如何设置失败连接的警报和逻辑应用程序自动化它

Question

Having failed connections alerts need to find the users and how manytimes users failed to connect to db details for weekly report

SecurityEvent

            | where TimeGenerated >= ago(1d)

            | where EventID == 4625

but this query is not giving result in log analytics workspace when running:-

where operator failed to resolve table and column named "securityEvent"

Answer 1

You have to select scope beside run query button and scope to your resource. More info here .