How can we improve Azure Log Analytics ?

← Azure Monitor-Log Analytics

Make membername field facetable

I am trying to search and find out security group changes for a user. The field I need is greyed out.

The query I am running is Type=SecurityEvent EventID=4728 OR EventID=4729
and I want to drill down into the MemberName field

More info can be found here
https://social.msdn.microsoft.com/Forums/azure/en-US/22a19ec3-a273-479a-8b7d-7aeb902d494b/fields-greyed-out?forum=opinsights

Why is it unavailable, and can it be made available? it's a very useful security query.

5 votes
Vote
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
You have left! (?) (thinking…)
Darren shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

1 comment

Attach a File
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment

Azure Monitor-Log Analytics: Security and Audit Solution

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice