Forum Discussion

marka01's avatar
marka01
Copper Contributor
Jun 09, 2022

Activity log export with powershell

Anyone knows a good article on working with exporting activity logs using powershell?

 

Specifically what I was looking for is export all 6 months activity logs (instead of clicking for each 7 day interval log to be exported one by one).  Also was interested in getting 'raw source data' exported for each EventID into excel csv. 

3 Replies

Sort By
  • MichaelJMelone's avatar
    MichaelJMelone
    Icon for Microsoft rankMicrosoft
    Jun 09, 2022
    Hello marka01,
    Are you referring to the AMSI content output from the device timeline? If so, we do not currently have a supported way to do that today. That said, its a great feature request!
    • marka01's avatar
      marka01
      Copper Contributor
      Jun 09, 2022
      not sure what AMSI stands for. But I was refering to this output: click under any activity alert -> general -> source: app connector-> view raw data.
      Any way to export activity logs using powershell?
      • MichaelJMelone's avatar
        MichaelJMelone
        Icon for Microsoft rankMicrosoft
        Jun 13, 2022
        Oh! This is MDA. My apologies. Let me see if I can find someone who is an MDA ninja for you...

Resources