Forum Discussion
Run query for multiple IP
I am trying to run the query in the logic app for a security incident in sentinel. what I expect this query to do is give the result of multiple IP associated with the incident. SigninLogs |wh...
- If you have several IP addresses you should use "Array" instead of "Object".
I would do something like the following: Run query -> From results of the query take IPs and append them to the Array of IPs.
Then you will have the Array of IPs and will be able to use it (send an email, get virustotal results etc.)- if i move them to array then the query is not working
.png){kind=link}
