Edit

Share via

Queries for the TOUserAudits table

  • Article

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Auditing ToolchainOrchestrator Operations

Lists of audit Toolchain orchestrator operations.

TOUserAudits
| where Message !startswith_cs "Request" 
| order by EdgeLocation, TimeGenerated desc
| project EdgeLocation, TimeGenerated, User, Message, OperatingResourceId, OperatingResourceK8SId, OperationName
| take 100

Auditing ToolchainOrchestrator API requests

Lists of audit Toolchain orchestrator api requests.

TOUserAudits
| where Message startswith_cs "Request" 
| order by EdgeLocation, TimeGenerated desc
| project EdgeLocation, TimeGenerated, User, Message, OperatingResourceId, OperatingResourceK8SId, OperationName
| take 100