How to monitor Azure Active Directory Sign-in logs with grafana

Grafana Azure Monitor
, ,
1

Hi, I’m using Grafana V9.1.5, Azure Monitor is configured as a data source using a service principal, a workspace is running with diagnostic settings to catch Administrative, security and Send to log Analytics workspace checkboxes, I have been trying to configure a Dashboard to show the Azure AD Sign-in logs but I can’t find a way to make it work, any help to provide me to reach that goal? Thanks in advance!

PS. I added the Linux VM where grafana is running and I get metrics then service principal is running.

2

Are you looking for Security Events for log on and log off? Those are available in the Security events table by specific EventIDs.

SecurityEvent
| distinct EventID, Activity

4624 - An account was successfully logged on.
4634 - An account was logged off.
4625 - An account failed to log on.
4648 - A logon was attempted using explicit credentials.

3

Thanks for your help, the request was more related to the configuration I was eventually able to perform.