This installment is part of a broader series to keep you up to date with the latest features in Azure Sentinel. The installments will be bite-sized to enable you to easily digest the new content.
...
Updated Nov 02, 2021
Version 6.0
Blog Post
Nice!
Would love to see custom and unlimited entities at some time in the future. Some organisations use Analytics rules to trigger Playbooks (LogicApps) to integrate with their ticketing systems. Having only pre-defined entities limits the amount of information one can get to these outside systems. There is a workaround to re-run the query and extract the fields within the LogicApp, but I wish it was handled in the Analytics rule instead.