.alter table EventsTable policy update @'[{"IsEnabled": true,"Source": "TelemetryTable","Query": "let raw = materialize(TelemetryTable | where Type == \"Event\" | extend payload = Telemetry | project SerialNumber, MachineType, Environment, Organization, Site, CreatedTime, UploadTime, ID = tostring(payload.ID), HostName = tostring(payload.HostName), EventTypeGuid = tostring(payload.EventTypeGuid), Description = tostring(payload.Description)); raw","IsTransactional": false,"PropagateIngestionProperties": true}]'