Blog Post

Microsoft Sentinel Blog

2 MIN READ

Data Connector Health - Push Notification Alerts

Microsoft

Dec 17, 2020

This enhanced solution builds on the existing “Connector Health Workbook” described in this video. The Logic App leverages underlying KQL queries to provide you with an option to configure “Pu...

Updated Nov 01, 2021

Version 7.0

Inwafula

Microsoft

Joined November 11, 2017

View Profile

Microsoft Sentinel Blog

Follow this blog board to get notified when there's new activity

pemontto

Brass Contributor

Dec 17, 2020

This is not currently working in any of our Sentinel instances. Scheduled searches with union * fail to save with the error message:

Failed to save analytics rule 'Sentinel table missing logs'. Invalid data model. [Properties.Query: Scheduled alert rule query should not contain 'search' or 'union *']

Related Github issue: https://github.com/Azure/Azure-Sentinel/issues/1437