Forum Discussion

vicky2019's avatar
vicky2019
Copper Contributor
May 22, 2019
Solved

OMS queries update error

Hi Guys,    I'm facing error for this query appreciate it if anyone can help me with it   ProtectionStatus | summarize (TimeGenerated, Rank) = argmax(TimeGenerated, ThreatStatusRank) by Computer ...
Azure Log Analytics
azure monitor
  • CliveWatson's avatar
    CliveWatson
    May 22, 2019
    This works

    ProtectionStatus
    | where ThreatStatusRank > 199 and ThreatStatusRank != 470
    | summarize (TimeGenerated, Rank) = argmax(TimeGenerated, ThreatStatusRank) by Computer

CliveWatson's avatar
CliveWatson
Former Employee
May 22, 2019
This works

ProtectionStatus
| where ThreatStatusRank > 199 and ThreatStatusRank != 470
| summarize (TimeGenerated, Rank) = argmax(TimeGenerated, ThreatStatusRank) by Computer

Resources