{"id":7010,"date":"2023-06-12T04:21:58","date_gmt":"2023-06-12T04:21:58","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=7010"},"modified":"2023-06-12T04:22:00","modified_gmt":"2023-06-12T04:22:00","slug":"how-to-view-azure-ad-logs-for-azure-applications-and-managed-identities-for-azure-resources","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/how-to-view-azure-ad-logs-for-azure-applications-and-managed-identities-for-azure-resources","title":{"rendered":"How to view Azure AD Logs for Azure Applications and Managed identities for Azure resources"},"content":{"rendered":"\n

When you look at Sign In’s for Azure AD it defaults to showing you user sign ins. <\/p>\n\n\n\n

MSISignIns_*.csv<\/p>\n\n\n\n

ApplicationSignIns_*.csv<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

CSV Columns<\/p>\n\n\n\n

Date (UTC), Request ID, Correlation ID, Service principal ID, Service principal name ,Credential key ID ,Credential thumbprint, Application Application ID,\u00a0 Resource Resource ID,\u00a0 Resource tenant ID, Home tenant ID, Home tenant name, IP address, Location, Status, Sign-in, error code, Failure, reason Conditional Access<\/p>\n","protected":false},"excerpt":{"rendered":"

When you look at Sign In’s for Azure AD it defaults to showing you user sign ins. MSISignIns_*.csv ApplicationSignIns_*.csv CSV Columns Date (UTC), Request ID, Correlation ID, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[4242,4243,4245,4241,4244],"class_list":["post-7010","post","type-post","status-publish","format-standard","hentry","category-research","tag-applicationsignins_","tag-azure-applications","tag-managed-identities","tag-msisignins","tag-signins"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t