Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Datetime parameter not working with queries. #182

Closed
petebryan opened this issue Jul 12, 2021 · 3 comments
Closed

Datetime parameter not working with queries. #182

petebryan opened this issue Jul 12, 2021 · 3 comments
Labels
bug Something isn't working

Comments

@petebryan
Copy link
Contributor

Created from issues raised on DL:

Currently working with some custom queries in msticpy. However using the datetime parameter seems to not be working. The query runs (gives no errors), but it says that there are no query results. If I copy the query and run it in Log Analytics or MDE, it gives results. Example is with MDE but same applies with LA.

Custom query:
image

Calling it from a query provider in notebook:
image

Same query being ran in MDE:
image

@petebryan petebryan added the bug Something isn't working label Jul 12, 2021
@ianhelle
Copy link
Contributor

ianhelle commented Jul 14, 2021

I think this may be because the query parameter is defined as "start_date" but the parameter used when invoking the query function is "start_time".
Because start_date has a default value defined, the query provider doesn't complain about missing parameters.

Will wait for the reporter to confirm the issue/resolution

@petebryan
Copy link
Contributor Author

Confirmed resolved in email thread.

@petebryan
Copy link
Contributor Author

Issue uncovered some tangential issues with MDE connector fixed in 1.3.0 -https://github.com/microsoft/msticpy/releases/tag/v1.3.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants