Forum Discussion

JeffTWFM's avatar
JeffTWFM
Copper Contributor
Oct 03, 2022

Kusto query to take App IDs and get activity >90 days

Hello,

 

Is it possible to take a list of Application IDs (Azure apps as well as Azure App Registrations) and design a KQL to query our workspace (log retention is 90 days) for all sign-ins? What would that look like? With PowerShell we can import-csv that list but I don't see how to do with Kusto.

 

We want to disable and ultimately delete unused apps and at a total count of around 1,000+, want to discover apps that have long gone.

thanks

No RepliesBe the first to reply

Resources