Aug 20 2020 08:41 AM
We are running a query using a Logic App that pulls in data from the Security Event table and we are encountering an error a majority of the time when we run it.
BadRequest. Http request failed as there is an error: 'Cannot write more bytes to the buffer than the configured maximum buffer size: 104857600.'.
The time range is only configured to look at 15 minute intervals. We have been decreasing the scope, but shortening our time range hasn't seemed to make any difference.
Any insight into this would be great.
The query and time range are configured as follows:
SecurityEvent
| where ingestion_time() between(datetime(2020-05-22T00:00:00.0000000) .. datetime(2020-05-22T00:15:00.0000000))
between(datetime(2020-05-22T00:00:00.0000000) .. datetime(2020-05-22T00:15:00.0000000)
Aug 21 2020 09:25 AM
@mperrotta It appears that you are getting too much data returned. If you lower the time range do you get data?