Collect Azure Active Directory Security logs with OMS
You should be able to see reports regarding "Azure Active Directory" Security logs. (sign-in/audit/...)
There already is a Azure possibility to see Azure Active Directory Reports. It would be nice to have this data in OMS.
Thank you for your feedback and upvoting this request. Currently AAD logs are already available through Azure Diagnostics.
Please check out the AAD logs in Azure Diagnostics and see if that would cater to your scenario or needs. Feel free to revert back if you have any further feedback. Thank you.
Lyndon Frei commented
The status of this is still planned... however, isn't this request fulfilled now with the export data settings in Azure AD?
Mike C. commented
This is one of the most fundamental security use cases for any client of both O365 and OMS. I can't imagine any feature that would be higher priority than this if MS is serious about OMS as a security monitoring platform.
Aaron Lawrence commented
Again, it seems odd that you don't support Microsoft's own flagship cloud identity platform. A lot of work is going into AAD at the moment (B2B and B2C) and it powers a lot of other things including Office 365.
While at it add support for Azure AD Privileged Identity Management and O365 audits logs. Audits logs are at the heart of any forensic analysis, OI must become the single stop for all these logs and Azure AD is gaining momentum at an incredible pace.
Would also add that in addition to Azure AD/Premium reports, it would be nice to have the Advanced Threat Analytics alerts be reported in OMS as well. Any timeline on when the reporting might be available in OMS? Sometime in FY16 or beyond?
Philip Van de Vyver commented