Search This Blog

Tuesday, November 29, 2022

how long does Azure AD store events in the sign-in logs?

 https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/reference-reports-data-retention#how-long-does-azure-ad-store-the-data

Activity reports

ReportAzure AD FreeAzure AD Premium P1Azure AD Premium P2
Audit logsSeven days30 days30 days
Sign-insSeven days30 days30 days
Azure AD MFA usage30 days30 days30 days

You can retain the audit and sign-in activity data for longer than the default retention period outlined above by routing it to an Azure storage account using Azure Monitor. For more information, see Archive Azure AD logs to an Azure storage account.

Security signals

ReportAzure AD FreeAzure AD Premium P1Azure AD Premium P2
Risky usersNo limitNo limitNo limit
Risky sign-ins7 days30 days90 days

No comments:

Post a Comment