KQL Search

Query Details

Case Comments

Query

//Who added case comments and to which case

AzureActivity
| where OperationName == "Create Case Comments"
| project Caller, CallerIpAddress, OperationName, _ResourceId

Explanation

This query is looking for information about who added case comments and to which case in Azure. It filters the results to only show the operation of creating case comments and projects the caller, caller IP address, operation name, and resource ID.