Queries for the EmailUrlInfo table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

URLs in an email

URLs in a particular message, by NetworkMessageId identifier.

let myEmailId = "<insert your email NetworkMessageId>";
EmailEvents
| where NetworkMessageId == myEmailId
| join EmailUrlInfo on NetworkMessageId
| project Timestamp, Subject, SenderFromAddress, RecipientEmailAddress, NetworkMessageId, Url, UrlCount
| take 1000