Forum Discussion
aaronjewitt
Apr 25, 2024Copper Contributor
Graph Activity Logs should include the display names
The Graph Activity logs are great and we are already exporting them to our Elastic SIEM for alerting and threat hunting, but the lack of display names in the logs is frustrating. The Graph activity logs only contain the values by ID such as userID, appID, groupID, etc. When doing an investigation we have to constantly look up the display names. The other Azure logs such as the signin logs contain fields such as the appDisplayName or userDisplayName which make it much easier for humans to understand what is happening.
- The best place to post such suggestions is over at the Feedback portal: https://feedback.azure.com/d365community/forum/22920db1-ad25-ec11-b6e6-000d3a4f0789