[CoE Starter Kit - QUESTION] QUESTION audit flow run fails

[AlainCote]

Does this question already exist in our backlog?

• I have checked and confirm this is a new question.

What is your question?

I have a similar error to this closed case but the error i am getting in the Retry logic list audit log content is different
[CoE Starter Kit - QUESTION] Sync Audit Logs V2 fails to run with error : Get_Azure_Secret #7250
Closed

The error code i am getting looks like a expression not being resolve or something. I am using plain text variable not they azure key vault, so the fisrt error i understand it is not related to the faillure of the flow.

What solution are you experiencing the issue with?

Core

What solution version are you using?

november 2024

What app or flow are you having the issue with?

Admin | Audit Logs | Sync Audit Logs (V2)

What method are you using to get inventory and telemetry?

Cloud flows

[Jenefer-Monroe]

Which api are you using for the audit log?

• Graph API
• Office 365 Management API

Have you turned on the audit logs for the tenant? Before you set up the audit log flows

[AlainCote]

I am using the office 365 management API. I don't have the approriate right to validate if the audit log are turned on in the tenant but the global admin will verify this. But they are not suppose to be on by default ?

[Jenefer-Monroe]

No they are not on by default.
Here is the easiest way to turn them on: turn on auditing

[AlainCote]

Hi Jenefer,

I still have the same error code even with the audit log on.

Could it be related to a environment variable not configure ? According to the documentation, the only two variables i have to configure for this flow to run, is the one for the app Id and the secret. In the termintae action i have a 500 error message, am i missing a url somewhere ?

By the way, thanks for you help you are really super good (if no one told you before) !

[Jenefer-Monroe]

Let's check your env vars. For plain text password and O365 api they should look like this:

And then lets check your app registration. Make sure you have application, not delegated, permissions

[AlainCote]

Sorry was busy for a while on something else. So the audit flow is running now, it was a temporary glitch i guess. I just restarter it and it work fine now. I have a last problem with the page app usage of the report, i dont see any lauch on the visual, should i open a new ticket for this or we can continue on this one.

[AlainCote]

Could my problem be link to the purview issue #9268 ?

[Jenefer-Monroe]

Is this flow turned on? Admin | Audit Logs | Update Data (V2)

Is data populating here?

[AlainCote]

Ok so the flow is working ok. But the view you are sharing seems to be block for me, do you need global admin to see this particular view ? Do you have any documentation regarding this particular view ?

[Jenefer-Monroe]

Which view do you mean? This one?

That is the Power Platform Admin View app which is part of the CoE install.

[AlainCote]

Wow ok never thought there was a app to look at the audit inside the core component module. i can see some activities but only from 1 user on one environment (model driven on teams). Can i look in Azute / Purview / compliance portal to see if thre i more activirties that is not recorded inside that app ?

[Jenefer-Monroe]

There are not filters by user or envt in our audit log flows. So my guess is that you have something filtered in the PBI.
Can you please look to at the app I referenced to see if more complete data is there?

[AlainCote]

No filter on the report but i can see the th flow Admin | Audit Logs | Update Data (V2) ran only once 4 days ago. What is it suppos to collect there is no description ? Anything i should look in history of the audit flow ?

[Jenefer-Monroe]

This flow: Admin | Audit Logs | Update Data (V2)
runs once per audit log launch found, to update the app's last launch record

This flow: Admin | Audit Logs | Sync Audit Logs (V2)
should run hourly and collect the logs from that hour

Can you please validate that the second is running and passing hourly?
Please launch some canvas apps, and then wait to see if those launches get recorded.

[Jenefer-Monroe]

Closing out as no further action for starter kit team