$filter Azure 審計日志

Question

我正在使用以下 API

https://docs.microsoft.com/en-us/graph/api/directoryaudit-list?view=graph-rest-1.0&tabs=http

我只想為 UserManagement 類別過濾資源，但由於某種原因，我進行的 API 調用給了我錯誤

這是確切的 API 調用

GET https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?$filter=category/any(s:s eq 'UserManagement')

{
    "error": {
        "code": "BadRequest",
        "message": "Invalid filter clause",
        "innerError": {
            "date": "2021-08-10T06:27:37",
            "request-id": "cfd471b2-8b13-4a43-b3de-c6a963425f8c",
            "client-request-id": "cfd471b2-8b13-4a43-b3de-c6a963425f8c"
        }
    }
}

Answer 1

顯然 lambda 運算符不起作用，但我仍然可以這樣查詢

https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?$filter=category eq 'UserManagement' 

Answer 2

我能夠使用startsWith而不是ne過濾數據

https://graph.microsoft.com/v1.0/auditLogs/signIns?$filter=startsWith(userPrincipalName, 'user.com#EXT#@dm4.onmicrosoft.com')