Edit

Share via


Queries for the WOUserAudits table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Auditing workload orchestration Operations

Lists of audit workload orchestration operations.

WOUserAudits
| where Message !startswith_cs "Request" 
| order by EdgeLocation, TimeGenerated desc
| project EdgeLocation, TimeGenerated, User, Message, OperatingResourceId, OperatingResourceK8SId, OperationName
| take 100

Auditing workload orchestration API requests

Lists of audit workload orchestration api requests.

WOUserAudits
| where Message startswith_cs "Request" 
| order by EdgeLocation, TimeGenerated desc
| project EdgeLocation, TimeGenerated, User, Message, OperatingResourceId, OperatingResourceK8SId, OperationName
| take 100