To audit sign-in risk events, delete the existing Azure Active Directory template, and create a template with the Sign-ins option enabled.
If you still do not see the Risky Sign-in events being collected, upgrade to the latest maintenance release of version 6.9.5 or later