question

mdsohel-4182 avatar image
0 Votes"
mdsohel-4182 asked mdsohel-4182 commented

Kusto query to find external users in the subscriptions

Hello,

We have multiple subscriptions where some of the users will add external users ( like @gmail.com or @yahoo.com ) in our tenant.

Do we have any kusto query which can use easily we can use in log analytics to find out who added or where added.

Note : I know about powershell and other command but need help on Kusto query as we already integrated everything.

Early response much appreciated !!

azure-monitor
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

SwathiDhanwada-MSFT avatar image
1 Vote"
SwathiDhanwada-MSFT answered mdsohel-4182 commented

@mdsohel-4182 Kindly note users information is not stored in Log Analytics. Only SignInLogs , AuditLogs, NonInteractiveSignInLogs and ServicePrincipalSignInLogs can be enabled using diagnostic settings. To query these logs, this document is listed with such examples. Kindly check and revert if you have any questions.


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello Swathi,
Thanks a lot for your prompt response, appreciate !!
Could you please also paste the Documentation link for Application Insights, which will be similar to this, if there any.


0 Votes 0 ·

Here is a document which contains most examples for the data stored in Application Insights. Kindly check it.


1 Vote 1 ·

Thanks a lot, appreciate !! You can mark this thread as closed !!

0 Votes 0 ·