{"id":7010,"date":"2023-06-12T04:21:58","date_gmt":"2023-06-12T04:21:58","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=7010"},"modified":"2023-06-12T04:22:00","modified_gmt":"2023-06-12T04:22:00","slug":"how-to-view-azure-ad-logs-for-azure-applications-and-managed-identities-for-azure-resources","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/how-to-view-azure-ad-logs-for-azure-applications-and-managed-identities-for-azure-resources","title":{"rendered":"How to view Azure AD Logs for Azure Applications and Managed identities for Azure resources"},"content":{"rendered":"\n<p>When you look at Sign In&#8217;s for Azure AD it defaults to showing you user sign ins. <\/p>\n\n\n\n<p>MSISignIns_*.csv<\/p>\n\n\n\n<p>ApplicationSignIns_*.csv<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2023\/06\/image-16.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"475\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2023\/06\/image-16-1024x475.png\" alt=\"\" class=\"wp-image-7011 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2023\/06\/image-16-1024x475.png 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2023\/06\/image-16-300x139.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2023\/06\/image-16-768x356.png 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2023\/06\/image-16-1536x712.png 1536w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2023\/06\/image-16.png 1911w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p>CSV Columns<\/p>\n\n\n\n<p>Date (UTC), Request ID, Correlation ID, Service principal ID, Service principal name ,Credential key ID ,Credential thumbprint, Application Application ID,\u00a0 Resource Resource ID,\u00a0 Resource tenant ID, Home tenant ID, Home tenant name, IP address, Location, Status, Sign-in, error code, Failure, reason Conditional Access<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When you look at Sign In&#8217;s for Azure AD it defaults to showing you user sign ins. MSISignIns_*.csv ApplicationSignIns_*.csv CSV Columns Date (UTC), Request ID, Correlation ID, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[4242,4243,4245,4241,4244],"class_list":["post-7010","post","type-post","status-publish","format-standard","hentry","category-research","tag-applicationsignins_","tag-azure-applications","tag-managed-identities","tag-msisignins","tag-signins"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/7010","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=7010"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/7010\/revisions"}],"predecessor-version":[{"id":7012,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/7010\/revisions\/7012"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=7010"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=7010"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=7010"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}