Upstream contribution · beenuar/AiSOC
AiSOC · Reading all available Entra audit pages in AiSOC
Problem
The Entra connector consumed only the first response page from Microsoft Graph. More than 200 matching audit or risky-sign-in entries in a poll could leave older entries unread before the next polling window.
Engineering response
The connector follows the supplied @odata.nextLink for both feeds. It retains completed pages when a later request fails and warns at the 25-page limit.
Evidence and scope
A focused fixture retrieved 680 entries across both feeds and reproduced first-page loss when the source change was reverted. The merge record also notes existing test-environment failures and the absence of a live tenant run.