You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Nov 16, 2023. It is now read-only.
example
Type=Alert (AlertSeverity=error or AlertSeverity=critical) TimeGenerated>NOW-24HOUR AlertState!=Closed
should now be something like this
Alert | where (AlertSeverity =~ "error" or AlertSeverity =~ "critical") and TimeGenerated > ago(24h) and AlertState != "Closed"
this however is not working like it should in current powershell code
The current sample seems to use the old querys
example
Type=Alert (AlertSeverity=error or AlertSeverity=critical) TimeGenerated>NOW-24HOUR AlertState!=Closed
should now be something like this
Alert | where (AlertSeverity =~ "error" or AlertSeverity =~ "critical") and TimeGenerated > ago(24h) and AlertState != "Closed"
this however is not working like it should in current powershell code