Kusto translation ID to Name



我是新的kusto查询,我需要翻译应用程序id到应用程序的名称。如果我只列出一切,我得到了很多信息,其中一个是clientId - xxxxxx,然后我做一个查询,其中我列出了每个学校的唯一用户与用户ID。换句话说,我可以看到每个特定学校每个客户(应用程序)的用户。我们有几个应用程序可供用户使用。我想扩展这个,做一个翻译,我知道这个客户端ID等于这个应用程序从应用程序注册。有什么办法吗?

customEvents 
| where timestamp > ago(30d) and name == "SignInComplete"
| summarize dcount(tostring(customDimensions.ClientID)) by tostring(customDimensions.SchoolID), tostring(customDimensions.UserID)
SigninLogs
| extend AppName = case(AppId == "1b730954-1685-4b74-9bfd-dac224a7b894", "Global PowerShell",
AppId == "00000002-0000-0000-c000-000000000000", "Microsoft.Azure.ActiveDirectory",
AppId == "00000009-0000-0000-c000-000000000000", "Microsoft.Azure.AnalysisServices",
AppId == "00000005-0000-0000-c000-000000000000", "Microsoft.Azure.Workflow",
AppId == "0f698dd4-f011-4d23-a33e-b36416dcb1e6", "Microsoft Office Client Service",
AppId == "00000002-0000-0ff1-ce00-000000000000", "Microsoft.Exchange",
AppId == "00000007-0000-0ff1-ce00-000000000000", "Microsoft.ExchangeOnlineProtection",
AppId == "00000004-0000-0ff1-ce00-000000000000", "Microsoft.Lync",
AppId == "d3590ed6-52b3-4102-aeff-aad2292ab01c", "Microsoft Office",
AppId == "00000006-0000-0ff1-ce00-000000000000", "Microsoft.Office365Portal",
AppId == "00000003-0000-0ff1-ce00-000000000000", "Microsoft.SharePoint",
AppId == "4345a7b9-9a63-4910-a426-35363201d503", "O365 Suite UX",
AppId == "a0c73c16-a7e3-4564-9a95-2bdf47383716", "Office 365 Shell", 
AppId == "89bee1f7-5e6e-4d8a-9f3d-ecd601259da7", "Office 365 Shell Suite",
AppId == "e48d4214-364e-4731-b2b6-47dabf529218", "Skype Web","")

相关内容

最新更新