Make membername field facetable
I am trying to search and find out security group changes for a user. The field I need is greyed out.
The query I am running is Type=SecurityEvent EventID=4728 OR EventID=4729
and I want to drill down into the MemberName field
More info can be found here
https://social.msdn.microsoft.com/Forums/azure/en-US/22a19ec3-a273-479a-8b7d-7aeb902d494b/fields-greyed-out?forum=opinsights
Why is it unavailable, and can it be made available? it's a very useful security query.

Will forward to the team to see if that field can be enabled as facetable.
Thanks
1 comment
-
Darren commented
Hi. Any update with this?