Jul 28 2020 06:39 AM
I am getting the following error in many of the PowerBI templates , when I review the schema at https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/advanced-..., i don't see a table called MiscEvents. Does anyone know how to fix these queries?
Web.Contents failed to get contents from 'https://api.securitycenter.windows.com/api/advancedqueries?key=MiscEvents%0A%7C%20where%20ActionType...' (400): Bad Request.
Jul 29 2020 03:00 AM
Solution@Dean Grossyou are using the old table schema. Please update your queries to the new schema.
You can find the changes documented here: https://techcommunity.microsoft.com/t5/microsoft-defender-atp/advanced-hunting-data-schema-changes/b...
Jul 29 2020 05:30 AM
@NiklasM Thank you, I had a vague memory of reading about this but could not find it in the actual docs. I wonder why the PowerBI templates that have been released this year, still have the old schema