microsoft.user.auditlog
Description
Microsoft user audit log
Fields
| ID | TYPE | DESCRIPTION |
|---|---|---|
| userId | string | The user's ID |
| signins | []microsoft.user.signin | The user's interactive sign-in entries (a maximum of 50 entries from the last 24 hours only) |
| lastInteractiveSignIn | microsoft.user.signin | The user's last interactive sign-in |
| lastNonInteractiveSignIn | microsoft.user.signin | The user's last non-interactive sign-in (from the last 24 hours only) |