Merge pull request #703 from temores/patch-1

Adding TimeGenerated field

Parsers/Teams_parser.txt

@@ -19,7 +19,8 @@
 //
 O365API_CL
 | where Workload_s =~ "MicrosoftTeams"
-| project CreationTime=CreationTime_t,
+| project TimeGenerated,
+          CreationTime=CreationTime_t,
           Workload=Workload_s,
           Operation=Operation_s,
           TeamName=columnifexists('TeamName_s', ""),