How to Send Entra ID Logs to Log Analytics

We can view Entra ID log data from the portal, but that is only available for 30 days. We may want to store important log data like sign in activity and risky user actions for more than 30 days. Or we may need to send that data to other systems for future analysis and storage. This video goes over how to send Entra ID logs to Log Analytics. It starts with setting up a new Log Analytics workspace, then configuring logging to the workspace. Finally, we run queries in Log Analytics to verify logging is enabled.

00:00 – Start
02:17 – Create a Log Analytics Workspace
03:24 – Set Log Analytics Data Retention
04:19 – Send Entra ID Log Data to Log Analytics
06:19 – Search Log Analytics

Links
Free Azure guide! Subscribe to the newsletter
https://subscribepage.io/rbsIjt

Zero to Hero with Azure Virtual Desktop
https://www.udemy.com/course/zero-to-hero-with-windows-virtual-desktop/?referralCode=B2FE49E6FCEE7A7EA8D4

Hybrid Identity with Windows AD and Azure AD
https://www.udemy.com/course/hybrid-identity-and-azure-active-directory/?referralCode=7F62C4C6FD05C73ACCC3

Windows 365 Enterprise and Intune Management
https://www.udemy.com/course/windows-365-enterprise-and-intune-management/?referralCode=4A1ED105341D0AA20D2E