Azure Active Directory: Days Since Last AADC Sync | Voters

Azure Active Directory: Days Since Last AADC Sync

submitted

Robbie Kibler

Counts the number of days since the last Azure Active Directory Connect (AADC) sync. Useful for determining if there is an issue as it should always be <1.

SystemInfo.DirectorySync[?DaysSinceLastSync_r >

] | length(@)

July 27, 2021

Jordan Docter

Missing the

marks

around true. Should be this.SystemInfo.DirectorySync[?DirectorySyncEnabled ==

true

&& DaysSinceLastSync_r >

].DaysSinceLastSync_r

Greg Wenner

I believe this has been superceded by the built in Metric:Azure Active Directory: Organizations With Directory Sync Enabled And >= 1 Day Since Last Sync ListSystemInfo.DirectorySync[?DaysSinceLastSync_r >

&& DirectorySyncEnabled].OrganizationName

Eric Vollbrecht

Is this the same data as Organization.onPremisesSyncEnabled and onPremisesLastSyncDateTime ?

Bill Krauss

Figured it out. SystemInfo.DirectorySync[?DaysSinceLastSync_r > '-1'].DaysSinceLastSync_r returns the correct information.

Bill Krauss

When I use SystemInfo.DirectorySync[?DaysSinceLastSync_r >

] | length(@) or SystemInfo.DirectorySync[?DirectorySyncEnabled == true && DaysSinceLastSync_r >

] | length(@) on a client with raw data ofDirectorySync: Array(1)▶0: ObjectOrganizationName: "Contoso"DaysSinceLastSync_r: 82DirectorySyncEnabled: trueDirectoryLastSyncDate: "2021-11-19T01:56:07Z"I get QUERY RESULTS 0. When I change it to a client that has synced less than an hour ago. I get QUERY RESULTS 0. I'm thinking I'm missing something with this one.

Chris Holliman

An extension to this is to check if AD Sync is enabled in order to eliminate alerts for no sync on "not enabled" clients: SystemInfo.DirectorySync[?DirectorySyncEnabled == true && DaysSinceLastSync_r >

] | length(@)