SOLVED

Problems with PowerBI Templates - issues with Schema

Silver Contributor

I am getting the following error in many of the PowerBI templates , when I review the schema at https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/advanced-..., i don't see a table called MiscEvents. Does anyone know how to fix these queries?

Web.Contents failed to get contents from 'https://api.securitycenter.windows.com/api/advancedqueries?key=MiscEvents%0A%7C%20where%20ActionType...' (400): Bad Request.

2 Replies
best response confirmed by VI_Migration (Silver Contributor)
Solution

@Dean Grossyou are using the old table schema. Please update your queries to the new schema.

You can find the changes documented here: https://techcommunity.microsoft.com/t5/microsoft-defender-atp/advanced-hunting-data-schema-changes/b...

 

@NiklasM Thank you, I had a vague memory of reading about this but could not find it in the actual docs. I wonder why the PowerBI templates that have been released this year, still have the old schema

1 best response

Accepted Solutions
best response confirmed by VI_Migration (Silver Contributor)
Solution

@Dean Grossyou are using the old table schema. Please update your queries to the new schema.

You can find the changes documented here: https://techcommunity.microsoft.com/t5/microsoft-defender-atp/advanced-hunting-data-schema-changes/b...

 

View solution in original post