Forum Discussion

uditk14's avatar
uditk14
Copper Contributor
Jun 18, 2020

Can we find Azure portal notifications in logs

I need to fetch the Azure portal notifications from logs. Is there a way to do it in Azure Sentinel.?
azure
uditk14's avatar
uditk14
Copper Contributor
Jun 19, 2020

CliveWatson - Yes, I want the bell icon notifications. I am able to fetch similar details in the Azure Activity but I wanted to know if something exists directly for this.

 

CliveWatson's avatar
CliveWatson
Former Employee
Jun 19, 2020

uditk14 

 

AzureActivity is a source you can store in a Log Analytics workspace, Azure Sentinel uses Log Analytics - so you can see the data from the portal, Log Analytics or Azure Sentinel - providing you have the data in a workspace.   For my reference what Query are you using the see the Notifications data?

  • Ofer_Shezaf's avatar
    Ofer_Shezaf
    Icon for Microsoft rankMicrosoft
    Jun 22, 2020

    CliveWatson: I think uditk14 wants to know what the query needed, i.e. what are the events to look for in AzureActivity. 

    • uditk14's avatar
      uditk14
      Copper Contributor
      Jun 22, 2020

      Ofer_Shezaf CliveWatson - Portal notifications seem to be a subset of Azure Activity. Usually, we get a notification on success, failure of activities. Some filtering needs to applied fetching the notifications from it. trying to find out that

Resources