AppServiceAuditLogs

14 columns from 2 Azure resource types.

Logs generated when publishing users successfully log on via one of the App Service publishing protocols.

Source: Microsoft Learn

Attributes

Resource types
microsoft.web/sites
Categories
Azure Resources
Solutions
LogManagement
Basic log
No
Ingestion-time DCR support
Yes
Lake-only ingestion
No
Sample Queries
Yes

Columns

14 columns

Column Type Description
_BilledSize real The record size in bytes
Category string Log category name
_IsBillable string Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
OperationName string Name of the operation
Protocol string Authentication protocol
_ResourceId string A unique identifier for the resource that the record is associated with
SourceSystem string The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
_SubscriptionId string A unique identifier for the subscription that the record is associated with
TenantId string The Log Analytics workspace ID
TimeGenerated datetime Time when event is generated
Type string The name of the table
User string Username used for publishing access
UserAddress string Client IP addres of the publishing user
UserDisplayName PII string Email address of a user in case publishing was authorized via AAD authentication

Routing resource types