Forum Discussion
JeffTWFM
Oct 03, 2022Copper Contributor
Kusto query to take App IDs and get activity >90 days
Hello,
Is it possible to take a list of Application IDs (Azure apps as well as Azure App Registrations) and design a KQL to query our workspace (log retention is 90 days) for all sign-ins? What would that look like? With PowerShell we can import-csv that list but I don't see how to do with Kusto.
We want to disable and ultimately delete unused apps and at a total count of around 1,000+, want to discover apps that have long gone.
thanks
No RepliesBe the first to reply