All Apps and Add-ons

TA-MS-AAD - Pulling Duplicate azure:aad:signin Logs

pizzor
Path Finder

Noticed that the Azure Addon is pulling the same logs repeatedly, roughly about 12 copies per log. We're using version 3.0.1 of the addon. I did see in another thread "2.0.1 fixes the duplicate alert data issue" but we're still getting it. Haven't upgraded to 3.1.0 as I didn't see any mention in the release notes about this particular issue.

Anyone else run into this and found a way to fix it?

Labels (1)
0 Karma

preet1312
New Member

Is this resolve, I am also facing the same issue only with the signin logs,

0 Karma

pizzor
Path Finder

From what I've seen it seems like there isn't really a fix to pulling duplicate logs. I've had to compensate by deduping logs by their ID within my search criteria whenever I'm including them.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...