Forum Discussion

SergioT1228's avatar
SergioT1228
Brass Contributor
Nov 12, 2022

KQL query to check tri.sensor for MDI

I was looking for a query to run to check that all the deployed MDI sensor's are running successfully.  I have reviewed the 3 Identity tables listed within the Monitor > Logs table schema but unable to find the right query.

Please let me know if any other information is needed.

Cheers,

Serge

  • Martin_Schvartzman's avatar
    Martin_Schvartzman
    Icon for Microsoft rankMicrosoft
    Nov 13, 2022

    SergioT1228 

    The Advanced Hunting tables contain security related data from your environment. They don't contain details on your deployment status.

    You can use the portal for that, see the sensors page and the health issues page.

    Also, we are working on public APIs that you could use to get this information (and much more). But these are several months away from GA.

Resources