Make membername field facetable
I am trying to search and find out security group changes for a user. The field I need is greyed out.
The query I am running is Type=SecurityEvent EventID=4728 OR EventID=4729
and I want to drill down into the MemberName field
Why is it unavailable, and can it be made available? it's a very useful security query.
Will forward to the team to see if that field can be enabled as facetable.
Hi. Any update with this?