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAC%3C/text%3E%3C/svg%3E)
Past risky sign-in events are not displaying in the risky sign-in report.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 78%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
This might need little deeper investigation. Let's work on this issue offline.
Please send us an email on azcommunity [at] microsoft [dot] com with Sub - Attn: Sandeg and following details in the email body:
Link to this thread/post
We can connect offline and discuss further on this.
If they are remediated, the entries are removed
If the risky sign-in was remediated, then I should still be able to see the remediated sign-in record by filtering the records by the risk state "Remediated":
If the system is truly removing the records, then the instances should not be included in the digest email showing risky sign-ins.
Please enlighten me further, as I cannot seem to get Microsoft to acknowledge that there is a reporting issue here.
Correct, sorry if I wasnt clear, selecting that filter should show for the ones dismissed or remediated.
What do you see exactly? What is missing?
I am not seeing any risky sign-ins anymore. The last Entra Weekly Digest email I received was Tuesday, 12/23/23, and showed 2 risky sign-ins.
I used to see those sign-in entries in the report below when I selected the risk state of Remediated. Now I see nothing. I can no longer see any risky sign-ins, no matter what their state.