I cannot for the list of me get MicrosoftGraphActivityLogs to deliver

Matthew Carle 0 Reputation points
2026-07-27T15:40:51.3566667+00:00
settings but zero events emitted. All other categories in the SAME
setting, to the SAME destination, flow normally.

Verified:
- Tenant license: Entra ID P1
- Destination: Log Activity Workspace
- GET /providers/microsoft.aadiam/diagnosticSettings
  ?api-version=2017-04-01-preview returns MicrosoftGraphActivityLogs
  with enabled: true
- Microsoft.Insights provider registered on the subscription
- Control categories AuditLogs, SignInLogs, and activity logs are
  confirmed arriving continuously
- Elapsed since enablement: First attempt was last week and let load all weekend but still nothing

Requesting backend verification that the MicrosoftGraphActivityLogs
emission pipeline should be working and that I should be getting these logs
Microsoft Security | Microsoft Entra | Other
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.