How to access user access logs for Dynamics 365 for Operations?

(0) Share

Report

Posted on by Leo0

Hello,

We use D365 Operations and have a need to pull the user access activity data (login / logout date time) from D365 Operations into a 3rd party application.

I understand that these logs are stored in sysuserlog table (??) but when I query this table (through VS), there are no records. Does this logging need to be turned on?

Also, what is the best way to extract this data from D365 Operations, since we have no direct access to the db. I can think of the following but wondering if someone has thoughts on the pros and cons or if there is a better way?

1) OData: Not sure if there is a data entity for sysuserlog and has its IsPublic property as Yes.

2) Export the data entity to a SQL Azure database using entity export...

https://blogs.msdn.microsoft.com/dynamicsaxbi/2016/07/27/export-dynamics-ax7-entities-to-your-own-azure-sql-database/

Thank you.

Categories:

Development / Customization / SDK

All responses (6)

Answers (0)

Sort by

Martin Dráb 240,835 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

SysUserLog table used to be used in previous versions of AX and login time meant (more or less) starting the client and logging off meant closing the client. As we don't have such a client application anymore, the whole concept of "login time" and "logout time" is far from clearly defined.

How do you define login time and logout time in the context of a web application (receiving messages through a stateless HTTP protocol) that delegates authentication to AAD and can be accessed (so it doesn't do any logging on and off)?
Leo0 on at

Like (0)

Report
Copy link

Link copied!

Thank you, Martin. Appreciate your response.

We did realize that sysuserlog is not used anymore after we dug deeper into the code and the way you have explained makes sense.

I also had a chance to go through another post "User Logs in AX" (where you had shared your thoughts as well). Their requirement is exactly the same as ours - to pull this data into a SIEM tool.

Thinking aloud - I would be most interested in:

-when someone "logs in" (typing in AD email / password)

-accessing an AX form

-other activity on AX

Since the authentication is delegated to AAD, I am wondering if this information can be obtained through Azure App Insights, since AX7 is a cloud Azure app?
Martin Dráb 240,835 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

AAD surely have some logs. For example, this is what you can find under Sign-ins on the new Azure portal:

It doesn't look particularly useful to me, because logging in and using the application (while already logged in) are two different things. But if you find these data useful, we can explore the options for extracting them.
Community Member on at

Like (0)

Report
Copy link

Link copied!

Hi Martin,

I have one doubt. I can see user logs form in system admin > inquiries, though I am not able to view any data inside that. Can same form be used to capture user activities? If yes then do we need to enable it from anywhere?

Regards,

Smit
Suggested answer

Martin Dráb 240,835 Most Valuable Professional on at

Like (2)

Report
Copy link

Link copied!

You're lucky, it just become supported (in Platform Update 11).
Bhanu Pratap Singh 272 on at

Like (1)

Report
Copy link

Link copied!

Hello Leo,

have a you got a solution for this, I have the same requirement where I need to capture user activity logs.

Please share the solution or approach.

Thanks ion advance.