Not recieving logs in Azure sentinel

johng2234 21 Reputation points
2022-03-25T11:26:28.83+00:00

Enabled azure ad connector in sentinel, not able to see sign in logs, can see audit logs, activity logs

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,474 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,211 questions
{count} votes

Accepted answer
  1. Andrew Blumhardt 9,866 Reputation points Microsoft Employee
    2022-03-25T15:15:18.423+00:00

    It takes about 10 minutes to create a new table in Log Analytics. Check to see that you have new activity in those logs. In a lab for example these logs may not have new data right away. Let us know if the issue persists but you should see new records after a reasonable delay.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.