Forum Discussion
ebstes
Nov 02, 2024Copper Contributor
Logic app to close adminstrative tasks
I am trying to create a logic app that closes adminstrative tasks in sentinel after checking Userprincipalname and IPaddress. It will also check if the userprincipalname exists in a watchlist a...
Clive_Watson
Nov 15, 2024Bronze Contributor
Without providing the code you are using for "check if the userprincipalname exists in a watchlist " its hard for us to troubleshoot. Did the code work but you didnt get the right result, or did the code not work?
I'm assuming you did something like this, I used a datatable to simulate this
let watchlist_ = datatable(UserPrincipalName:string)
[
'email address removed for privacy reasons',
'email address removed for privacy reasons'
];
SigninLogs
| where UserPrincipalName in (watchlist_)