Queries for the DiscoverySupercomputerAuditLogs table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

All supercomputer audit events

Lists all audit events for Discovery supercomputers, showing the operation performed and the acting principal.

// All audit events for Discovery supercomputers
// Shows the operation performed and the acting principal
DiscoverySupercomputerAuditLogs
| project TimeGenerated, OperationName, ObjectId, Tenant, _ResourceId
| sort by TimeGenerated desc

Supercomputer operations by user

Summarizes audit operations grouped by the acting principal to identify who is performing actions on Discovery supercomputers.

// Supercomputer operations grouped by user
// Identifies who is performing actions on Discovery supercomputers
DiscoverySupercomputerAuditLogs
| summarize OperationCount = count() by ObjectId
| sort by OperationCount desc

Supercomputer operations by type

Summarizes audit events grouped by operation name to identify the most frequently performed actions on Discovery supercomputers.

// Supercomputer operations grouped by operation type
// Identifies the most frequently performed actions on Discovery supercomputers
DiscoverySupercomputerAuditLogs
| summarize OperationCount = count() by OperationName
| sort by OperationCount desc