Queries for the AppServiceAuditLogs table
Audit Logs relating to unexpected users
List Audit Logs for users who logged in that aren't a listed user.
// To create an alert for this query, click '+ New alert rule'
AppServiceAuditLogs
| where UserDisplayName != "user@company.com"
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for