Incidents
Query
AzureActivity
| where _ResourceId contains "SecurityInsights" and _ResourceId contains "incidents"Explanation
This query is searching for Azure activity logs that contain both "SecurityInsights" and "incidents" in the resource ID.
Query Details
AzureActivity
| where _ResourceId contains "SecurityInsights" and _ResourceId contains "incidents"This query is searching for Azure activity logs that contain both "SecurityInsights" and "incidents" in the resource ID.