Sample code for 30+ languages & platforms
Xbase++

Azure Monitor - List Activity Logs

See more Azure Monitor Examples

Provides the list of records from the activity logs.

Note: The $filter criteria cannot specify a time range that begins more than 90 days in the past.

Chilkat Xbase++ Downloads

Xbase++
LOCAL nSuccess
LOCAL oHttp
LOCAL oJsonToken
LOCAL oResp
LOCAL oJsonResponse
LOCAL cNextLink
LOCAL i
LOCAL nCount_i
LOCAL cAuthorizationAction
LOCAL cAuthorizationRole
LOCAL cAuthorizationScope
LOCAL cCaller
LOCAL cClaimsAud
LOCAL cClaimsIss
LOCAL cClaimsIat
LOCAL cClaimsNbf
LOCAL cClaimsExp
LOCAL cClaimsVer
LOCAL cClaims_identity_claims_tenantid
LOCAL cClaims_claims_authnmethodsreferences
LOCAL cClaims_identity_claims_objectidentifier
LOCAL cClaims_ws_2005_05_identity_claims_upn
LOCAL cClaimsPuid
LOCAL cClaims_ws_2005_05_identity_claims_nameidentifier
LOCAL cClaims_ws_2005_05_identity_claims_givenname
LOCAL cClaims_ws_2005_05_identity_claims_surname
LOCAL cClaimsName
LOCAL cClaimsGroups
LOCAL cClaims_ws_2005_05_identity_claims_name
LOCAL cClaimsAppid
LOCAL cClaimsAppidacr
LOCAL cClaims_identity_claims_scope
LOCAL cClaims_claims_authnclassreference
LOCAL cCorrelationId
LOCAL cDescription
LOCAL cEventDataId
LOCAL cEventNameValue
LOCAL cEventNameLocalizedValue
LOCAL cHttpRequestClientRequestId
LOCAL cHttpRequestClientIpAddress
LOCAL cHttpRequestMethod
LOCAL cId
LOCAL cLevel
LOCAL cResourceGroupName
LOCAL cResourceProviderNameValue
LOCAL cResourceProviderNameLocalizedValue
LOCAL cOperationId
LOCAL cOperationNameValue
LOCAL cOperationNameLocalizedValue
LOCAL cPropertiesStatusCode
LOCAL cStatusValue
LOCAL cStatusLocalizedValue
LOCAL cSubStatusValue
LOCAL cSubStatusLocalizedValue
LOCAL cEventTimestamp
LOCAL cSubmissionTimestamp
LOCAL cSubscriptionId

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

oHttp := CreateObject("Chilkat.Http")

//  Load an OAuth2 access token previously fetched by this example:  Get Azure OAuth2 Access Token
oJsonToken := CreateObject("Chilkat.JsonObject")
nSuccess := oJsonToken:LoadFile("qa_data/tokens/azureToken.json")
//  Assuming success..
oHttp:AuthToken := oJsonToken:StringOf("access_token")
? "AuthToken: " + oHttp:AuthToken

oHttp:Accept := "application/json"

oResp := CreateObject("Chilkat.HttpResponse")
nSuccess := oHttp:HttpNoBody("GET", "https://management.azure.com/subscriptions/{subscriptionId}/providers/microsoft.insights/eventtypes/management/values?api-version=2015-04-01&$filter=eventTimestamp%20ge%20%272019-05-16T04%3A36%3A37.6407898Z%27%20and%20eventTimestamp%20le%20%272019-06-12T04%3A36%3A37.6407898Z%27", oResp)
IF (nSuccess == 0)
    ? oHttp:LastErrorText
    oHttp:destroy()
    oJsonToken:destroy()
    oResp:destroy()
    RETURN
ENDIF

? "Response Status Code: " + Str(oResp:StatusCode)

oJsonResponse := CreateObject("Chilkat.JsonObject")
oJsonResponse:Load(oResp:BodyStr)
oJsonResponse:EmitCompact := 0
? oJsonResponse:Emit()

IF (oResp:StatusCode != 200)
    ? "Failed."
    oHttp:destroy()
    oJsonToken:destroy()
    oResp:destroy()
    oJsonResponse:destroy()
    RETURN
ENDIF

//  Sample output...
//  (See the parsing code below..)
//  
//  Use the this online tool to generate parsing code from sample JSON: 
//  Generate Parsing Code from JSON

