Azure AD Sign In Reports SLOW

[twratl]

Is it expected that the Azure AD sign in reports are slow to produce data?

After a steampipe plugin install azuread and authenticating via the az cli I run select * from azuread_sign_in_report where created_date_time >= '<something recent>' and it takes on the order of minutes to get a response of 14 records.

I have a P2 license and appropriate permissions and can successfully view the sign in reports in the portal without issue.

[e-gineer]

That does seem very slow, do you have a large number of sign in records in your environment?

I believe we also have opportunities to improve the performance of this query via quals. Right now it appears the list query does not optimize any API calls based on the where clause (code). But, the hamilton SDK does support query parameters / options we could populate from the qualifiers in the query (code).

[twratl]

I wouldn't classify it as large. It's a small company and we only use Azure for AD/SSO/Office 365. No workloads are running there.