Forum Discussion
Entities missing in Incidents
Hello, Entities are not showing on any of the incidents in Sentinel. Although, I have mapped the entities correctly for each alert. I have the same alerts and entities mapping on other te...
Hi Sidra, this sounds like an issue we had last year with the old queries. I would first, make sure that you are using the latest version of the analytic rule. If you are not, it may be related to this: https://learn.microsoft.com/en-us/azure/sentinel/whats-new#account-enrichment-fields-removed-from-azure-ad-identity-protection-connector