I'm trying to track down who created some users in Azure, but I'm specifically interested in user creations from over a year ago. Most resources seem to indicate that the logs typically only go back 30 days. Is there any way around this, or do I just have to accept that the information is lost?
2 Answers
It looks like you're out of luck here. Azure's audit log retention is just 30 days, so any user creation logs older than that are no longer accessible. You might want to set up long-term storage for audit logs in the future to avoid this issue.
As others mentioned, if you haven't stored your logs in a long-term solution like Azure Log Analytics or a storage account, then finding that info from a year ago isn't possible. It's a good idea to set up proactive measures now for better tracking in the future!
Thanks for the tip! I'll definitely consider setting that up for future reference.