cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
T_H_E_Z_E_R_O
Regular Visitor

Problems with the "Isolate machine using Windows Defender upon a Cloud App Security alert" template.

Hello guys,

 

I am working with the "Isolate machine using Windows Defender upon a Cloud App Security alert" template right now and I have run into some problems. When the Flow runs it fails at the Advanced Hunting part with the error message "'where' operator: Failed to resolve table or column expression named 'LogonEvents'. Fix semantic errors in your query".

 

Link to the template: https://emea.flow.microsoft.com/en-us/galleries/public/templates/e1324d070bf24d129b5c54038e503e84/is...

 

I tried to rebuild the Advanced Hunting query in the Microsoft 365 Security Center and the 'LogonEvents' aren't available there too. 

Any ideas how can I get this template to work?

 

Thanks in advance and best regards.

0 REPLIES 0

Helpful resources

Announcements
Power Automate News & Announcements

Power Automate News & Announcements

Keep up to date with current events and community announcements in the Power Automate community.

Community Calls Conversations

Community Calls Conversations

A great place where you can stay up to date with community calls and interact with the speakers.

Power Automate Community Blog

Power Automate Community Blog

Check out the latest Community Blog from the community!

Users online (3,977)