Apr 20 2020
06:26 AM
- last edited on
Apr 08 2022
10:23 AM
by
TechCommunityAP
Apr 20 2020
06:26 AM
- last edited on
Apr 08 2022
10:23 AM
by
TechCommunityAP
Hello everyone,
I'd like to make a little table dashboard with the following request
OfficeActivity
| where OfficeWorkload == "Exchange"
| where Operation == "Add-MailboxPermission"
Then project the columns TimeGenerated, Parameters.Value (for the Identity field) and Parameters.Value (for the AccessRight field), and UserId.
I can't get to the parameters part because sometimes the fields I'm interested in are in the table in position 0 or 1 or 2 or 3 (constantly changing for same log type).
Do you have any solution to get the specific parameter field (example the Value when Name = Identity) for every log ?
Thanks a lot
Alexander
Apr 20 2020 09:25 AM