KQL Search

Query Details

Weird Correlation Id

Query

SigninLogs
| where CorrelationId == "ff000000-0000-0000-0000-000000000000" //AppId == "22098786-6e16-43cc-a27d-191a01a1e3b5" // Microsoft To-Do client

Explanation

This query is searching for SigninLogs where the CorrelationId is equal to "ff000000-0000-0000-0000-000000000000" and the AppId is equal to "22098786-6e16-43cc-a27d-191a01a1e3b5" which represents the Microsoft To-Do client.

Details

Jose Sebastián Canós profile picture

Jose Sebastián Canós

Released: January 4, 2024

Tables

SigninLogs

Keywords

SigninLogsCorrelationIdAppIdMicrosoft To-Do

Operators

where==

Actions

GitHub