cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
T_H_E_Z_E_R_O
Regular Visitor

Problems with the "Isolate machine using Windows Defender upon a Cloud App Security alert" template.

Hello guys,

 

I am working with the "Isolate machine using Windows Defender upon a Cloud App Security alert" template right now and I have run into some problems. When the Flow runs it fails at the Advanced Hunting part with the error message "'where' operator: Failed to resolve table or column expression named 'LogonEvents'. Fix semantic errors in your query".

 

Link to the template: https://emea.flow.microsoft.com/en-us/galleries/public/templates/e1324d070bf24d129b5c54038e503e84/is...

 

I tried to rebuild the Advanced Hunting query in the Microsoft 365 Security Center and the 'LogonEvents' aren't available there too. 

Any ideas how can I get this template to work?

 

Thanks in advance and best regards.

0 REPLIES 0

Helpful resources

Announcements
Microsoft 365 Conference – December 6-8, 2022

Microsoft 365 Conference – December 6-8, 2022

Join us in Las Vegas to experience community, incredible learning opportunities, and connections that will help grow skills, know-how, and more.

Difinity Conference 2022

Difinity Conference 2022

Register today for two amazing days of learning, featuring intensive learning sessions across multiple tracks, led by engaging and dynamic experts.

European SharePoint Conference

European SharePoint Conference

The European SharePoint Conference returns live and in-person November 28-December 1 with 4 Microsoft Keynotes, 9 Tutorials, and 120 Sessions.

Users online (1,989)