How can we improve Azure Log Analytics ?

Collect Azure Active Directory Security logs with OMS

You should be able to see reports regarding "Azure Active Directory" Security logs. (sign-in/audit/...)

There already is a Azure possibility to see Azure Active Directory Reports. It would be nice to have this data in OMS.

158 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
    Password icon
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Philip Van de Vyver shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

    6 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
      Password icon
      Signed in as (Sign out)
      Submitting...
      • Lyndon Frei commented  ·   ·  Flag as inappropriate

        The status of this is still planned... however, isn't this request fulfilled now with the export data settings in Azure AD?

      • Mike C. commented  ·   ·  Flag as inappropriate

        This is one of the most fundamental security use cases for any client of both O365 and OMS. I can't imagine any feature that would be higher priority than this if MS is serious about OMS as a security monitoring platform.

      • Aaron Lawrence commented  ·   ·  Flag as inappropriate

        Again, it seems odd that you don't support Microsoft's own flagship cloud identity platform. A lot of work is going into AAD at the moment (B2B and B2C) and it powers a lot of other things including Office 365.

      • Daniele commented  ·   ·  Flag as inappropriate

        While at it add support for Azure AD Privileged Identity Management and O365 audits logs. Audits logs are at the heart of any forensic analysis, OI must become the single stop for all these logs and Azure AD is gaining momentum at an incredible pace.

      • Shuhan commented  ·   ·  Flag as inappropriate

        Would also add that in addition to Azure AD/Premium reports, it would be nice to have the Advanced Threat Analytics alerts be reported in OMS as well. Any timeline on when the reporting might be available in OMS? Sometime in FY16 or beyond?

      Feedback and Knowledge Base