Microsoft Entra ID Logs (Event Hubs)
Microsoft Entra ID Logs (Event Hubs) is an application template in the Office Software (SaaS) and IAM category of the Application Catalog. Its card describes it as The same Entra ID sign-in and audit logs, plus non-interactive, service-principal and managed-identity sign-ins, streamed by a diagnostic setting through Azure Event Hubs. No Entra app needed.. Installing it from the form below adds an application to Applications. Its template ID, AzureAuditEventHub, is the one listed on Application Templates.
Menu path: Applications → Install Application → Microsoft Entra ID Logs (Event Hubs) · URL path: /v2/applications/install?template=AzureAuditEventHub
Task guide: Microsoft Entra ID Logs (Event Hubs)
Application
The two fields every install form starts with: Instance name names this installation in its URL, and Display name is shown for it on Applications and its details page.
| Field | Type | Required | Default |
|---|---|---|---|
| Instance name | Text | Yes | default |
| Display name | Text | Yes | Default |
Configuration
| Field | Type | Required | Default |
|---|---|---|---|
| Event Hub connection string (Listen policy, including EntityPath) | Password | Yes | - |
| consumer group this datasource reads with (create a dedicated one if anything else already reads this hub) | Text | Yes | $Default |
| Description | Text | No | - |
Advanced configuration
Collapsed when the form opens; click its heading to show the data lake the application writes to.
| Field | Type | Required | Default |
|---|---|---|---|
| datalake | Text | Yes | managed |
| datalake index name | Text | Yes | MSEntra |
Install
Install Application installs Microsoft Entra ID Logs (Event Hubs) with the values in the form; Dry run checks them first, without installing (see Dry run); Cancel returns to the catalog without installing. Every template's form shares the shape described under Install Form.