Forum Discussion
Logic app - Escaped Characters and Formatting Problems in KQL Run query and list results V2 action
I’m building a Logic App to detect sign-ins from suspicious IP addresses. The logic includes: Retrieving IPs from incident entities in Microsoft Sentinel. Enriching each IP using an external API. ...
Solution: Extract the object type and convert it to a string with an initialization variable, append the string variable, and call it in the DynamicUPNKQL.
Root cause: The escaping was due to object extraction, which is incompatible with KQL, even in a concat.
Solution: Extract the object type and convert it to a string with an initialization variable, append the string variable, and call it in the DynamicUPNKQL.
Root cause: The escaping was due to object extraction, which is incompatible with KQL, even in a concat.