How to schedule log notification for an Enterprise Application

Mohd Arif 921 Reputation points
2024-03-20T07:31:01.1933333+00:00

I have added an application in 'Enterprise Application' for SSO. Let's call app as XYZ. The SSO is working fine. I need to send the logs of XYZ to the app owner. I am doing it manually. How can I schedule log notification in Azure AD?

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,898 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,381 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,080 questions
Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,652 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,561 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michael Smith-MSFT 2,831 Reputation points Microsoft Employee
    2024-03-20T17:10:38.75+00:00

    Hi Mohd Arif,

    Thank you for contacting the Q&A community.

    One way you can schedule log notifications is using alerts with log analytics.

    You can use the same process as this thread to create the alert but you need to change the query to whatever logs you are looking for specific to your app.

    https://learn.microsoft.com/en-us/answers/questions/1611342/set-alert-for-microsoft-365-global-admin-password

    For example i have an alert created for the app "windows sign ins" to alert once a day to show all signins for last day.

    SigninLogs
|where TimeGenerated >= ago(1d)
| where AppId == "38aa3b87-a06d-4817-b275-7a316988d93b"

    User's image

    Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

    0 comments