I am trying to create a log analytics workspace but I get this message - This Microsoft Entra tenant is not currently enabled to send logs to Log Analytics message ?

Question

I have implemented some conditional access policies as Report Only. I want to see the report so wanted to create a Log Analytics workspace. But I get below message - This Microsoft Entra tenant is not currently enabled to send logs to Log Analytics

Answer 1

Hi @JKMSPL ,

The message means that you need to configure your tenant to send logs to the Log Analytics workspace. You need to have a subscription attached to your tenant and be logged in with a Global Admin account or Security Admin account to set this up. You also need a Microsoft Entra tenant with a Premium P1 license.

To do this, you need to:

• Log in with a Global Admin or Security Admin account
• Create a Log Analytics workspace within your subscription
• Configure your tenant to send log events to Log Analytics under Microsoft Entra ID > Monitoring & health > Diagnostic settings.
• For full instructions, see:

https://learn.microsoft.com/en-us/entra/identity/monitoring-health/tutorial-configure-log-analytics-workspace

Let me know if this helps and if you still run into any issues.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar issues or errors.