UserPeerAnalytics

UserPeerAnalytics Schema #

Table description #

TableSection TableType TableSectionName Description
Usx Regular Microsoft Sentinel This analytics table, for a given user, provides a ranked list of peers. For example, if the user is Jane Smith, Peer Analytics calculates all of Jane’s peers based on her mailing list, security groups, etc and provides the top 20 of her peers.

Table retention #

HotDays ColdDays TotalInteractiveDays
14 76 90

Schema #

Name Description Type
_BilledSize Double
_IsBillable String
_ResourceId A unique identifier for the resource that the record is associated with String
_SubscriptionId A unique identifier for the subscription that the record is associated with String
AADTenantId Unique identifier of the Azure Tenant String
PeerUserId Unique identifier of the peer of the primary user String
PeerUserName User name of the peer of the primary user String
PeerUserPrincipalName User principal name of the peer of the primary user String
Rank Rank of the peer with respect to the primary user Int32
SourceSystem String
TenantId String
TimeGenerated Timestamp when the peer analytics is calculated DateTime
Type The name of the table String
UserId Unique identifier of the primary user String
UserName User name of the primary user String
UserPrincipalName User principal name of the primary user String

Schema changes #

Date Action
2024-10-18 Table added to tracking