Complete logs are not vissible in entra id for 7 days or 1 month.

Question

Complete logs are not vissible in entra id for 7 days or 1 month.

Anonymous

Suppose I am trying to view logs logs for a partucular user "abc" and by default entra id shown 24 hrs logs now suppose in 24 hrs it shows 10 logs but when I go for 7 days or 1 month logs then it shows 0 logs. how this is possible. I know there are much more logs before 24 hrs and also it does not show logs within 24 hrs. How can I solve this issue.

Sridevi Machavarapu 33,740 Reputation points Microsoft External Staff Moderator

2025-12-08T02:55:07.4233333+00:00
Hey Akash Gupta,

It sounds like you're having trouble accessing logs for a specific user in Microsoft Entra ID. From what you've described, it seems like you're seeing the logs for the last 24 hours but not for the 7-day or 1-month periods, which can be confusing.

Here’s what you should consider:

Log Retention Policies:

If you have the Microsoft Entra Free edition, sign-in logs are retained for only 7 days. For the P1 and P2 editions, they are kept for 30 days. If you are on the Free tier, it's possible that the logs beyond the 24-hour view are not retained anymore.

When you upgraded to a premium version, you would initially start seeing 7 days of data, and, over time, you would be able to view up to 30 days of accumulated logs. If you are not seeing any logs for the 7 or 30 days, it may be that these logs were not collected or are not available.

Log Availability:

Audit logs might take some time to become available, and there may be some latency involved. Ensure you are checking after a reasonable amount of time.

Diagnostic Settings:

If you haven't configured diagnostic settings for log storage, you are limited to the retention period associated with your license tier. Consider configuring diagnostic settings to archive logs to a storage account for longer retention.

Logs Download:

You can also download the logs locally or archive them for longer retention if necessary. Here are the resources on how to do that:

Download logs to store locally

Archive logs to a storage account

If these insights don’t resolve your issue, here are some follow-up questions to better assist you:

Are you currently on the Free, P1, or P2 edition of Microsoft Entra?

Have you recently made any changes to your subscription or accessed logs previously?

Have you configured any diagnostic settings for log retention or storage?

How far back do you need to retrieve logs, and have you confirmed that there were sign-ins or activities during that time frame?

I hope this helps you figure out the log availability issue! Let me know if you have any more questions!

Reference List:

Microsoft Entra sign-in log data retention

How to access activity logs in Microsoft Entra ID

Download logs to store locally

Archive logs to a storage account

Note: This content was drafted with the help of an AI system.
Anonymous

2025-12-08T06:00:07.35+00:00

This issue is not for specific user but for all the users. I and my team recently started facing this issue. So previously it was working good but now we don't get sign-in logs for 7 days and 1 month. By default, its shows 24 hrs logs but when I go for 7 days or 1 month logs it does not show us the logs. I don't think it's about retention policy.
Sridevi Machavarapu 33,740 Reputation points Microsoft External Staff Moderator

2025-12-08T06:04:01.77+00:00

Hello Akash Gupta,

This issue "Entra sign-in logs not loading beyond 24 hours" is observed across multiple tenants and environments and Multiple customers are experiencing the same problem. Based on this, we involved our engineering team on this, and they are working on active fix, will update you once it's got fixed.

1 answer

Your answer

Anonymous

2025-12-08T06:00:07.35+00:00

This issue is not for specific user but for all the users. I and my team recently started facing this issue. So previously it was working good but now we don't get sign-in logs for 7 days and 1 month. By default, its shows 24 hrs logs but when I go for 7 days or 1 month logs it does not show us the logs. I don't think it's about retention policy.
Sridevi Machavarapu 33,740 Reputation points Microsoft External Staff Moderator

2025-12-08T06:04:01.77+00:00

Hello Akash Gupta,

This issue "Entra sign-in logs not loading beyond 24 hours" is observed across multiple tenants and environments and Multiple customers are experiencing the same problem. Based on this, we involved our engineering team on this, and they are working on active fix, will update you once it's got fixed.

Answer 1

The issue you're experiencing with not being able to see logs for a particular user in Microsoft Entra ID over a 7-day or 1-month period could be related to several factors:

Log Retention Policies: Microsoft Entra ID has specific retention policies for logs based on the type of logs and the license you have. For example, audit logs are retained for 7 days for the Microsoft Entra ID Free plan and 30 days for the P1 and P2 plans. If your logs are older than the retention period, they will not be available for viewing.
Filtering Options: When you attempt to view logs, ensure that the filters you are applying (such as user, date range, etc.) are correctly set. If the filters are too restrictive or incorrectly configured, it may result in no logs being displayed.
Log Types: Different types of logs (audit logs, sign-in logs, etc.) have different retention periods and may not include all activities. Ensure you are looking at the right type of log that contains the activities you expect to see.
Exporting Logs: If you need to retain logs for longer periods, consider exporting them through the diagnostic settings feature, which allows you to maintain records beyond the default retention times.

To troubleshoot this issue further, verify your license type, check the filtering settings, and consider exporting logs if necessary.

References:

Complete logs are not vissible in entra id for 7 days or 1 month.

Reference List:

1 answer

Your answer