Query an Ip address in KQL - azure

Am quite new to this, I am trying to get a query to search logs for Ip address activity in Microsoft sentinel using KQL, any help would be much appreciated.
I just don't know the right query to use for this .

Just use the search operator.
See chapter 4 of the Must Learn KQL series for an easy walkthrough: https://aka.ms/MustLearnKQL

Related

Gather browser details used to browse webpage

I am tasked with the development of a web page.
As a part of this, I also need to collect the details of browser used by the users to browse the web page (along with version, timestamp & IP).
Tried searching over the internet but maybe my search was not properly directed.
I am not sure how to go about this.
Any pointer to get me started here would help me a long way.
I would also like to know how to store the information thus collected.
Not sure if this is a good idea - but just thinking out loud - are there any online service/channel available where the data can be uploaded in real time - like thingspeak.
Thanks
Google Analytics is great, but it doens't give you the data (for free). So if you want your data in e.g. SQL format then I may suggest a you use a tool that collects the data for you and then sends it to Google Analytics.
We use Segment (segment.io, but there are probably other tools out there too) for this, they have a free plan. You will need to create a Warehouse in AWS and all your data will be stored there, incl. details of the browser (version, timestamp, IP).
Disclaimer: I do not work for Segment, but I am a customer.
Enable Google Analytics in your website, then after 1 week, take a look at the Google Analytics page to see data that was collected.
Follow the guide here to configure Google Analytics on your website: https://support.google.com/analytics/answer/1008080?hl=en
You should go for alternatives like Segment(https://segment.com/), Mixpanel(https://mixpanel.com/) and similars. They can guarantee consistency for your data and also integrate to many different analytics tools and platforms.

Implementing geocoding of cities with my own DB or Google Maps API (or other solution)?

I would like to know what people recommend for geocoding city inputs from users. I am trying to get the Lat/Long of a city a user inputs. One option is to utilize an API with such a service, i.e. Google Maps. Another I was considering was creating my own DB with an online dataset of cities and build an api around it myself. I think fuzzy search capabilities would be a requirement. Are there any thoughts on what the best way to implement this would be, or is it better to just go with a robust existing API? I am building my web app with Express/NodeJS. Thanks for the help!
The best and easiest solution is to go with the Geocoding API from Google, since it is built having in mind the integration with other services from Google Maps.
It has a very simple setup process, you just create your geocoder which you feed give the input which has passed through the autocomplete from Places
Hope this helps! Best of luck!

Wikipedia People API

I want to use wikipedia API to list the peoples whose birthday is on particular date.
Anybody has used it before? Please advice me in right direction.
Wikipedia doesn't provide this information directly, try DBPedia.
Wikipedia hosts its data on Wikidata, which is powered by the Wikibase web API.

tagging content with geolocation

I am trying to develop an application where users will post content. It is a user-generated application, so every post will have a location attached to it, so that it can be filtered later for other users in that area or city.
For example: say users can list books on my website to sell. Now while listing I want to provide them a text box where they can enter a location. Now the entered location should be valid, so how do I verify that?
Also after posting the book, someone else searches for a book in his location then he/she should not only get results for his location but other nearby locations too.
These are few of my questions. If someone can answer them and guide me, I'd really appreciate it. Thanks.
To verify people's location, you'll want to use the HTML5 geolocation capabilities. Take a look here for a demo: http://merged.ca/iphone/html5-geolocation
Searching nearby is a bit trickier, but there are a few options. You could use a geocoding service (Google and Bing for example both offer geocoding REST APIs) to determine if people are in the same city, zip code, etc. Perhaps a better solution is to use database queries to search for nearby posts. Many databases now offer built-in geospatial data types to support exactly this kind of scenario. MySQL for example: http://dev.mysql.com/doc/refman/5.0/en/mysql-spatial-datatypes.html

LogParser query to grab only external IP addresses from IIS logs?

I tried this question over at ServerFault and didn't have any luck, so I thought I'd try here.
I'm working on a public website that is used by both external visitors and internal employees. I'm after the external visitor hits, but I can't think of a good way to filter out the internal IP ranges.
Using LogParser, what is the best way to filter IISW3C logs by IP range?
This is all I've come up with so far, which can't possibly be the best or most efficient way.
WHERE [c-ip] NOT LIKE (10.10.%, 10.11.%)
Any help is appreciated.
The only other option is to use IPV4_TO_INT and Bitwise functions in your where clause. Personally I think what you have right now will be more readable and easier to maintain.

Resources