How to generate the sign-in log for 1 month?

Sunshine Insurance 0

I want to generate the outlook sign-in log for all users, but I only can download 7 days log, I need 1 month log, could you please help? Thanks

Jose Benjamin Solis Nolasco 1,581 Reputation points

2025-05-07T02:16:14.1366667+00:00
Sunshine Insurance I hope you are doing well, so i will made this guide for you so you can configure it for the future 1-month logs because by default you will have 7 days logs.

To generate sign-in logs for 1 month in Microsoft Entra ID (formerly Azure AD), you need to use log export options, as the default portal only retains 7 days of interactive sign-in data unless you configure diagnostic settings.

Get 30 Days of Sign-in Logs

Option 1: Export Logs to Log Analytics (Recommended)

Go to Microsoft Entra admin center → Monitoring > Diagnostic settings.

Create a new diagnostic setting:

Name it something like SignInLogsExport.

Check: SignInLogs

Choose Log Analytics workspace (or create one if not already set).

Save.

After this, logs will be continuously stored in Log Analytics, where you can query up to 30 days (or more if configured).

After this, logs will be continuously stored in Log Analytics, where you can query up to 30 days (or more if configured).

To query for Outlook sign-ins:

SigninLogs | where AppDisplayName == "Office 365 Exchange Online" | where TimeGenerated > ago(30d) | project UserPrincipalName, TimeGenerated, AppDisplayName, Status

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!

Your answer