param ( [Parameter (Mandatory=$true)] [object] $WebhookData ) # Write-output $WebhookData # Write-output "############################################################################################" # Write-output $WebhookData.RequestBody # Write-output "############################################################################################" $OMSConnection = Get-AutomationConnection "OMS-GeekPlayGround" $events = (ConvertFrom-Json $WebhookData.RequestBody).SearchResults.value foreach ($event in $events) { $eventData1 = $event.rawdata $eventData2 = $eventData1 -split "is " $eventData3 = $eventData2[1] $eventData4 = $eventData3 -split "," $eventData5 = $eventData4[0] ### Print useful information to verify data Write-output "Time generated " $event.TimeGenerated Write-output "Files " $eventdata5 $time = $event.TimeGenerated Write-Output "Time " $time ### Create custom PS object [double]$files = $eventData5 [string]$computer = $event.computer $props = @{ Files = $files Computer = $computer TimeGenerated = $time } ### Convert to JSON $OMSDataJSON = new-object psobject -Property $props | ConvertTo-JSON #Submit to OMS $InjectData = New-OMSDataInjection -OMSConnection $OMSConnection -LogType 'ContosoAppQueueLog' -UTCTimeStampField $time -OMSDataJSON $OMSDataJSON Write-output "####" Write-output "OMSDataJSON" Write-output $OMSDataJSON Write-output "####" Write-output "InjectData" Write-output $InjectData Write-output "####" Write-output "############################################################################################" }