Those are event if the AD FS Admin log. Audit events will be in the Security log.
ADFS successful login doesn't show in the event viewer
I enabled the ADFS log according the doc https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-logging.
I can see the failed login but the successful login doesn't show in the event viewer. Any idea why this happens? I did confirm the Audit Application generated has both failure\successful selected in the local security policy.
Thanks
-
Pierre Audonnet - MSFT 10,191 Reputation points Microsoft Employee
2020-04-21T12:27:05.257+00:00
3 additional answers
Sort by: Most helpful
-
HK G 516 Reputation points
2020-04-20T23:44:56.947+00:00 I got the event ID 364\1000\342.
Thanks
-
ppinero 1 Reputation point
2020-05-06T11:42:16.89+00:00 Hi,
I have the same problem.... i confirm that I have enable both audits for succes and failed logins but i do not see success logins....
-
ppinero 1 Reputation point
2020-05-06T11:43:34.667+00:00 I have the same problem... i am not able to view the success login .... how did you achieve it?.
Thank you in advance.