cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
T_H_E_Z_E_R_O
Regular Visitor

Problems with the "Isolate machine using Windows Defender upon a Cloud App Security alert" template.

Hello guys,

 

I am working with the "Isolate machine using Windows Defender upon a Cloud App Security alert" template right now and I have run into some problems. When the Flow runs it fails at the Advanced Hunting part with the error message "'where' operator: Failed to resolve table or column expression named 'LogonEvents'. Fix semantic errors in your query".

 

Link to the template: https://emea.flow.microsoft.com/en-us/galleries/public/templates/e1324d070bf24d129b5c54038e503e84/is...

 

I tried to rebuild the Advanced Hunting query in the Microsoft 365 Security Center and the 'LogonEvents' aren't available there too. 

Any ideas how can I get this template to work?

 

Thanks in advance and best regards.

0 REPLIES 0

Helpful resources

Announcements
UG GA Amplification 768x460.png

Launching new user group features

Learn how to create your own user groups today!

Community Connections 768x460.jpg

Community & How To Videos

Check out the new Power Platform Community Connections gallery!

M365 768x460.jpg

Microsoft 365 Collaboration Conference | December 7–9, 2021

Join us, in-person, December 7–9 in Las Vegas, for the largest gathering of the Microsoft community in the world.

Users online (1,721)