Hoping someone can help me. I have MCAS running on my tenant and I'd like to create a query to report on a specific SharePoint list. The problem I have is when I do a Listviewed search it presents all lists of the SharePoint site collection. I have tried to drill down into the detail of each log via the JSON but I cant seen to find any consistency between the List ID and the name of the list.
Can someone advise what the best way is to create a query to report on user activity for a SharePoint list please.