microsoft / coe-starter-kit

Other
748 stars 220 forks source link

[CoE Starter Kit - QUESTION] Audit Sync Log - Why do some environments have no app launches? #7528

Closed uzma-fis closed 8 months ago

uzma-fis commented 9 months ago

Does this question already exist in our backlog?

What is your question?

Hi there

I seem to get really good data from a default environment that we all use. But just noticed provisioned environments are not picking up canvas app launches. Most likely a permission issue. The account we are using is a PBI Admin/Service Admin and everything you can think of. Not sure why this is happening and looks like any provisioned environments are not being scanned

Any advise?

What solution are you experiencing the issue with?

None

What solution version are you using?

Nov 2023

What app or flow are you having the issue with?

Audit Sync Log v2

What method are you using to get inventory and telemetry?

None

AB#2123

uzma-fis commented 9 months ago

Additional notes, I saw that other environments are being scanned aokay, just wondering why this could be happening. What access should this flow have to apps?

Jenefer-Monroe commented 9 months ago

There are no per environment permissions on the audit log records. Are the apps in inventory and just not showing their launches? Have you tested by launching one and then waiting a few hours to see if it shows up?

uzma-fis commented 9 months ago

The app has been published and users assigned, it will not show any statistics.

Jenefer-Monroe commented 9 months ago

Sorry my question is, does the app show up in the inventory and just not as having a last launched? And have you tried launching it yourself?

uzma-fis commented 9 months ago

Hi there, app is in the inventory and has no last launched date. I can confirm that the audit log is working okay and have latest app launches for many, many others. I haven't launched it myself as it's security trimmed.

Jenefer-Monroe commented 9 months ago

OK please go to the CoE Admin Command Center and see if you ahve any sync flow errors for the audit logs flows image

And then go to the Admin | Audit Logs | Sync Audit Logs (V2) flow, is it on and running? Are there failures or runs that are not completing?

uzma-fis commented 9 months ago

No failures, running daily with success!

uzma-fis commented 9 months ago

image

Running daily as it suits our environment this way

Jenefer-Monroe commented 9 months ago

Do you have access to view the audit logs directly? https://compliance.microsoft.com/auditlogsearch?viewid=Async%20Search If so please see if you find launches there.

uzma-fis commented 9 months ago

Will take a look

uzma-fis commented 9 months ago

Hi there, it's not being picked up, did a few days search.

Jenefer-Monroe commented 9 months ago

ok if the data is not in the raw export then it wont show up for us as we just read from here. To my knowledge there is not a way to hide activity from this log so perhaps no one is launching?

uzma-fis commented 9 months ago

There are people definitely launching it.

Jenefer-Monroe commented 9 months ago

To confirm, you went here and did not find launches correct? https://compliance.microsoft.com/auditlogsearch?viewid=Async%20Search image

uzma-fis commented 9 months ago

100% it is not in there. Another issue I've spotted with the power platform admin view to see the information such as shared with, only shows 1 when there's more

I've got a feeling it could be an app issue.

uzma-fis commented 9 months ago

OR it could be because the app is in dataverse. If you check the launch date/times for the COE environment, do you see any launch data on the canvas apps?

Jenefer-Monroe commented 9 months ago

When you say its an app in Dataverse, do you mean that its a Model Driven App? image

uzma-fis commented 9 months ago

No, it's a canvas app. I checked the environment, it has dataverse enabled.

It doesn't make sense as to why this app isn't logging.

Can you repo the app launch for any of the canvas apps in the COE starter kit please?

Jenefer-Monroe commented 9 months ago

Yes canvas apps work for me in all envt types. Unfortunately then, the fact that its not writing to the audit logs is a product issue, not something I can assist with. We just read form the audit logs. You'll need to create a support ticket to see why the launches are not writing to the audit logs.

uzma-fis commented 8 months ago

Hi there, support ticket has been raised. Will inform you guys.

Also, how does COE scan for "shared with" components in canvas apps? I can see COE last scanned the app this morning, with no updated information on shared users (should be more than 1)

Jenefer-Monroe commented 8 months ago

That is done by this flow: CLEANUP - Admin | Sync Template v3 (Power Apps User Shared With) And its helper. Its a long running operation and so only runs every two weeks. And it only works for Canvas apps. Hope the ticket works! Please do let us know.

uzma-fis commented 8 months ago

Amazing great to know! That then resolves that question. Keep ticket open here so I can update everyone.

uzma-fis commented 8 months ago

I looked at the excel spreadsheet again and it is being logged!! So sorry!

