Forum Discussion
KQL SiginLogs
Hi Everyone, i ask you a question from basilar KQL " SigninLogs | Project Id,UserId,Identity" i receive correctly the events, but in some case in the Identity coloum receive an ID in this format xxx...
Deleted
Identity is the actor logging in which can be the GUID of an App
https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/signinlogs
Check the AppDisplayName
e.g.
Deleted
Identity is the actor logging in which can be the GUID of an App
https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/signinlogs
Check the AppDisplayName
e.g.
Nice Clive, yes is there an app ID thank you for your asnwer.
Guido
Guido