5/25/2023 0 Comments Aad logsSelect + Add diagnostic setting to create a new integration or select Edit setting for an existing integration.Įnter a Diagnostic setting name. You can also select Export Settings from either the Audit Logs or Sign-ins page. Go to Azure Active Directory > Diagnostic settings. Sign in to the Azure portal as a Security Administrator or Global Administrator. Looking for how to set up Log Analytics workspace for Azure resources outside of Azure AD? Check out the Collect and view resource logs for Azure Monitor article. Learn how to create a Log Analytics workspace.įollow the steps below to send logs from Azure Active Directory to Azure Monitor. A Log Analytics workspace in your Azure subscription.Global Administrator or Security Administrator access for the Azure AD tenant.You can find the license type of your tenant on the Overview page in Azure AD. If you don't have an Azure subscription, you can sign up for a free trial. This Microsoft Ignite 2018 session video shows the benefits of integrating Azure AD logs and Azure Monitor in practical scenarios: Integrating Azure Active Directory logs with Azure Monitor will automatically enable the Azure Active Directory data connector within Microsoft Sentinel. Learn about the ADAL end-of-support plan. Identify sign-ins from applications still using the Active Directory Authentication Library (ADAL) for authentication. Troubleshoot performance bottlenecks on your application’s sign-in page by correlating application performance data from Azure Application Insights.Īnalyze the Identity Protection risky users and risk detections logs to detect threats in your environment. Use the integration of Azure AD activity logs and Azure Monitor to perform the following tasks:Ĭompare your Azure AD sign-in logs against security logs published by Microsoft Defender for Cloud. This article provides the steps to integrate Azure Active Directory (Azure AD) logs with Azure Monitor. Using Diagnostic settings in Azure Active Directory (Azure AD), you can integrate logs with Azure Monitor so your sign-in activity and the audit trail of changes within your tenant can be analyzed along with other Azure data. Integrate Azure AD logs with Azure Monitor logs
0 Comments
Leave a Reply. |