//  {
//    "value": [
//      {
//        "authorization": {
//          "action": "microsoft.support/supporttickets/write",
//          "role": "Subscription Admin",
//          "scope": "/subscriptions/089bd33f-d4ec-47fe-8ba5-0753aa5c5b33/resourceGroups/MSSupportGroup/providers/microsoft.support/supporttickets/115012112305841"
//        },
//        "caller": "admin@contoso.com",
//        "claims": {
//          "aud": "https://management.core.windows.net/",
//          "iss": "https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/",
//          "iat": "1421876371",
//          "nbf": "1421876371",
//          "exp": "1421880271",
//          "ver": "1.0",
//          "http://schemas.microsoft.com/identity/claims/tenantid": "1e8d8218-c5e7-4578-9acc-9abbd5d23315 ",
//          "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
//          "http://schemas.microsoft.com/identity/claims/objectidentifier": "2468adf0-8211-44e3-95xq-85137af64708",
//          "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "admin@contoso.com",
//          "puid": "20030000801A118C",
//          "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "9vckmEGF7zDKk1YzIY8k0t1_EAPaXoeHyPRn6f413zM",
//          "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "John",
//          "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Smith",
//          "name": "John Smith",
//          "groups": "cacfe77c-e058-4712-83qw-f9b08849fd60,7f71d11d-4c41-4b23-99d2-d32ce7aa621c,31522864-0578-4ea0-9gdc-e66cc564d18c",
//          "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": " admin@contoso.com",
//          "appid": "c44b4083-3bq0-49c1-b47d-974e53cbdf3c",
//          "appidacr": "2",
//          "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
//          "http://schemas.microsoft.com/claims/authnclassreference": "1"
//        },
//        "correlationId": "1e121103-0ba6-4300-ac9d-952bb5d0c80f",
//        "description": "",
//        "eventDataId": "44ade6b4-3813-45e6-ae27-7420a95fa2f8",
//        "eventName": {
//          "value": "EndRequest",
//          "localizedValue": "End request"
//        },
//        "httpRequest": {
//          "clientRequestId": "27003b25-91d3-418f-8eb1-29e537dcb249",
//          "clientIpAddress": "192.168.35.115",
//          "method": "PUT"
//        },
//        "id": "/subscriptions/089bd33f-d4ec-47fe-8ba5-0753aa5c5b33/resourceGroups/MSSupportGroup/providers/microsoft.support/supporttickets/115012112305841/events/44ade6b4-3813-45e6-ae27-7420a95fa2f8/ticks/635574752669792776",
//        "level": "Informational",
//        "resourceGroupName": "MSSupportGroup",
//        "resourceProviderName": {
//          "value": "microsoft.support",
//          "localizedValue": "microsoft.support"
//        },
//        "operationId": "1e121103-0ba6-4300-ac9d-952bb5d0c80f",
//        "operationName": {
//          "value": "microsoft.support/supporttickets/write",
//          "localizedValue": "microsoft.support/supporttickets/write"
//        },
//        "properties": {
//          "statusCode": "Created"
//        },
//        "status": {
//          "value": "Succeeded",
//          "localizedValue": "Succeeded"
//        },
//        "subStatus": {
//          "value": "Created",
//          "localizedValue": "Created (HTTP Status Code: 201)"
//        },
//        "eventTimestamp": "2015-01-21T22:14:26.9792776Z",
//        "submissionTimestamp": "2015-01-21T22:14:39.9936304Z",
//        "subscriptionId": "089bd33f-d4ec-47fe-8ba5-0753aa5c5b33"
//      }
//    ],
//    "nextLink": "https://management.azure.com/########-####-####-####-############$skiptoken=######"
//  }
//  

