Microsoft security center api filter not working

Question

I'm attempting to use this URI to find a specific machine ID so then we can query for the most recent logged on user. When I run this I get an output of all the devices in defender. I'm stuck and not sure where to go from here

https://api.securitycenter.microsoft.com/api/machines?$filter=computerDnsName eq 'computer name goes here"

Answer 1

Find the machine id and use this api - https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/get-machine-log-on-users?view=o365-worldwide

https://api.securitycenter.microsoft.com/api/machines/'machine id'/logonuser

Answer 2

To find the ID based on device name use this API call.

https://api.securitycenter.microsoft.com/api/machines?$filter=computerDnsName eq 'Device Name goes here'. Once you get the device name you can then do the logged on user look up using this.

https://api.securitycenter.microsoft.com/api/machines/id