Unable to query "Device" field in Activity Log
Hi TechCommunity, I've got an issue where I am currently unable to run query's against the "Device" field in the Activity Log. To get the basics out of the way, I've added both our O365 & Azure instances to MDCA and I'm able to successfully identify devices that are logging in to applications registered in our AAD. I can also see if those devices are "compliant & managed" from the raw source data within those event entries. So I'm thinking I've something wrong here? Does MDCA not pull device info from the AAD sign in log entry? Any help is appreciated, Thanks Team