We are running a query using a Logic App that pulls in data from the Security Event table and we are encountering an error a majority of the time when we run it.
BadRequest. Http request failed as there is an error: 'Cannot write more bytes to the buffer than the configured maximum buffer size: 104857600.'.
The time range is only configured to look at 15 minute intervals. We have been decreasing the scope, but shortening our time range hasn't seemed to make any difference.
Any insight into this would be great.
The query and time range are configured as follows:
SecurityEvent
| where ingestion_time() between(datetime(2020-05-22T00:00:00.0000000) .. datetime(2020-05-22T00:15:00.0000000))
between(datetime(2020-05-22T00:00:00.0000000) .. datetime(2020-05-22T00:15:00.0000000)
