Logins By Account Per Location
Query
//Show each separate login per person and their location and IP
SigninLogs
| extend city_ = tostring(LocationDetails.city)
| extend state_ = tostring(LocationDetails.state)
| extend countryOrRegion_ = tostring(LocationDetails.countryOrRegion)
| distinct TimeGenerated, Identity, city_, state_, countryOrRegion_, IPAddressExplanation
This query retrieves the login information for each person, including their location and IP address. It displays the time of the login, the person's identity, their city, state, country or region, and their IP address. The "distinct" keyword ensures that each login is shown only once.
Details
Rod Trent
Released: July 30, 2021
Tables
SigninLogs
Keywords
SigninLogsLocationDetailsTimeGeneratedIdentitycity_state_countryOrRegion_IPAddress
Operators
extendtostringdistinct