Silly audit logs

Author: Zacgoose

Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Webhooks/Push-AuditLogSearchCreation.ps1

@@ -10,13 +10,10 @@ function Push-AuditLogSearchCreation {
     $Tenant = $Item.Tenant
     $StartTime = $Item.StartTime
     $EndTime = $Item.EndTime
-    $ServiceFilters = @($Item.ServiceFilters)
-
     try {
         $LogSearch = @{
             StartTime         = $StartTime
             EndTime           = $EndTime
-            ServiceFilters    = $ServiceFilters
             TenantFilter      = $Tenant.defaultDomainName
             ProcessLogs       = $true
             RecordTypeFilters = @(

Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearch.ps1

@@ -16,8 +16,6 @@ function New-CippAuditLogSearch {
         The record types to filter on.
     .PARAMETER KeywordFilter
         The keyword to filter on.
-    .PARAMETER ServiceFilter
-        The service to filter on.
     .PARAMETER OperationsFilters
         The operations to filter on.
     .PARAMETER UserPrincipalNameFilters
@@ -109,8 +107,6 @@ function New-CippAuditLogSearch {
         [Parameter()]
         [string]$KeywordFilters,
         [Parameter()]
-        [string[]]$ServiceFilters,
-        [Parameter()]
         [string[]]$OperationsFilters,
         [Parameter()]
         [string[]]$UserPrincipalNameFilters,
@@ -138,9 +134,6 @@ function New-CippAuditLogSearch {
     if ($KeywordFilters) {
         $SearchParams.keywordFilter = $KeywordFilters
     }
-    if ($ServiceFilters) {
-        $SearchParams.serviceFilters = @($ServiceFilters)
-    }
     if ($UserPrincipalNameFilters) {
         $SearchParams.userPrincipalNameFilters = @($UserPrincipalNameFilters)
     }

Modules/CIPPCore/Public/Entrypoints/Orchestrator Functions/Start-AuditLogSearchCreation.ps1

@@ -68,29 +68,25 @@ function Start-AuditLogSearchCreation {
             }
 
             $TenantInConfig = $false
-            $MatchingConfigs = [System.Collections.Generic.List[object]]::new()
             foreach ($ConfigEntry in $ConfigEntries) {
                 if ($ConfigEntry.excludedTenants.value -contains $Tenant.defaultDomainName) {
                     continue
                 }
                 if ($ConfigEntry.ExpandedTenants -contains $Tenant.defaultDomainName -or $ConfigEntry.ExpandedTenants -contains 'AllTenants') {
                     $TenantInConfig = $true
-                    $MatchingConfigs.Add($ConfigEntry)
+                    break
                 }
             }
 
             if (!$TenantInConfig) {
                 continue
             }
 
-            if ($MatchingConfigs) {
-                [PSCustomObject]@{
-                    FunctionName   = 'AuditLogSearchCreation'
-                    Tenant         = $Tenant | Select-Object defaultDomainName, customerId, displayName
-                    StartTime      = $StartTime
-                    EndTime        = $EndTime
-                    ServiceFilters = @($MatchingConfigs | Select-Object -Property type | Sort-Object -Property type -Unique | ForEach-Object { $_.type.split('.')[1] })
-                }
+            [PSCustomObject]@{
+                FunctionName = 'AuditLogSearchCreation'
+                Tenant       = $Tenant | Select-Object defaultDomainName, customerId, displayName
+                StartTime    = $StartTime
+                EndTime      = $EndTime
             }
         }