Forum Discussion
Lookup of one Analytics Rule in Another
Hi Guys, I am trying to create one new rule in Sentinel Analytics which calls/Lookups another previously created Analytics Rule. How can i achieve that, could you kindly provide an input. It wil...
GaryBushey Hi Gary,
Thanks for replying. Actually i have already created one rule and wanted its results in the new rule (user_machine) which i have not created yet.
One way is to write the query again for the already created rule in the new rule (however that is a tedious task).
The feature to call already created rules is there in many SIEM solutions. It will be useful if it is present in Sentinel.
kmanish Thank you for the clarification. The "SecurityAlert" table in the Logs contains all the alerts that have been created. You should be able to query that to get the information you need.