Forum Discussion

2 Replies

  • rzand1570's avatar
    rzand1570
    Copper Contributor

    Find an explanation and a workaround at https://github.com/Azure/Azure-Sentinel/issues/11885

  • eholl's avatar
    eholl
    Copper Contributor

    I am wondering the same thing... quite the bummer if that's true. Not sure if this will be a good substitute, but I'm going to use the "KQL Training" to see if that suffices. 

Resources