Azure Queries

From bibbleWiki
Revision as of 20:23, 23 October 2019 by Iwiseman (talk | contribs) (Created page with "=Get Data from subfield <source> SecurityIoTRawEvent | where RawEventName == "ConnectionCreate" | project RemoteAddress=extractjson("$.RemoteAddress", EventDetails, typeof...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

=Get Data from subfield

 SecurityIoTRawEvent  | where RawEventName  == "ConnectionCreate" | project RemoteAddress=extractjson("$.RemoteAddress", EventDetails, typeof(string))