Out of the box the "Login Activity" dashboard does not display any data. The OOTB search is looking for a tag of "Authentication" however no events have that tag.
sourcetype=ms:o365:management tag=authentication action=failure
Is this something that is expected to be built after installation, or did something get missed when installing the application?
