Azure AD Sign-in logs not sending to log analytics workspace on two different tenants and subscriptions. Problem with the service?

Ag-8821 41 Reputation points
2022-04-15T15:30:24.503+00:00

I have been facing an issue with trying to send AAD sign-in logs to a log analytics workspace on two disjoined tenants and subscriptions. They are an AAD P1 and P2 licensed tenant. Which makes me think there is a problem with the service? What does get sent however are the audit logs but all selected signin log types are not sent, the tables are not even created in the log analytics workspace. And this is after waiting multiple days.

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,027 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,604 questions
{count} vote

Accepted answer
  1. AnuragSingh-MSFT 21,246 Reputation points
    2022-05-06T07:16:11.58+00:00

    @Ag-8821 , @Valentino Defelice , @Anonymous , @Colin Edwards ,

    I apologize for the inconvenience caused because of this issue. Also, thank you for your continued support to help us investigate it and improve Azure.
    Based on these reported issues, our internal team investigated and currently a long-term solution is under review/deployment to avoid it from happening again in future. Many of the premium tenants would have already started seeing the sign-in logs in LogAnalytics workspace after enabling the diagnostics setting in Azure AD.

    Please let us know if you have any questions.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful