How to Send Entra ID Logs to Log Analytics

We can view Entra ID log data from the portal, but that is only available for 30 days. We may want to store important log data like sign in activity and risky user actions for more than 30 days. Or we may need to send that data to other systems for future analysis and storage. This video goes over how to send Entra ID logs to Log Analytics. It starts with setting up a new Log Analytics workspace, then configuring logging to the workspace. Finally, we run queries in Log Analytics to verify logging is enabled.
00:00 - Start
02:17 - Create a Log Analytics Workspace
03:24 - Set Log Analytics Data Retention
04:19 - Send Entra ID Log Data to Log Analytics
06:19 - Search Log Analytics
Links
Free Azure guide! Subscribe to the newsletter
subscribepage.io/rbsIjt
Zero to Hero with Azure Virtual Desktop
www.udemy.com/course/zero-to-...
Hybrid Identity with Windows AD and Azure AD
www.udemy.com/course/hybrid-i...
Windows 365 Enterprise and Intune Management
www.udemy.com/course/windows-...

[@ramasamynagappan7586]

Great job

[@Ciraltos]

Thanks!