UniFi Site Manager: Device Offline

Requête originale, sans modification.

// UniFi Device Offline Detection
Unifi_SiteManager_Devices_CL
| where TimeGenerated > ago(1h)
| summarize arg_max(TimeGenerated, *) by Id
| where Status == "offline"
| extend OfflineMinutes = datetime_diff('minute', now(), TimeGenerated)
| where OfflineMinutes >= 10
| extend
    DeviceName = coalesce(Name, "Unnamed"),
    DeviceId = Id,
    Model = Model,
    IPAddress = Ip,
    MACAddress = Mac,
    ProductLine = ProductLine,
    FirmwareVersion = Version
| extend HostName = DeviceName
| project
    TimeGenerated,
    DeviceName,
    DeviceId,
    Model,
    IPAddress,
    MACAddress,
    ProductLine,
    Status = Status,
    OfflineMinutes,
    FirmwareVersion,
    HostName