Make legacy authentication transparent with Azure Log Analytics

You can activate Legacy Authentication via Microsoft Azure using this blog.
Create a log analytics workbook in Azure
Browseto https://portal.azure.com
Create a resource
Search for Log Analytics
More details can be found here


Click on create - to set up your log analytics environment

create a workspace
Name your workspace
Choose your subscription - in this case a test environment
Create a resource group for your logs.
Choose the location: If you are in Europe, then best europe.
Pricing tier you can choose yourself, it depends on the need. In this demo we work with 7 days. (free)
You have 5GB free per paid account.
You can use pay-as-you-go to pay for what you use.

Deployment underway!

Go to Azure Active Directory
Via portal.Azure.com
Or via: ActiveDirectoryMenuBlade/Overview

Navigate to diagnostic settings

choose a name for the diagnostics settings
Choose which logs you want to capture.
Audit Logs
Sign In Logs
Select 'send to log Analytics
Choose your subscription
Choose your Workspace
...

That is it!

Workbooks
Navigate to Workbooks
These are 'workbook' templates created by Microsoft that make it easier to get clear reports & insights without interactions.
Select the desired logbook.

Legacy Authentication
In this case, you want to be able to see how many applications or users are still using Legacy Authentication today.
You can see this in the workbook - Legacy Authentication
Click on:

You now have insights on the sign-ins numbers and trends in your organisation
Useful for: Adjust where necessary.
Seeing the risks of failed authentication action
Unfortunately, the risks of successful logins...

Do you want to disable basic authentication?
Then start using Azure Active Directory Security Defaults!