KQL Search

Query Details

HomeAI ToolsDevice Query

Graph URIAPI Request Stats

Query

# GraphAPI URI Request Statistics

## Query Information

#### Description
Retrieving request statistics gives us the opportunity for new use cases. One can now summarize all the GraphAPI request types easily with the following query. The unique deltatokens have been removed from the data, returning a better overview of the executed requests.

#### References
- https://learn.microsoft.com/en-us/graph/microsoft-graph-activity-logs-overview#what-data-is-available-in-the-microsoft-graph-activity-logs

## Sentinel
```KQL
MicrosoftGraphActivityLogs
| extend ParsedUri = tostring(parse_url(RequestUri).Path)
| summarize TotalRequest = count() by ParsedUri
| sort by TotalRequest
```

Explanation

This query retrieves statistics on different types of requests made to the GraphAPI. It removes unique deltatokens from the data to provide a clearer overview of the requests. The results are summarized by the type of request and sorted by the total number of requests made for each type.

Details

Bert-Jan Pals profile picture

Bert-Jan Pals

Released: May 6, 2024

Tables

MicrosoftGraphActivityLogs

Keywords

MicrosoftGraphActivityLogs,RequestUri,ParsedUri,TotalRequest

Operators

extendsummarizecountbysort

Actions