Dashboard: Activity Log Activity Dashboard
This dashboard contains 1 card.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/tailpipe-mod-azure-activity-log-detections
Start the Powerpipe server:
powerpipe server
Open http://localhost:9033 in your browser and select Activity Log Activity Dashboard dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run azure_activity_log_detections.dashboard.activity_dashboard --share
Queries
This dashboard uses the the following queries:
select caller as "Actor", count(*) as "Logs"from azure_activity_logwhere caller is not nullgroup by callerorder by count(*) desclimit 10;