Azure Queries
Jump to navigation
Jump to search
Get Data from subfield
SecurityIoTRawEvent | where RawEventName == "ConnectionCreate" | project RemoteAddress=extractjson("$.RemoteAddress", EventDetails, typeof(string))