| _BilledSize |
|
Double |
| _IsBillable |
|
String |
| AppId |
Unique GUID representing the app ID in the Azure Active Directory |
String |
| AuthenticationContextClassReferences |
The authentication contexts of the sign-in |
String |
| AuthenticationProcessingDetails |
Provides the details associated with authentication processor |
String |
| Category |
Category of the sign-in event |
String |
| ConditionalAccessPolicies |
Details of the conditional access policies being applied for the sign-in |
String |
| ConditionalAccessStatus |
Status of all the conditionalAccess policies related to the sign-in |
String |
| CorrelationId |
ID to provide sign-in trail |
String |
| DurationMs |
The duration of the operation in milliseconds |
Int64 |
| FederatedCredentialId |
Th identifier of an application’s federated identity credential if a federated identity credential was used to sign in. |
String |
| Id |
Unique ID representing the sign-in activity |
String |
| Identity |
The identity from the token that was presented when you made the request. It can be a user account, system account, or service principal |
String |
| IPAddress |
IP address of the client used to sign in |
String |
| Level |
The severity level of the event |
String |
| Location |
The region of the resource emitting the event |
String |
| LocationDetails |
Details of the sign-in location |
String |
| OperationName |
For sign-ins, this value is always Sign-in activity |
String |
| OperationVersion |
The REST API version that’s requested by the client |
String |
| ResourceDisplayName |
Name of the resource that the service principal signed into |
String |
| ResourceGroup |
Resource group for the logs |
String |
| ResourceIdentity |
ID of the resource that the service principal signed into |
String |
| ResourceServicePrincipalId |
Service Principal Id of the resource |
String |
| ResultDescription |
Provides the error description for the sign-in operation |
String |
| ResultSignature |
Contains the error code, if any, for the sign-in operation |
String |
| ResultType |
The result of the sign-in operation can be Success or Failure |
String |
| ServicePrincipalCredentialKeyId |
Key id of the service principal that initiated the sign-in |
String |
| ServicePrincipalCredentialThumbprint |
Thumbprint of the service principal that initiated the sign-in |
String |
| ServicePrincipalId |
ID of the service principal who initiated the sign-in |
String |
| ServicePrincipalName |
Service Principal Name of the service principal who initiated the sign-in |
String |
| SourceSystem |
Details of source system of the object being provisioned |
String |
| TenantId |
|
String |
| TimeGenerated |
The date and time of the event in UTC |
DateTime |
| Type |
The name of the table |
String |
| UniqueTokenIdentifier |
Unique token identifier for the request |
String |