So i'd like to know why COE isn't picking up the exports? No errors etc.

uzma-fis commented 8 months ago

Is there a limitation on how many sync log data there is?

Jenefer-Monroe commented 8 months ago

I just looked back up at your run history and it does look incorrect. This flow is supposed to run hourly. Can you please see, is this the flow you have running? image

uzma-fis commented 8 months ago

Yes we changed it to once a day. Is it a problem for it to change?

Uzma

Sent from Outlook for Androidhttps://aka.ms/AAb9ysg


From: Jenefer Monroe @.> Sent: Thursday, January 25, 2024 11:37:33 PM To: microsoft/coe-starter-kit @.> Cc: Rafique, Uzma Naz @.>; Author @.> Subject: Re: [microsoft/coe-starter-kit] [CoE Starter Kit - QUESTION] Audit Sync Log - Why do some environments have no app launches? (Issue #7528)

I just looked back up at your run history and it does look incorrect. This flow is supposed to run hourly. Can you please see, is this the flow you have running? image.png (view on web)https://github.com/microsoft/coe-starter-kit/assets/89584709/3e9dc670-b410-4387-8a8e-182388a68487

— Reply to this email directly, view it on GitHubhttps://github.com/microsoft/coe-starter-kit/issues/7528#issuecomment-1911170656, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BBUBYSXUNTDFBNGIPMXPQWLYQLUD3AVCNFSM6AAAAABCITRJRSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMJRGE3TANRVGY. You are receiving this because you authored the thread.Message ID: @.***>

The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. FIS is a trading name of the following companies: Alphakinetic Limited (No: 06897969) | FIS Derivatives Utility Services (UK) Limited (No: 9398140) | FIS Energy Solutions Limited (No: 1889028) | FIS Global Execution Services Limited (No. 3127109) | FIS Capital Markets UK Limited (No: 982833) | FIS Treasury Centre Limited (No. 13543636) | Metavante Technologies Limited (No: 2659326) | Virtus Partners Limited (No: 06602363) | Worldpay (UK) Limited (No: 07316500 / FCA No: 530923) | Worldpay Limited (No: 03424752 / FCA No: 504504) | Worldpay AP Limited (No: 05593466 / FCA No: 502597) all registered in England & Wales with their registered office: C/O F I S Corporate Governance, The Walbrook Building, 25 Walbrook, London, EC4N 8AF. The WorldPay entities are authorised by the Financial Conduct Authority under the Payment Service Regulations 2017 for the provision of payment services. | Worldpay (UK) Limited is authorised and regulated by the Financial Conduct Authority for consumer credit activities | FIS Global Execution Services Limited is authorised and regulated by the Financial Conduct Authority | FIS Banking Solutions UK Limited (No: 3517639) and FIS Payments (UK) Limited (No: 4215488) are registered in England & Wales with their registered office at 1st Floor Tricorn House, 51-53 Hagley Road, Edgbaston, Birmingham, West Midlands, B16 8TU, United Kingdom | FIS Payments (UK) Limited is authorised and regulated by the Financial Conduct Authority; some services are covered by the Financial Ombudsman Service (in the UK). Worldpay B.V. has its registered office in Amsterdam, the Netherlands (Handelsregister KvK No: 60494344). WPBV holds a licence from and is included in the register kept by De Nederlandsche Bank, which registration can be consulted through www.dnb.nl. Calls to and from the companies may be recorded for quality purposes. | All of the named companies are ultimately owned by Fidelity National Information Services, Inc., an NYSE listed trading Company with the ticker symbol FIS. Message Encrypted via TLS connection

Jenefer-Monroe commented 8 months ago

Yes you wont get all the data. The flow is intended to run hourly and fetch the data hourly image

uzma-fis commented 8 months ago

Interesting, perhaps it's so much data it cannot load the additional but doesn't cause errors.

Will monitor today and attempt several app launches to see this specific behavior

uzma-fis commented 8 months ago

Issue resolved! Getting the data now - will need to monitor our costings! Feel free to close, so my bad!

Jenefer-Monroe commented 8 months ago

Wonderful news! I'm so glad you kept pressing till we got tis resolved! Enjoy your logs, and please return with new issues as needed. I'll go ahead and close.