|
Configuring the Sign-in Logs to be Sent to a Log Analytics Workspace
To configure a Log Analytics Workspace as the destination for Sign--in logs of the target Azure subscription, do the following:
Login to the Microsoft Azure Portal and select the Sign-in Logs option shown in the figure. Then, a page will then appear listing the log entries. Next, proceed to configure a diagnostic setting for sending the Sign-in logs to a Log Analytics Workspace. For that, click on the Export Data settings button indicated in that page. In the page that opens, the diagnostic settings for the sign-in logs will then appear. If any of the existing diagnostic settings have already been configured with Log Analytics Workspaces, then this page will display these workspace names and the diagnostic settings they map to. However, If the Log Analytics workspace column here is blank for all the existing diagnostic settings, it is a clear indication that the sign-in logs are yet to be configured to be sent to any Log Analytics Workspace. In this case therefore, you should create a new diagnostic setting, where a Log Analytics Workspace is configured as the destination for sign-in logs. To achieve this, click on the Add diagnostic setting button in the page. In page that appears next, first specify the Diagnostic setting name. Then, select the Categories of events you want logged by clicking on the corresponding check boxes. To make sure that this test report valid values for all measures, select the checkboxes indicated in the left side of the page. Then, from the Destination details section, select Send to Log Analytics workspace.
Upon selecting this option, you will be required to select the Subscription for which this diagnostic setting applies and the Log Analytics workspace to which the Sign-in logs have to be sent. Make sure that you select the Azure subscription being monitored from the Subscription drop-down. Finally, to save the configuration, click on the ,Save button.
|