Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
Determine who created resources in Azure using Log Analytics
(ResourceGroup=<ResourceGroupName>) (Resource=<ResourceName>) (ActivityStatus=Succeeded)
| Sort TimeGenerated asc
| Top 1
| Select Caller
| where ResourceGroup == "ResourceGroupName" and Resource == "ResourceName"
| where ActivityStatus == "Succeeded"
| top 1 by EventSubmissionTimestamp asc
| project Caller

This comment has been minimized.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.