Skip to content

Instantly share code, notes, and snippets.

@itaysk
Created November 10, 2018 16:13
Show Gist options
  • Save itaysk/25c846b1461fa6e81399601b2ca2fa70 to your computer and use it in GitHub Desktop.
Save itaysk/25c846b1461fa6e81399601b2ca2fa70 to your computer and use it in GitHub Desktop.
Determine who created resources in Azure using Log Analytics
(ResourceGroup=<ResourceGroupName>) (Resource=<ResourceName>) (ActivityStatus=Succeeded)
| Sort TimeGenerated asc
| Top 1
| Select Caller
AzureActivity
| where ResourceGroup == "ResourceGroupName" and Resource == "ResourceName"
| where ActivityStatus == "Succeeded"
| top 1 by EventSubmissionTimestamp asc
| project Caller
@itaysk
Copy link
Author

itaysk commented Nov 10, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment