Forum Discussion

sudeepsundash's avatar
sudeepsundash
Copper Contributor
Nov 04, 2026

Microsoft Sentinel - switching simple mode to kql mode in sentinel logs

In sentinel, when i go to the alert page and from there i opened the corresponding the events using Link to LA clickable link, it opens the events in simple mode. However i have configured the Logs to open it in KQL mode and every time i have to changed it to KQL mode to do the task

 

No RepliesBe the first to reply