cNextLink := oJsonResponse:StringOf("nextLink")
i := 0
nCount_i := oJsonResponse:SizeOfArray("value")
DO WHILE i < nCount_i
    oJsonResponse:I := i
    cAuthorizationAction := oJsonResponse:StringOf("value[i].authorization.action")
    cAuthorizationRole := oJsonResponse:StringOf("value[i].authorization.role")
    cAuthorizationScope := oJsonResponse:StringOf("value[i].authorization.scope")
    cCaller := oJsonResponse:StringOf("value[i].caller")
    cClaimsAud := oJsonResponse:StringOf("value[i].claims.aud")
    cClaimsIss := oJsonResponse:StringOf("value[i].claims.iss")
    cClaimsIat := oJsonResponse:StringOf("value[i].claims.iat")
    cClaimsNbf := oJsonResponse:StringOf("value[i].claims.nbf")
    cClaimsExp := oJsonResponse:StringOf("value[i].claims.exp")
    cClaimsVer := oJsonResponse:StringOf("value[i].claims.ver")
    cClaims_identity_claims_tenantid := oJsonResponse:StringOf('value[i].claims."http://schemas.microsoft.com/identity/claims/tenantid"')
    cClaims_claims_authnmethodsreferences := oJsonResponse:StringOf('value[i].claims."http://schemas.microsoft.com/claims/authnmethodsreferences"')
    cClaims_identity_claims_objectidentifier := oJsonResponse:StringOf('value[i].claims."http://schemas.microsoft.com/identity/claims/objectidentifier"')
    cClaims_ws_2005_05_identity_claims_upn := oJsonResponse:StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"')
    cClaimsPuid := oJsonResponse:StringOf("value[i].claims.puid")
    cClaims_ws_2005_05_identity_claims_nameidentifier := oJsonResponse:StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"')
    cClaims_ws_2005_05_identity_claims_givenname := oJsonResponse:StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"')
    cClaims_ws_2005_05_identity_claims_surname := oJsonResponse:StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"')
    cClaimsName := oJsonResponse:StringOf("value[i].claims.name")
    cClaimsGroups := oJsonResponse:StringOf("value[i].claims.groups")
    cClaims_ws_2005_05_identity_claims_name := oJsonResponse:StringOf('value[i].claims."http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"')
    cClaimsAppid := oJsonResponse:StringOf("value[i].claims.appid")
    cClaimsAppidacr := oJsonResponse:StringOf("value[i].claims.appidacr")
    cClaims_identity_claims_scope := oJsonResponse:StringOf('value[i].claims."http://schemas.microsoft.com/identity/claims/scope"')
    cClaims_claims_authnclassreference := oJsonResponse:StringOf('value[i].claims."http://schemas.microsoft.com/claims/authnclassreference"')
    cCorrelationId := oJsonResponse:StringOf("value[i].correlationId")
    cDescription := oJsonResponse:StringOf("value[i].description")
    cEventDataId := oJsonResponse:StringOf("value[i].eventDataId")
    cEventNameValue := oJsonResponse:StringOf("value[i].eventName.value")
    cEventNameLocalizedValue := oJsonResponse:StringOf("value[i].eventName.localizedValue")
    cHttpRequestClientRequestId := oJsonResponse:StringOf("value[i].httpRequest.clientRequestId")
    cHttpRequestClientIpAddress := oJsonResponse:StringOf("value[i].httpRequest.clientIpAddress")
    cHttpRequestMethod := oJsonResponse:StringOf("value[i].httpRequest.method")
    cId := oJsonResponse:StringOf("value[i].id")
    cLevel := oJsonResponse:StringOf("value[i].level")
    cResourceGroupName := oJsonResponse:StringOf("value[i].resourceGroupName")
    cResourceProviderNameValue := oJsonResponse:StringOf("value[i].resourceProviderName.value")
    cResourceProviderNameLocalizedValue := oJsonResponse:StringOf("value[i].resourceProviderName.localizedValue")
    cOperationId := oJsonResponse:StringOf("value[i].operationId")
    cOperationNameValue := oJsonResponse:StringOf("value[i].operationName.value")
    cOperationNameLocalizedValue := oJsonResponse:StringOf("value[i].operationName.localizedValue")
    cPropertiesStatusCode := oJsonResponse:StringOf("value[i].properties.statusCode")
    cStatusValue := oJsonResponse:StringOf("value[i].status.value")
    cStatusLocalizedValue := oJsonResponse:StringOf("value[i].status.localizedValue")
    cSubStatusValue := oJsonResponse:StringOf("value[i].subStatus.value")
    cSubStatusLocalizedValue := oJsonResponse:StringOf("value[i].subStatus.localizedValue")
    cEventTimestamp := oJsonResponse:StringOf("value[i].eventTimestamp")
    cSubmissionTimestamp := oJsonResponse:StringOf("value[i].submissionTimestamp")
    cSubscriptionId := oJsonResponse:StringOf("value[i].subscriptionId")
    i := i + 1
ENDDO

oHttp:destroy()
oJsonToken:destroy()
oResp:destroy()
oJsonResponse:destroy()