(Lianja) Azure Monitor - List Activity Logs

Provides the list of records from the activity logs.

Note: The $filter criteria cannot specify a time range that begins more than 90 days in the past.

For more information, see https://docs.microsoft.com/en-us/rest/api/monitor/activitylogs/list

Chilkat Lianja Extension Download Chilkat Lianja Extension

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loHttp = createobject("CkHttp")

// Load an OAuth2 access token previously fetched by this example:  Get Azure OAuth2 Access Token
loJsonToken = createobject("CkJsonObject")
llSuccess = loJsonToken.LoadFile("qa_data/tokens/azureToken.json")
// Assuming success..
loHttp.AuthToken = loJsonToken.StringOf("access_token")
? "AuthToken: " + loHttp.AuthToken

loHttp.Accept = "application/json"

loResp = loHttp.QuickRequest("GET","https://management.azure.com/subscriptions/{subscriptionId}/providers/microsoft.insights/eventtypes/management/values?api-version=2015-04-01&$filter=eventTimestamp%20ge%20%272019-05-16T04%3A36%3A37.6407898Z%27%20and%20eventTimestamp%20le%20%272019-06-12T04%3A36%3A37.6407898Z%27")
if (loHttp.LastMethodSuccess <> .T.) then
    ? loHttp.LastErrorText
    release loHttp
    release loJsonToken
    return
endif

? "Response Status Code: " + str(loResp.StatusCode)

loJsonResponse = createobject("CkJsonObject")
loJsonResponse.Load(loResp.BodyStr)
loJsonResponse.EmitCompact = .F.
? loJsonResponse.Emit()

if (loResp.StatusCode <> 200) then
    ? "Failed."
    release loResp
    release loHttp
    release loJsonToken
    release loJsonResponse
    return
endif

release loResp

// Sample output...
// (See the parsing code below..)
// 
// Use the this online tool to generate parsing code from sample JSON: 
// Generate Parsing Code from JSON

// {
//   "value": [
//     {
//       "authorization": {
//         "action": "microsoft.support/supporttickets/write",
//         "role": "Subscription Admin",
//         "scope": "/subscriptions/089bd33f-d4ec-47fe-8ba5-0753aa5c5b33/resourceGroups/MSSupportGroup/providers/microsoft.support/supporttickets/115012112305841"
//       },
//       "caller": "admin@contoso.com",
//       "claims": {
//         "aud": "https://management.core.windows.net/",
//         "iss": "https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/",
//         "iat": "1421876371",
//         "nbf": "1421876371",
//         "exp": "1421880271",
//         "ver": "1.0",
//         "http://schemas.microsoft.com/identity/claims/tenantid": "1e8d8218-c5e7-4578-9acc-9abbd5d23315 ",
//         "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
//         "http://schemas.microsoft.com/identity/claims/objectidentifier": "2468adf0-8211-44e3-95xq-85137af64708",
//         "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "admin@contoso.com",
//         "puid": "20030000801A118C",
//         "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "9vckmEGF7zDKk1YzIY8k0t1_EAPaXoeHyPRn6f413zM",
//         "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "John",
//         "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Smith",
//         "name": "John Smith",
//         "groups": "cacfe77c-e058-4712-83qw-f9b08849fd60,7f71d11d-4c41-4b23-99d2-d32ce7aa621c,31522864-0578-4ea0-9gdc-e66cc564d18c",
//         "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": " admin@contoso.com",
//         "appid": "c44b4083-3bq0-49c1-b47d-974e53cbdf3c",
//         "appidacr": "2",
//         "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
//         "http://schemas.microsoft.com/claims/authnclassreference": "1"
//       },
//       "correlationId": "1e121103-0ba6-4300-ac9d-952bb5d0c80f",
//       "description": "",
//       "eventDataId": "44ade6b4-3813-45e6-ae27-7420a95fa2f8",
//       "eventName": {
//         "value": "EndRequest",
//         "localizedValue": "End request"
//       },
//       "httpRequest": {
//         "clientRequestId": "27003b25-91d3-418f-8eb1-29e537dcb249",
//         "clientIpAddress": "192.168.35.115",
//         "method": "PUT"
//       },
//       "id": "/subscriptions/089bd33f-d4ec-47fe-8ba5-0753aa5c5b33/resourceGroups/MSSupportGroup/providers/microsoft.support/supporttickets/115012112305841/events/44ade6b4-3813-45e6-ae27-7420a95fa2f8/ticks/635574752669792776",
//       "level": "Informational",
//       "resourceGroupName": "MSSupportGroup",
//       "resourceProviderName": {
//         "value": "microsoft.support",
//         "localizedValue": "microsoft.support"
//       },
//       "operationId": "1e121103-0ba6-4300-ac9d-952bb5d0c80f",
//       "operationName": {
//         "value": "microsoft.support/supporttickets/write",
//         "localizedValue": "microsoft.support/supporttickets/write"
//       },
//       "properties": {
//         "statusCode": "Created"
//       },
//       "status": {
//         "value": "Succeeded",
//         "localizedValue": "Succeeded"
//       },
//       "subStatus": {
//         "value": "Created",
//         "localizedValue": "Created (HTTP Status Code: 201)"
//       },
//       "eventTimestamp": "2015-01-21T22:14:26.9792776Z",
//       "submissionTimestamp": "2015-01-21T22:14:39.9936304Z",
//       "subscriptionId": "089bd33f-d4ec-47fe-8ba5-0753aa5c5b33"
//     }
//   ],
//   "nextLink": "https://management.azure.com/########-####-####-####-############$skiptoken=######"
// }
// 

