Forum Discussion
KQL query
Hi Team, we want failed attempt with in 5m duration but query is stopped for last line. Please correct me. let threshold=1; let authenticationWindow = 5m; SigninLogs | where UserPrincipalName =...
Thankyou for reply. If i want to add some more field in alert like IPAddress, Location etc.. so where i ahve to edit. could you please edit so i will update again accordingly.
It all depends on what you want the end result to look like and how the filtering is supposed to be done.
Chatgpt can also generate KQL queries.
Chatgpt can also generate KQL queries.