$filter Azure 审核日志

Question

我正在使用以下 API

https://docs.microsoft.com/en-us/graph/api/directoryaudit-list?view=graph-rest-1.0&tabs=http

我只想过滤 UserManagement 类别的资源，但由于某些原因，我进行的 API 调用出错了

这正是 API 调用

GET https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?$filter=category/any(s:s eq 'UserManagement')

{
    "error": {
        "code": "BadRequest",
        "message": "Invalid filter clause",
        "innerError": {
            "date": "2021-08-10T06:27:37",
            "request-id": "cfd471b2-8b13-4a43-b3de-c6a963425f8c",
            "client-request-id": "cfd471b2-8b13-4a43-b3de-c6a963425f8c"
        }
    }
}

Answer 1

显然 lambda 运算符不起作用，但我仍然可以这样查询

https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?$filter=category eq 'UserManagement'

Answer 2

我能够使用 startsWith 而不是 ne

来过滤数据

https://graph.microsoft.com/v1.0/auditLogs/signIns?$filter=startsWith(userPrincipalName, 'user.com#EXT#@dm4.onmicrosoft.com')

$filter Azure 审核日志

$filter Azure Audit logs

azure

filter

azure-active-directory

azure-ad-graph-api

azureportal