Having failed connections alerts need to find the users and how manytimes users failed to connect to db details for weekly report
SecurityEvent
| where TimeGenerated >= ago(1d)
| where EventID == 4625
but this query is not giving result in log analytics workspace when running:-
where operator failed to resolve table and column named "securityEvent"
You have to select scope beside run query button and scope to your resource. More info here .
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.