Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,005 questions
Azure Sentinel Azure AD logs
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 39%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
Eduards
791
Reputation points
Hello, I have a question about Azure AD Logs sending to Azure Sentinel.
I have all prerequisites and connected Azure AD to Azure Sentinel
But i didn't receive any logs and Azure AD data connector status is
What could be the cause?
If i check Azure AD audit, sign-in logs there are logs.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 0%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVM%3C/text%3E%3C/svg%3E)
VipulSparsh-MSFT 16,246 Reputation points Microsoft Employee2021-01-06T07:54:13.81+00:00 @Eduards When did you configure this ? It is not instant, it takes some time for the in-flow. Let us know if its already been 24 hours.
-
Eduards 791 Reputation points
2021-01-06T08:53:01.613+00:00 I enabled this setting this morning.
I will give you a feedback after 24h.
-
Eduards 791 Reputation points
2021-01-07T07:09:57.99+00:00 Hello @VipulSparsh-MSFT status of Azure AD changed to connected. :)
Sign in to comment