Detect/Capture whenever a Data Connection has been leveraged/activated

Hi MathieuSGA,

Thank you for the follow up.

Based on my understanding, Microsoft Fabric does not currently provide an automatic tenant wide alert or log that explicitly indicates when a specific data connection for example, your ERP has been accessed. Historical monitoring at that level of granularity requires the use of existing monitoring APIs or audit logs.

Please consider the following steps which may assist in resolving the issue:

1. Navigate to Monitor, then to Pipeline runs or Activity runs. Apply filters for the ERP outage time window and review the Copy activity details to confirm whether the ERP linked service or dataset was used.
2. Query Pipeline Runs or Activity Runs using the Fabric REST API to retrieve start time, end time, and connection or dataset details.
3. Request that the administrator check Purview, Unified Audit Logs, or Data Connection Auditing for events related to the ERP connection during the outage to obtain tenant level evidence across workspaces.

For further reference, please consult the following documentation:
Monitor Copy activity - Microsoft Fabric | Microsoft Learn
Activity Runs - Query By Pipeline Run - REST API (Azure Data Factory) | Microsoft Learn
Track user activities in Microsoft Fabric - Microsoft Fabric | Microsoft Learn
Data connection auditing for exfiltration protection | Microsoft Learn

We hope that the information provided will assist you in addressing the issue. If you have any further queries, please feel free to contact the Microsoft Fabric community.

Thank you.