Blog Post

Microsoft Sentinel Blog

2 MIN READ

What’s New: Azure Sentinel Update Watchlist UI Enhancements

Microsoft

Jun 16, 2021

This blog post is a collaboration between @Cristhofer Munoz and @JulianGonzalez This installment is part of a broader series to keep you up to date with the latest features/enhancements in Azu...

Updated Jun 16, 2021

Version 2.0

Cristhofer Munoz

Microsoft

Joined October 17, 2017

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

jeffazure

Copper Contributor

Aug 19, 2021

Cristhofer MunozWell this does not work exactly as expected in my tenant.

In my watchlist I added via CSV lines 1,2 ; and then added with your feature lines 3 and 4.

Direct watchlist update : 4 items

and then i click on the top-right cross (close) and click on "Reflresh", and reload page (100% sure!)

Pardon my French.

Using KQL's _GetWatchlist('Whitelist_Secured_Accounts') yields entries 1,2,4.

Bug?