Query Details
Logins By Account Per Location
Query
//Show each separate login per person and their location and IP SigninLogs | extend city_ = tostring(LocationDetails.city) | extend state_ = tostring(LocationDetails.state) | extend countryOrRegion_ = tostring(LocationDetails.countryOrRegion) | distinct TimeGenerated, Identity, city_, state_, countryOrRegion_, IPAddress
Explanation
This query retrieves the login information for each person, including their location and IP address. It displays the time of the login, the person's identity, their city, state, country or region, and their IP address. The "distinct" keyword ensures that each login is shown only once.
Details
Rod Trent
Released: July 30, 2021
Tables
SigninLogs
Keywords
SigninLogs,LocationDetails,TimeGenerated,Identity,city_,state_,countryOrRegion_,IPAddress
Operators
extendtostringdistinct