We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The Authenticated User Timeline Workbook does not escape UserId in Session Timeline sec.
UserId
KQL snippet:
set query_take_max_records=10001;set truncationmaxsize=67108864; let monthName = (month:int) { case( month == 1, 'January', month == 2, 'February', month == 3, 'March', month == 4, 'April', month == 5, 'May', month == 6, 'June', month == 7, 'July', month == 8, 'August', month == 9, 'September', month == 10, 'October', month == 11, 'November', month == 12, 'December', '' ) }; union customEvents, pageViews | where timestamp > ago(1d) | where user_AuthenticatedId == 'domain\testuser' // needs to be escaped | where name in ('') or '' in ('*') | summarize Activities = count(), Start = min(timestamp) by SessionId = session_Id | order by Start desc | project ['Session Start'] = strcat('⌚ ', monthName(monthofyear(Start)), ' ', dayofmonth(Start), ', ', tolower(format_datetime(Start, 'h:mm tt'))), Activities, SessionId //'⌚'
Is the expectation that the source data is responsible for escaping? If not, is there an accepted pattern or utility in other Workbooks?
Happy to submit a PR based on feedback.
The text was updated successfully, but these errors were encountered:
@MSKaiLian i think this is an appinsights template, just needs to have that parameter use :escape in the query like {parameterName:escape} ?
:escape
{parameterName:escape}
Sorry, something went wrong.
MSKaiLian
No branches or pull requests
The Authenticated User Timeline Workbook does not escape
UserId
in Session Timeline sec.KQL snippet:
set query_take_max_records=10001;set truncationmaxsize=67108864;
let monthName = (month:int) {
case(
month == 1, 'January',
month == 2, 'February',
month == 3, 'March',
month == 4, 'April',
month == 5, 'May',
month == 6, 'June',
month == 7, 'July',
month == 8, 'August',
month == 9, 'September',
month == 10, 'October',
month == 11, 'November',
month == 12, 'December',
''
)
};
union customEvents, pageViews
| where timestamp > ago(1d)
| where user_AuthenticatedId == 'domain\testuser' // needs to be escaped
| where name in ('') or '' in ('*')
| summarize Activities = count(), Start = min(timestamp) by SessionId = session_Id
| order by Start desc
| project ['Session Start'] = strcat('⌚ ', monthName(monthofyear(Start)), ' ', dayofmonth(Start), ', ', tolower(format_datetime(Start, 'h:mm tt'))), Activities, SessionId
//'⌚'
Is the expectation that the source data is responsible for escaping?
If not, is there an accepted pattern or utility in other Workbooks?
Happy to submit a PR based on feedback.
The text was updated successfully, but these errors were encountered: