AIP
1 Topic
AIP Log Analytics
Hi, I'm trying to create a query for Azure Information Protection that will generate a report for the number of classification labels applied during the day that includes the application name and label type. Example: Classification Label Label Type Application Type Amount Public New Label Outlook 10 Internal Upgrade Label Word 15 Currently what I have: InformationProtectionLogs_CL | where Activity_s == "NewLabel" | where ApplicationName_s == "Word" or ApplicationName_s == "Outlook" | where LabelName_s == "Highly Confidential QA" or LabelName_s == "Confidential QA" or LabelName_s == "Internal QA" or LabelName_s == "Public QA" | project Label_Name = columnifexists("LabelName_s",""), Application_Name = columnifexists("ApplicationName_s",""), Label_Type = columnifexists("Activity_s", "NewLabel") | summarize New_Labels = count(Label_Type) by Label_Name | sort by New_Labels desc Any help is greatly appreciated.Solved2KViews0likes2Comments