CippLogs. Each row is partitioned by date using the format{" "}
+ YYYYMMDD as the PartitionKey, with a unique GUID as the{" "}
+ RowKey.
+ eq for a single day or ge /{" "}
+ le for a date range.{" "}
+ The date partition is in UTC time, so you may need to use a date
+ range to account for timezone differences.
+ PartitionKey — Date in YYYYMMDD format
+ RowKey — Unique log entry ID (GUID)
+ Timestamp — When the entry was written
+ Tenant — Tenant domain name
+ Username — User who triggered the action
+ API — API endpoint or function name
+ Message — Log message text
+ Severity — Log level (Info, Warning, Error, Debug)
+ LogData — Additional JSON data (if any)
+ TenantID — Tenant GUID (when available)
+ IP — Source IP address (when available)
+ &$filter= to your SAS URL to filter results. Use{" "}
+ eq, ne, gt, lt,{" "}
+ ge, le, and combine with and /{" "}
+ or.
+ $filter={ex.filter}
+