VIAudit 資料表的查詢
依帳戶標識碼稽核影片索引器
顯示帳戶 (AccountId = <Guid 識別碼>) 的稽核事件,並依使用者 UPN 選擇性篩選。
VIAudit
| where AccountId == "<AccountId>" // please fill in the accountId <Guid>
// | where Upn == "<Upn>" // to to filter on a specific user upn, uncomment this line
| limit 100
影片索引器依作業稽核前 10 名使用者
依作業呈現前 10 名用戶的時間圖,並具有篩選的選擇性帳戶標識碼。
// Trend of top 10 active Upn's
VIAudit
// | where AccountId == "<AccountId>" // to filter on a specific accountId, uncomment this line
| where TimeGenerated > ago(30d)
| summarize count() by Upn
| top 10 by count_ desc
| project Upn
| join (VIAudit
| where TimeGenerated > ago(30d)
| summarize count() by Upn, bin(TimeGenerated,1d)) on Upn
| project TimeGenerated, Upn, count_
| render timechart
影片索引器稽核剖析的錯誤訊息
使用選擇性帳戶標識碼來顯示稽核失敗事件以進行篩選。
// Project failures with detailed error message.
VIAudit
// | where AccountId == "<AccountId>" // to filter on a specific accountId, uncomment this line
| where Status == "Failure"
| parse Description with "ErrorType: " ErrorType ". Message: " ErrorMessage ". Trace" *
| project TimeGenerated, OperationName, ErrorMessage, ErrorType, CorrelationId, _ResourceId
影片索引器稽核失敗的作業
顯示所有失敗作業嘗試的稽核記錄,並依帳戶標識碼和使用者 UPN 選擇性篩選。
VIAudit
// | where AccountId == "<AccountId>" // to filter on a specific accountId, uncomment this line
// | where Upn == "<Upn>" // to to filter on a specific user upn, uncomment this line
| where Status == "Failure"
| limit 100
意見反應
https://aka.ms/ContentUserFeedback。
即將登場:在 2024 年,我們將逐步淘汰 GitHub 問題作為內容的意見反應機制,並將它取代為新的意見反應系統。 如需詳細資訊,請參閱:提交並檢視相關的意見反應