lcNextLink = loJsonResponse.StringOf("nextLink")
i = 0
lnCount_i = loJsonResponse.SizeOfArray("value")
do while i < lnCount_i
    loJsonResponse.I = i
    lcAuthorizationAction = loJsonResponse.StringOf("value[i].authorization.action")
    lcAuthorizationRole = loJsonResponse.StringOf("value[i].authorization.role")
    lcAuthorizationScope = loJsonResponse.StringOf("value[i].authorization.scope")
    lcCaller = loJsonResponse.StringOf("value[i].caller")
    lcClaimsAud = loJsonResponse.StringOf("value[i].claims.aud")
    lcClaimsIss = loJsonResponse.StringOf("value[i].claims.iss")
    lcClaimsIat = loJsonResponse.StringOf("value[i].claims.iat")
    lcClaimsNbf = loJsonResponse.StringOf("value[i].claims.nbf")
    lcClaimsExp = loJsonResponse.StringOf("value[i].claims.exp")
    lcClaimsVer = loJsonResponse.StringOf("value[i].claims.ver")
    lcClaims_identity_claims_tenantid = loJsonResponse.StringOf('value[i].claims."http://schemas.microsoft.com/identity/claims/tenantid"')
    lcClaims_claims_authnmethodsreferences = loJsonResponse.StringOf('value[i].claims."http://schemas.microsoft.com/claims/authnmethodsreferences"')
    lcClaims_identity_claims_objectidentifier = loJsonResponse.StringOf('value[i].claims."http://schemas.microsoft.com/identity/claims/objectidentifier"')
    lcClaims_ws_2005_05_identity_claims_upn = loJsonResponse.StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"')
    lcClaimsPuid = loJsonResponse.StringOf("value[i].claims.puid")
    lcClaims_ws_2005_05_identity_claims_nameidentifier = loJsonResponse.StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"')
    lcClaims_ws_2005_05_identity_claims_givenname = loJsonResponse.StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"')
    lcClaims_ws_2005_05_identity_claims_surname = loJsonResponse.StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"')
    lcClaimsName = loJsonResponse.StringOf("value[i].claims.name")
    lcClaimsGroups = loJsonResponse.StringOf("value[i].claims.groups")
    lcClaims_ws_2005_05_identity_claims_name = loJsonResponse.StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"')
    lcClaimsAppid = loJsonResponse.StringOf("value[i].claims.appid")
    lcClaimsAppidacr = loJsonResponse.StringOf("value[i].claims.appidacr")
    lcClaims_identity_claims_scope = loJsonResponse.StringOf('value[i].claims."http://schemas.microsoft.com/identity/claims/scope"')
    lcClaims_claims_authnclassreference = loJsonResponse.StringOf('value[i].claims."http://schemas.microsoft.com/claims/authnclassreference"')
    lcCorrelationId = loJsonResponse.StringOf("value[i].correlationId")
    lcDescription = loJsonResponse.StringOf("value[i].description")
    lcEventDataId = loJsonResponse.StringOf("value[i].eventDataId")
    lcEventNameValue = loJsonResponse.StringOf("value[i].eventName.value")
    lcEventNameLocalizedValue = loJsonResponse.StringOf("value[i].eventName.localizedValue")
    lcHttpRequestClientRequestId = loJsonResponse.StringOf("value[i].httpRequest.clientRequestId")
    lcHttpRequestClientIpAddress = loJsonResponse.StringOf("value[i].httpRequest.clientIpAddress")
    lcHttpRequestMethod = loJsonResponse.StringOf("value[i].httpRequest.method")
    lcId = loJsonResponse.StringOf("value[i].id")
    lcLevel = loJsonResponse.StringOf("value[i].level")
    lcResourceGroupName = loJsonResponse.StringOf("value[i].resourceGroupName")
    lcResourceProviderNameValue = loJsonResponse.StringOf("value[i].resourceProviderName.value")
    lcResourceProviderNameLocalizedValue = loJsonResponse.StringOf("value[i].resourceProviderName.localizedValue")
    lcOperationId = loJsonResponse.StringOf("value[i].operationId")
    lcOperationNameValue = loJsonResponse.StringOf("value[i].operationName.value")
    lcOperationNameLocalizedValue = loJsonResponse.StringOf("value[i].operationName.localizedValue")
    lcPropertiesStatusCode = loJsonResponse.StringOf("value[i].properties.statusCode")
    lcStatusValue = loJsonResponse.StringOf("value[i].status.value")
    lcStatusLocalizedValue = loJsonResponse.StringOf("value[i].status.localizedValue")
    lcSubStatusValue = loJsonResponse.StringOf("value[i].subStatus.value")
    lcSubStatusLocalizedValue = loJsonResponse.StringOf("value[i].subStatus.localizedValue")
    lcEventTimestamp = loJsonResponse.StringOf("value[i].eventTimestamp")
    lcSubmissionTimestamp = loJsonResponse.StringOf("value[i].submissionTimestamp")
    lcSubscriptionId = loJsonResponse.StringOf("value[i].subscriptionId")
    i = i + 1
enddo


release loHttp
release loJsonToken
release loJsonResponse