Tech Tips: CAS Dashboard - User Login Events -
Tarique
SonicWall Employee
User Login events on CAS Dashboard are not real time. It can take up to 30 minutes or up to 24 hours after an event occurs for the corresponding audit log record to be returned in the results of an audit log search.
The following table shows the time it takes for the different services in Office 365.
From Microsoft Docs:
Category: Cloud App Security
Tagged:
2