Query Details

Data Connector Reqs Failedby Caller IP Operation

Query

//Data Connector page access that failed authorization by caller, caller IP Address, and Operation name

AzureActivity
| where OperationNameValue contains "dataconnectorscheckrequirements"
| where ActivityStatusValue == "Failed" and ActivitySubstatusValue == "Unauthorized"
| project Caller, CallerIpAddress, OperationName

Explanation

This query retrieves information about failed authorization attempts on the Data Connector page. It includes details such as the caller's name, their IP address, and the name of the operation that was attempted.

Details

Rod Trent profile picture

Rod Trent

Released: December 7, 2020

Tables

AzureActivity

Keywords

DataConnector,Authorization,Caller,IPAddress,OperationName

Operators

wherecontains==andproject

Actions