Forum Discussion
sudeepsundash
Nov 04, 2026Copper Contributor
Microsoft Sentinel - switching simple mode to kql mode in sentinel logs
In sentinel, when i go to the alert page and from there i opened the corresponding the events using Link to LA clickable link, it opens the events in simple mode. However i have configured the Logs to open it in KQL mode and every time i have to changed it to KQL mode to do the task
No RepliesBe the first to reply