共計(jì) 2449 個(gè)字符,預(yù)計(jì)需要花費(fèi) 7 分鐘才能閱讀完成。
這篇文章給大家分享的是有關(guān)怎么查詢 Azure 用戶操作記錄的內(nèi)容。丸趣 TV 小編覺(jué)得挺實(shí)用的,因此分享給大家做個(gè)參考,一起跟隨丸趣 TV 小編過(guò)來(lái)看看吧。
下邊來(lái)看下代碼的內(nèi)容,其實(shí)是很簡(jiǎn)單的
param ( [parameter(Mandatory = $false)]
[Int]$MaxRecords = 100000,
[parameter(Mandatory = $true)]
[string]$User
if ($Warning) { Write-Warning ($(Get-Date -UFormat %Y/%m/%d %H:%M:%S) + * + $Message)
}
else { if ($ForegroundColor) { Write-Host ($(Get-Date -UFormat %Y/%m/%d %H:%M:%S) + * + $Message) -ForegroundColor $ForegroundColor
}
else { Write-Host ($(Get-Date -UFormat %Y/%m/%d %H:%M:%S) + * + $Message)
}
}
[pscustomobject[]]$UserObjects = $null
$Subscriptions = Get-AzureRmSubscription
foreach ($subscription in $Subscriptions) {
Querying Subscription:
$SubscriptionID = $Subscription.Id
$SubscriptionName = $Subscription.Name
Select-AzureRmSubscription -SubscriptionId $SubscriptionID -InformationAction SilentlyContinue
Write-DateTimeMessage -Message Retrieving logs, please wait...
$logs = Get-AzureRmLog -ResourceProvider Microsoft.Compute -StartTime (Get-Date).AddDays(-90) -Maxrecord $MaxRecords
foreach ($log in $logs) { if ($log.caller -eq $User) {
$UserObject = New-Object -TypeName psobject
$UserObject | Add-Member -MemberType NoteProperty -Name SubscriptionName -Value $SubscriptionName
$UserObject | Add-Member -MemberType NoteProperty -Name SubscriptionID -Value $SubscriptionID
$UserObject | Add-Member -MemberType NoteProperty -Name ResourceGroup -Value $log.ResourceGroupName
$UserObject | Add-Member -MemberType NoteProperty -Name Caller -Value $log.caller
$UserObject | Add-Member -MemberType NoteProperty -Name Operation -Value $log.OperationName.Value
$UserObject | Add-Member -MemberType NoteProperty -Name ResourceId -Value $log.ResourceId
$UserObject | Add-Member -MemberType NoteProperty -Name Time -Value $log.EventTimestamp
$UserObjects += $UserObject
}
}
$OutputPath = Join-Path -Path ([Environment]::GetFolderPath(Desktop)) -ChildPath (AzureUserAction- + $(Get-Date -Format yyyyMMdd-HHmmss) + .csv )
if ($null -ne $UserObjects) {
$UserObjects | Export-Csv -NoTypeInformation -LiteralPath $OutputPath
Write-DateTimeMessage -Message Please check $OutputPath -Warning
else {
Write-DateTimeMessage Didn t get information, please check -warning
}
我們來(lái)嘗試著運(yùn)行一下腳本 Get-AzureUserActionLog.ps1 -User xxx@xxx.partner.onmschina.cn , -User 的作用是我們可以根據(jù)這個(gè)參數(shù)篩選出來(lái)特定的用戶
腳本執(zhí)行完成后,可以在桌面上看到一個(gè) csv 文件,里邊會(huì)記錄查詢出來(lái) log
最后,還是要提醒一點(diǎn),因?yàn)?Azure 后臺(tái)的限制,這只能查詢到最近 90 天之內(nèi)的 log
感謝各位的閱讀!關(guān)于“怎么查詢 Azure 用戶操作記錄”這篇文章就分享到這里了,希望以上內(nèi)容可以對(duì)大家有一定的幫助,讓大家可以學(xué)到更多知識(shí),如果覺(jué)得文章不錯(cuò),可以把它分享出去讓更多的人看到吧!
正文完