Dec 23 2021
11:55 AM
- last edited on
Jan 04 2022
12:08 PM
by
TechCommunityAP
Dec 23 2021
11:55 AM
- last edited on
Jan 04 2022
12:08 PM
by
TechCommunityAP
I'm trying to get some of the pre-built queries that use the aadFunc() to query into a different workspace. I've tried a number of methods and continuously get the error of:
let aadFunc = (workspaceName:string, tableName:string){
workspace(workspaceName).table(tableName)
| where TimeGenerated >= ago(7d)
};
let aadSignin = aadFunc("workspace('a').","SigninLogs");
let aadNonInt = aadFunc("workspace('a').","AADNonInteractiveUserSignInLogs");
union isfuzzy=true aadSignin, aadNonInt
I've also tried just setting the tableName parameter to the full "workspace('a').SigninLogs" as a string, and it also returned a similar errors:
let aadFunc = (tableName:string){
table(tableName)
| where TimeGenerated >= ago(7d)
};
let aadSignin = aadFunc("workspace('a').SigninLogs");
let aadNonInt = aadFunc("workspace('a').AADNonInteractiveUserSignInLogs");
union isfuzzy=true aadSignin, aadNonInt
Any thoughts or suggestions on getting this to function properly?
Dec 26 2021 01:45 AM