External Data Azure IP Address Ranges
Query
// The link from Microsoft must be updated
// You may find the name of the new JSON here: https://www.microsoft.com/download/details.aspx?id=56519
externaldata(changeNumber: string, cloud: string, values: dynamic)
["https://download.microsoft.com/download/7/1/D/71D86715-5596-4529-9B13-DA13A5DE5B63/ServiceTags_Public_20221010.json"]
with(format='multijson')
| mv-expand values
| project values.id, values.properties.systemService, values.properties.networkFeatures, values.properties.region, values.properties.regionId, IPRange = values.properties.addressPrefixes
| mv-expand IPRange to typeof(string)
//| distinct IPRange
//| where ipv4_is_in_range("20.0.0.0", IPRange)
| limit 10000Explanation
This query retrieves data from a JSON file hosted on Microsoft's website. The data includes information about cloud services, network features, regions, and IP ranges. The query expands and projects specific fields from the data, and limits the results to 10,000 records.
Details

Jose Sebastián Canós
Released: March 10, 2023
Tables
No table names are mentioned in the given query.
Keywords
DevicesIntuneUser
Operators
externaldatawithmv-expandprojecttypeoflimit