UserPeerAnalytics

This analytics table, for a given user, provides a ranked list of peers. For example, if the user is Jane Smith, Peer Analytics calculates all of Jane's peers based on her mailing list, security groups, etc and provides the top 20 of her peers.

Table attributes

Attribute	Value
Resource types	-
Categories	Security
Solutions	BehaviorAnalyticsInsights
Basic log	No
Ingestion-time transformation	No
Sample Queries	-

Columns

Column	Type	Description
AADTenantId	string	Unique identifier of the Azure Tenant
_BilledSize	real	The record size in bytes
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
PeerUserId	string	Unique identifier of the peer of the primary user
PeerUserName	string	User name of the peer of the primary user
PeerUserPrincipalName	string	User principal name of the peer of the primary user
Rank	int	Rank of the peer with respect to the primary user
_ResourceId	string	A unique identifier for the resource that the record is associated with
SourceSystem	string	The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
TenantId	string	The Log Analytics workspace ID
TimeGenerated	datetime	Timestamp when the peer analytics is calculated
Type	string	The name of the table
UserId	string	Unique identifier of the primary user
UserName	string	User name of the primary user
UserPrincipalName	string	User principal name of the primary user