Integrate Microsoft Entra logs with Azure Monitor logs
A Log Analytics workspace allows you to collect data based on a variety or requirements, such as geographic location of the data, subscription boundaries, or access to resources.
Note: Use the integration of Microsoft Entra activity logs and Azure Monitor to perform the following tasks:
*-> Compare your Microsoft Entra sign-in logs against security logs published by Microsoft Defender for Cloud.
* Troubleshoot performance bottlenecks on your application's sign-in page by correlating application performance data from Azure Application Insights.
* Analyze the Identity Protection risky users and risk detections logs to detect threats in your environment.
* Identify sign-ins from applications still using the Active Directory Authentication Library (ADAL) for authentication.
Reference:
https://learn.microsoft.com/en-us/entra/identity/monitoring-health/howto-integrate-activity-logs-with-azure-monitor-logs