Export a report of Azure Active Directory Sign Ins

Charlie Brown 396

I have setup a conditional access to report-only and I see user logons as interrupted in the log. I would like to export the interrupted logins to a weekly report in a CSV file. I can run queries to retrieve the data but struggling on how to run report weekly and then email as csv.

JamesTran-MSFT 36,371 Reputation points Microsoft Employee

2021-03-17T22:45:35.017+00:00
@Charlie Brown
Thank you for your post and I apologize for the delayed response!

For exporting the AzureAD sign-in logs, were you able to review our Download a sign-in report using the Azure portal documentation? This walks you through how to download the sign-in data for your tenant for the past 24 hours. However, if you need a weekly report you can easily filter the date to - "Date: Last 7 days" to get the logs for an interrupted sign-in for that week.

Are you trying to do this by automating the process?

Or are you having issues emailing the .CSV?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

1 answer

Charlie Brown 396 Reputation points

2021-03-19T18:04:04.737+00:00

Thanks for the reply, I found an article on how to use logic app to create a task to export and put data in a csv.

https://thomasthornton.cloud/2020/11/09/log-analytics-queries-to-csv-emailed-using-azure-logic-apps/
Please sign in to rate this answer.

1 person found this answer helpful.
JamesTran-MSFT 36,371 Reputation points Microsoft Employee

2021-03-22T18:34:36.11+00:00

@Charlie Brown
Thank you for providing your solution to this issue so others that are running into this can easily find a solution!

Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
Sign in to comment