Capture All sign-in events from Log Analytics workspace in a report.

[RemyBosman]

Hi all,

I hope I've been trying to re-invent the wheel, and that anyone has a simple alternative for what I'm trying to achieve. 

I have a challenge regarding Azure Log Analytics workspace in combination with Power BI. The challenge I'm facing is that I want to analyse the sign-in events caputered by Azure AD. 

The question seems simple, but the Log Analytics queries have limitations in size and rowcount. The client im working for has millions of sign -in events per day. So querying the past year is not working. 

I've enabled the feature to export all sign-in events to Azure Blob Storage, however when importing these blobs and drilling into the content I get an error in Power BI. "Details: "We found extra characters at the end of JSON input."

To handle this error I wrote a funtion in Power BI to change the blob to text, but the result is that my dataset is becoming too large. Even dataflows cannot evaluatie this within the maximum of two hours.

Am I missing something, what would be a good way to achieve my goal?

Many thanks, any help is appreciated.

Regards,

Rémy

[v-kelly-msft]

Hi  @RemyBosman ,

Better write the funtion in  Azure Data Factory to transform the data type.Then test whether it will work.

Best Regards,
Kelly

Did I answer your question? Mark my post as a solution!

[GilbertQ]

Hi there

You would need to use Azure Data Factory to transform the data into the required format for reporting and then possibly put that into a SQL Server table, which will make it easy to read into Power BI.