KQL

How to dynamically set last month date range in KQL query and Log Analytics

I wanted to improve an audit query we are running every month because I hate doing things manually over and over again. Before today, we were setting the date range for the previous month manually and I was searching a way to automate this instead. I found a way... Manually

KQL

Looking for activities triggered only by humans in Azure Activities in Kusto or Log Analytics

We wanted to know which actions where done by a human and not a service principal when looking at Azure Activities in Log Analytics queries. We thought of a nice quick way to do it! Email vs GUID Our assumption is that all humans that trigger something in Azure will