Update advanced-hunting-aadsignineventsbeta-table.md #97
Conversation
|
Learn Build status updates of commit 8118f33: ✅ Validation status: passed
For more details, please refer to the build report. For any questions, please:
|
|
@denisebmsft or @chrisda Is there any additional documentation that you can provide for all the possible field values for |
|
I will follow up with the PM! |
|
@schmurky thanks! :). I got a lot of use so far from this table while testing the beta, and would love to get some more details on this field and its possible values. |
Hi @schmurky , has there been any update on this one? |
|
Hi @schmurky , just following up on this PR since it's now 2 months old with no updates from the Microsoft side. |
|
Learn Build status updates of commit 97ddbd8: ✅ Validation status: passed
For more details, please refer to the build report. For any questions, please:
|
|
Learn Build status updates of commit b1c2c71: ✅ Validation status: passed
For more details, please refer to the build report. For any questions, please:
|
|
@denisebmsft @schmurky is there any update on this? PR is now almost 3 months old with no info from MSFT side, and would love to get more context around the data referenced in this field. |
| @@ -80,6 +80,7 @@ Use this reference to construct queries that return information from the table. | |||
| |`NetworkLocationDetails`|`string`|Network location details of the authentication processor of the sign-in event| | |||
| |`RequestId`|`string`|Unique identifier of the request| | |||
| |`ReportId`|`string`|Unique identifier for the event| | |||
| |`EndpointCall`|`string`|Indicates the endpoint called during a login event. Possible values: "Login:reprocess", "Kmsi:kmsi"| | |||
There was a problem hiding this comment.
The description we have in product is: "Information about the Microsoft Entra ID endpoint that the request was sent to and the type of request sent during sign in"
I'm afraid the PM has not replied about possible values, but I will close by end of week in case we get more than the above. Kindly apply the above description for EndpointCall. Thanks for your patience!
There was a problem hiding this comment.
Description updated and removed the possible fields piece since it would be incomplete.
|
Learn Build status updates of commit 044199a: ✅ Validation status: passed
For more details, please refer to the build report. For any questions, please:
|
|
Learn Build status updates of commit b2a5ea4: ✅ Validation status: passed
For more details, please refer to the build report. For any questions, please:
|
Adds undocumented field
EndpointCall.