Query Details
Case Comments
Query
//Who added case comments and to which case AzureActivity | where OperationName == "Create Case Comments" | project Caller, CallerIpAddress, OperationName, _ResourceId
Explanation
This query is looking for information about who added case comments and to which case in Azure. It filters the results to only show the operation of creating case comments and projects the caller, caller IP address, operation name, and resource ID.
Details
Rod Trent
Released: December 7, 2020
Tables
AzureActivity
Keywords
AzureActivity,CreateCaseComments,Caller,CallerIpAddress,OperationName,_ResourceId
Operators
where==project