Had Claude make its own MCP server to access this. It generates the following errors when used. Probably nothing, but figured I'd mention it.
- let tabular expressions cause phantom "Unknown error" — correlates with number of tabular let statements; scalar
lets don't trigger it; output resolution still works correctly; treat as parser noise
- TimeGenerated shows type "error" in union scenarios — type inference breaks across union of let-defined variables;
all other columns resolve fine
⎿ {
"result": "## Parsing Errors\n- ? [?]: Unknown error\n- ? [?]: Unknown error\n- ? [?]: Unknown er
ror\n- ? [?]: Unknown error\n- ? [?]: Unknown error\n- ? [?]: Unknown error\n\n## Output Columns\n-
… +8 lines (ctrl+o to expand)
⎿ {
"result": "## Parsing Errors\n- ? [?]: Unknown error\n- ? [?]: Unknown error\n\n## Output Columns\n-
AlertSeverity (string)\n- Country (string)\n- DeviceName (string)\n- DistinctTargets (long)\n- `IPAddre
… +7 lines (ctrl+o to expand)
Had Claude make its own MCP server to access this. It generates the following errors when used. Probably nothing, but figured I'd mention it.
lets don't trigger it; output resolution still works correctly; treat as parser noise
all other columns resolve fine
⎿ {
"result": "## Parsing Errors\n- ? [?]: Unknown error\n- ? [?]: Unknown error\n- ? [?]: Unknown er
ror\n- ? [?]: Unknown error\n- ? [?]: Unknown error\n- ? [?]: Unknown error\n\n## Output Columns\n-
… +8 lines (ctrl+o to expand)
⎿ {
"result": "## Parsing Errors\n- ? [?]: Unknown error\n- ? [?]: Unknown error\n\n## Output Columns\n-
AlertSeverity(string)\n-Country(string)\n-DeviceName(string)\n-DistinctTargets(long)\n- `IPAddre… +7 lines (ctrl+o to expand)