{"id":7645,"date":"2024-02-07T03:16:01","date_gmt":"2024-02-07T03:16:01","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=7645"},"modified":"2024-02-07T03:16:03","modified_gmt":"2024-02-07T03:16:03","slug":"azure-sign-in-logs-use-wildcards-and-filter-specific-countries-from-search-criteria","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/azure-sign-in-logs-use-wildcards-and-filter-specific-countries-from-search-criteria","title":{"rendered":"Azure Sign-in Logs – Use Wildcards and Filter Specific countries from search criteria"},"content":{"rendered":"\n

Unfortunately the Country Filter in the Azure AS Sign in Logs is hard match , ( not contains ) <\/p>\n\n\n\n

So you either have to download the logs to Excel and use filtering in there<\/p>\n\n\n\n

You can download and filter in Excel.<\/p>\n\n\n\n

Or use the Log Analytics workspace where the Azure AD sign in Logs https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/monitoring-health\/howto-integrate-activity-logs-with-azure-monitor-logs<\/a> are going to query this with country code<\/p>\n\n\n\n

SigninLogs\n| where (LocationDetails[\"countryOrRegion\"]) == \"AU\"<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
Unfortunately the Country Filter in the Azure AS Sign in Logs is hard match , ( not contains ) So you either have to download the logs […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-7645","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t