'how to setup the alerts for failed connections and logic apps automate it

Having failed connections alerts need to find the users and how manytimes users failed to connect to db details for weekly report

SecurityEvent

            | where TimeGenerated >= ago(1d)

            | where EventID == 4625

but this query is not giving result in log analytics workspace when running:-

where operator failed to resolve table and column named "securityEvent"

Solution 1:^[1]

You have to select scope beside run query button and scope to your resource. More info here.

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Solution	Source
Solution 1	James_Hamil-MSFT