Unable to Run Kusto function ConfluenceAudit

Question

Unable to Run Kusto function ConfluenceAudit

Ajinkya Errum 1

Hi,

I am trying to add Atlassian Confluence Data connector to Azure Sentinel. I have followed All the instructions on how to setup the Data connector but when I am trying to run the paser based Kutos function ConfluenceAudit am getting the below Error :

'extend' operator: Failed to resolve table or column expression named 'Confluence_Audit_CL'
If issue persists, please open a support ticket. Request id: 2b87b964-4dc8-47ec-9867-ec911f497708

JamesTran-MSFT 37,221 Reputation points Microsoft Employee Moderator

2021-07-16T23:46:04.593+00:00
@Ajinkya Errum
Thank you for your post!

Based off your error message, can you make sure that the table or column that you're trying to query (Confluence_Audit_CL) exists?

Are you able to share the Kusto query you're trying to run or any other documentation that you might be following for this?

Any additional information or screenshots would be greatly appreciated!

If you have any other questions or would like to work closer with our Azure Sentinel support team, please let me know.
Thank you for your time and patience throughout this issue.
Ajinkya Errum 1 Reputation point

2021-07-19T06:53:27.283+00:00

Hi James,

II followed the steps given in the Data connector connectors page and just copy pasted the query as it is from the suggestion.
https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ConfluenceAudit/ConfluenceAudit.txt

As instructed :

// Paste below query in log analytics, click on Save button and select as Function from drop down by specifying function name and alias as ConfluenceAudit.
// Function usually takes 10-15 minutes to activate. You can then use function alias from any other queries (e.g. ConfluenceAudit | take 10).
Anonymous

2023-12-18T20:39:17.1966667+00:00

Hello.

This URL is not functional...

Where can I get the Kusto definition of the table 'Confluence_Audit_CL' ?

There is a link to it for Jira here : https://learn.microsoft.com/en-us/azure/sentinel/data-connectors/atlassian-jira-audit-using-azure-functions

But not for Confluence... : https://learn.microsoft.com/en-us/azure/sentinel/data-connectors/atlassian-confluence-audit-using-azure-functions

Thx

1 answer

Your answer

JamesTran-MSFT 37,221 Reputation points Microsoft Employee Moderator

2021-07-16T23:46:04.593+00:00

@Ajinkya Errum
Thank you for your post!

Based off your error message, can you make sure that the table or column that you're trying to query (Confluence_Audit_CL) exists?

Are you able to share the Kusto query you're trying to run or any other documentation that you might be following for this?

Any additional information or screenshots would be greatly appreciated!

If you have any other questions or would like to work closer with our Azure Sentinel support team, please let me know.
Thank you for your time and patience throughout this issue.
Ajinkya Errum 1 Reputation point

2021-07-19T06:53:27.283+00:00

Hi James,

II followed the steps given in the Data connector connectors page and just copy pasted the query as it is from the suggestion.
https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ConfluenceAudit/ConfluenceAudit.txt

As instructed :

// Paste below query in log analytics, click on Save button and select as Function from drop down by specifying function name and alias as ConfluenceAudit.
// Function usually takes 10-15 minutes to activate. You can then use function alias from any other queries (e.g. ConfluenceAudit | take 10).
Anonymous

2023-12-18T20:39:17.1966667+00:00

Hello.

This URL is not functional...

Where can I get the Kusto definition of the table 'Confluence_Audit_CL' ?

There is a link to it for Jira here : https://learn.microsoft.com/en-us/azure/sentinel/data-connectors/atlassian-jira-audit-using-azure-functions

But not for Confluence... : https://learn.microsoft.com/en-us/azure/sentinel/data-connectors/atlassian-confluence-audit-using-azure-functions

Thx

Answer 1

@Ajinkya Errum
Thank you for your time and patience throughout this issue!

After creating my own lab and walking through the connector steps, I was able to reproduce your issue. Based off the error message, I'd recommend creating a support request and if you aren't a CSP, I'll be more than happy to enable your subscription for a one-time free technical support request, so our support team can take a closer look into your environment and issue.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Share via

Unable to Run Kusto function ConfluenceAudit

1 answer

Your answer