Azure AD 存储报告数据多长时间?How long does Azure AD store reporting data?

本文介绍 Azure Active Directory 中不同活动报告的数据保留策略。In this article, you learn about the data retention policies for the different activity reports in Azure Active Directory.

Azure AD 何时开始收集数据?When does Azure AD start collecting data?

Azure AD 版本Azure AD Edition 开始收集Collection Start
Azure AD Premium P1Azure AD Premium P1
Azure AD Premium P2Azure AD Premium P2
注册订阅时When you sign up for a subscription
Azure AD FreeAzure AD Free 首次打开 Azure Active Directory 边栏选项卡或使用报告 APIThe first time you open the Azure Active Directory blade or use the reporting APIs

活动数据何时出现在 Azure 门户中?When is the activity data available in the Azure portal?

  • 立即 - 如果已在 Azure 门户中使用报告。Immediately - If you have already been working with reports in the Azure portal.
  • 2 小时内 - 如果尚未在 Azure 门户中启用报告。Within 2 hours - If you haven’t turned on reporting in the Azure portal.

获得高级许可证后多久可看见活动数据?How soon can I see activities data after getting a premium license?

如果已经拥有免费许可证的活动数据,则可在升级时立即看到这些数据。If you already have activities data with your free license, then you can see it immediately on upgrade. 升级到高级许可证后,如果没有任何数据,则需要在一到两天后,数据才会显示在报告中。If you don’t have any data, then it will take one or two days for the data to show up in the reports after you upgrade to a premium license.


获得 Azure AD Premium 许可证后是否能查看上个月的数据?Can I see last month's data after getting an Azure AD premium license?

如果最近刚切换到高级版本(包括试用版),则最初最多能看到 7 天的数据。If you recently switched to a premium version (including a trial version), you can see data up to 7 days initially. 随着数据累积,可以看到过去 30 天的数据。When data accumulates, you can see data for the past 30 days.


Azure AD 存储数据多长时间?How long does Azure AD store the data?

活动报告Activity reports

报表Report Azure AD FreeAzure AD Free Azure AD Premium P1Azure AD Premium P1 Azure AD Premium P2Azure AD Premium P2
审核日志Audit logs 7 天7 days 30 天30 days 30 天30 days
登录Sign-ins 7 天7 days 30 天30 days 30 天30 days
Azure MFA 使用情况Azure MFA usage 30 天30 days 30 天30 days 30 天30 days

通过使用 Azure Monitor 将审核和登录活动数据路由到 Azure 存储帐户,可以使这些活动数据的保留时间长于上述默认保留期限。You can retain the audit and sign-in activity data for longer than the default retention period outlined above by routing it to an Azure storage account using Azure Monitor.

安全信号Security signals

报表Report Azure AD FreeAzure AD Free Azure AD Premium P1Azure AD Premium P1 Azure AD Premium P2Azure AD Premium P2
有风险的用户Users at risk 7 天7 days 30 天30 days 90 天90 days
有风险的登录Risky sign-ins 7 天7 days 30 天30 days 90 天90 days