Why is the right Log Analytics SQL to get these fields that are not under audit logs?
Summary The issue at hand is the inability to access certain fields, such as protoPayload.serviceName, in Log Analytics using SQL queries, while these fields are accessible in the Log Explorer. This discrepancy leads to questions about the limitations of Log Analytics and potential errors in SQL syntax. Root Cause The root cause of this issue … Read more