Queries for the VIAudit table
Video Indexer Audit by account id
Display audit events for account (AccountId = <Guid ID>), with an optional filter by user UPN.
VIAudit
| where AccountId == "<AccountId>" // please fill in the accountId <Guid>
// | where Upn == "<Upn>" // to to filter on a specific user upn, uncomment this line
| limit 100
Video Indexer Audit top 10 users by operations
Render timechart of top 10 users by operations, with an optional account id for filtering.
// Trend of top 10 active Upn's
VIAudit
// | where AccountId == "<AccountId>" // to filter on a specific accountId, uncomment this line
| where TimeGenerated > ago(30d)
| summarize count() by Upn
| top 10 by count_ desc
| project Upn
| join (VIAudit
| where TimeGenerated > ago(30d)
| summarize count() by Upn, bin(TimeGenerated,1d)) on Upn
| project TimeGenerated, Upn, count_
| render timechart
Video Indexer Audit parsed error message
Display audit failed events with an optional account id for filtering.
// Project failures with detailed error message.
VIAudit
// | where AccountId == "<AccountId>" // to filter on a specific accountId, uncomment this line
| where Status == "Failure"
| parse Description with "ErrorType: " ErrorType ". Message: " ErrorMessage ". Trace" *
| project TimeGenerated, OperationName, ErrorMessage, ErrorType, CorrelationId, _ResourceId
Video Indexer Audit failed operations
Display audit logs of all failed operations attempts, with an optional filter by account id and user UPN.
VIAudit
// | where AccountId == "<AccountId>" // to filter on a specific accountId, uncomment this line
// | where Upn == "<Upn>" // to to filter on a specific user upn, uncomment this line
| where Status == "Failure"
| limit 100
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for