Forum Discussion

rlmieth's avatar
rlmieth
Copper Contributor
Feb 10, 2021

Azure Sentinel Incident filter or sorting

Just a simple question, I think.  We are beginning to use Azure Sentinel for our Microsoft 365 and Azure IaaS implementations and with all the incidents being generated, it would be very helpful to be able to either filter or sort the list by entity account or user name.  Is there a way to do this other then viewing details on each user and selecting the entity account there?  This will show the other related incidents to the account but we still have to act on the incident individually instead of applying the status to all the related incidents. 

3 Replies

Resources