Skip to content

Commit

Permalink
Change hardcoded value to variable
Browse files Browse the repository at this point in the history
Variable threshold was unused and variable windowEnd was hard-coded to TimeGenerated+5m.
  • Loading branch information
aljicamsft authored Jan 13, 2025
1 parent 66a5975 commit 1594afc
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -31,10 +31,10 @@ query: |
| project OperationName, DeletedTime=TimeGenerated, Uri
) on Uri
| project TimeGenerated, DeletedTime, Uri, CallerIpAddress, UserAgentHeader, ResponseMd5, StorageAccount=AccountName
| extend windowEnd = TimeGenerated+5m
| extend windowEnd = TimeGenerated+threshold
| where DeletedTime between (TimeGenerated .. windowEnd)
entityMappings:
- entityType: IP
fieldMappings:
- identifier: Address
columnName: CallerIpAddress
columnName: CallerIpAddress

0 comments on commit 1594afc

Please sign in to comment.