You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/reports-monitoring/howto-access-activity-logs.md
+7-4Lines changed: 7 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -29,6 +29,9 @@ You can access Azure AD activity logs and reports using the following methods:
29
29
-[Export activity logs for **storage and queries**](#export-logs-for-storage-and-queries)
30
30
31
31
Each of these methods provides you with capabilities that may align with certain scenarios. This article describes those scenarios, including recommendations and details about related reports that use the data in the activity logs. Explore the options in this article to learn about those scenarios so you can choose the right method.
The required roles and licenses may vary based on the report. Global Administrator can access all reports, but we recommend using a role with least privilege access to align with the [Zero Trust guidance](/security/zero-trust/zero-trust-overview).
@@ -58,7 +61,7 @@ The SIEM tools you can integrate with your event hub can provide analysis and mo
58
61
59
62
### Quick steps
60
63
61
-
1.Navigate to the [Azure portal](https://portal.azure.com) using one of the required roles.
64
+
1.Sign in to the [Azure portal](https://portal.azure.com) using one of the required roles.
62
65
1. Create an Event Hubs namespace and event hub.
63
66
1. Go to **Azure AD** > **Diagnostic settings**.
64
67
1. Choose the logs you want to stream, select the **Stream to an event hub** option, and complete the fields.
@@ -102,7 +105,7 @@ Integrating Azure AD logs with Azure Monitor logs provides a centralized locatio
102
105
103
106
### Quick steps
104
107
105
-
1.Navigate to the [Azure portal](https://portal.azure.com) using one of the required roles.
108
+
1.Sign in to the [Azure portal](https://portal.azure.com) using one of the required roles.
106
109
1.[Create a Log Analytics workspace](../../azure-monitor/learn/quick-create-workspace.md).
107
110
1. Go to **Azure AD** > **Diagnostic settings**.
108
111
1. Choose the logs you want to stream, select the **Send to Log Analytics workspace** option, and complete the fields.
@@ -200,15 +203,15 @@ Use the following basic steps to archive or download your activity logs.
200
203
201
204
### Archive activity logs to a storage account
202
205
203
-
1.Navigate to the [Azure portal](https://portal.azure.com) using one of the required roles.
206
+
1.Sign in to the [Azure portal](https://portal.azure.com) using one of the required roles.
204
207
1. Create a storage account.
205
208
1. Go to **Azure AD** > **Diagnostic settings**.
206
209
1. Choose the logs you want to stream, select the **Archive to a storage account** option, and complete the fields.
207
210
-[Review the data retention policies](reference-reports-data-retention.md)
208
211
209
212
#### Manually download activity logs
210
213
211
-
1.Navigate to the [Azure portal](https://portal.azure.com) using one of the required roles.
214
+
1.Sign in to the [Azure portal](https://portal.azure.com) using one of the required roles.
212
215
1. Go to **Azure AD** and select **Audit logs**, **Sign-in logs**, or **Provisioning logs** from the **Monitoring** menu.
213
216
1. Select **Download**.
214
217
-[Learn more about how to download logs](howto-download-logs.md).
0 commit comments