Include information on document accessed in RMS log
When a protected document is accessed it is logged in the log analytics workspace and the workload for the record is RMS. The operation is "AcquireLicense." However, it only contains data regarding the protection owner, user who attempted to access, and the label. There is nothing that can identify what document was accessed. There is no data in this record that is unique to the file accessed that can be correlated against other records to identify the file.
Please include something to identify the file.