Forum Discussion

Paul Hunt - Cimares's avatar
Jul 04, 2019
Solved

log analytics API returning empty Table collection

I'm using Client Credentials to query Office 365 Audit data stored in Log Analytics. The AppID principal has Log Analytics Reader permissions to both the Log Analytics workspace and the Office 365 Au...
  • After much bashing of the head against the desk, it would seem that not all the queries that work in the Log Analytics web engine work through the API. My previous errors were being masked by the JSON not converting properly and being left out of the body. Fiddler ftw!

     

    If I use "search Operation == 'desired op'" and pass it into the body of the POST then that works ok and results are returned.

Resources