Forum Discussion
Deleted
Mar 20, 2024KQL SiginLogs
Hi Everyone, i ask you a question from basilar KQL " SigninLogs | Project Id,UserId,Identity" i receive correctly the events, but in some case in the Identity coloum receive an ID in this format xxx...
- Mar 20, 2024
Deleted
Identity is the actor logging in which can be the GUID of an App
https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/signinlogs
Check the AppDisplayName
e.g.
Clive_Watson
Mar 20, 2024Bronze Contributor
Deleted
Identity is the actor logging in which can be the GUID of an App
https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/signinlogs
Check the AppDisplayName
e.g.
Deleted
Mar 27, 2024Nice Clive, yes is there an app ID thank you for your asnwer.
Guido
Guido