Queries for the SalesforceAuditTrail table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Recent setup changes

Returns the most recent setup changes made in Salesforce.

SalesforceAuditTrail
| where TimeGenerated > ago(7d)
| project
    TimeGenerated,
    Action,
    Section,
    Display,
    CreatedDate,
    CreatedByName,
    CreatedByEmail,
    CreatedByUsername,
    DelegateUser
| sort by TimeGenerated desc