Good Afternoon,
When I try to query the Log Analytics workspace, where I am feeding sign-ins for Azure AD, the columns for RiskEventTypes, RiskDetails, RiskLeveDuringSignOn, and so on are showing "hidden" or a special character of a box. Are these columns unable
to be queried? I am trying to build reports, alerts, and dashboards for Risky SignIns and the like. Is this possible with a P1 license? I know that the P2 has Access Reviews, PIM, and the like, but we were told that we should be able to at least
query this information with a Log Analytics workspace. I can still see this information within Users flagged for risk and Risk Events blades in Azure AD. I was hoping to a create a cleaner and more dynamic way to check this data. Thank you
for the help!