search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.24k stars 21.41k forks source link

Missing non-interactive sign-ins in monitor alert query #106741

Open dnevelos opened 1 year ago

dnevelos commented 1 year ago

[Enter feedback here]

The Monitor alert is missing important non-interactive sign-ins. For example:

// Search for a single Object ID (UserID) SigninLogs | project UserId | where UserId == "f66e7317-2ad4-41e9-8238-3acf413f7448" | union AADNonInteractiveUserSignInLogs | project UserId | where UserId == "f66e7317-2ad4-41e9-8238-3acf413f7448"

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

SaibabaBalapur-MSFT commented 1 year ago

@dnevelos Thanks for your feedback! We will investigate and update as appropriate.

ManoharLakkoju-MSFT commented 1 year ago

@dnevelos Thanks for bringing this to our attention. I'm going to assign this to the document author so they can take a look at it accordingly

ManoharLakkoju-MSFT commented 1 year ago

@markwahl-msft Can you please check and add your comments on this doc update request as applicable.