Forum Discussion
Possible to stream filtered MDE events/alerts to Event Hub or Storage Blob?
If there is a separation of duties between groups where one group has access to all of MDE events/alerts and one group wants access to just their MDE events/alerts, is it possible to stream MDE event...
We streamed the whole DeviceEvents table to an event hub, then used a Stream Analytics task to filter out the events we wanted to a second event hub for consumption
TYVM for the reply and info