Azure AD Sign-in logs not sending to log analytics workspace on two different tenants and subscriptions. Problem with the service?

Ag-8821 36 Reputation points

I have been facing an issue with trying to send AAD sign-in logs to a log analytics workspace on two disjoined tenants and subscriptions. They are an AAD P1 and P2 licensed tenant. Which makes me think there is a problem with the service? What does get sent however are the audit logs but all selected signin log types are not sent, the tables are not even created in the log analytics workspace. And this is after waiting multiple days.

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,094 questions
Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,893 questions
{count} vote

Accepted answer
  1. AnuragSingh-MSFT 13,071 Reputation points

    @Ag-8821 , @Valentino Defelice , @Andreas Wikström , @Colin Edwards ,

    I apologize for the inconvenience caused because of this issue. Also, thank you for your continued support to help us investigate it and improve Azure.
    Based on these reported issues, our internal team investigated and currently a long-term solution is under review/deployment to avoid it from happening again in future. Many of the premium tenants would have already started seeing the sign-in logs in LogAnalytics workspace after enabling the diagnostics setting in Azure AD.

    Please let us know if you have any questions.

0 additional answers

Sort by: Most helpful