Query Details
Listof Domains
Query
//Using make_set to build a list of unique user domains from the UserPrincipalName column SigninLogs | extend UserDomains = split(UserPrincipalName,'@')[1] | summarize UserDomains = make_set(UserDomains)
Explanation
The query is using the "make_set" function to create a list of unique user domains from the "UserPrincipalName" column in the "SigninLogs" table. It splits the email addresses at the "@" symbol and then summarizes the unique domains using the "make_set" function.
Details
Rod Trent
Released: September 19, 2022
Tables
SigninLogs
Keywords
SigninLogs,UserPrincipalName,UserDomains
Operators
extendsplitsummarizemake_set