Microsoft Sentinel Query History not updating

Hey CJ3207​ ,

checked a couple tenants and I'm not seeing the same behavior you're seeing. Wondering if it might be a browser caching issue? I would try clearing it or using a different browser.

I know you're not asking for alternatives but just in case and maybe for future reference, if you're using the Unified SecOps (XDR) dashboard for querying (Advanced Hunting), there's a report you can look at to get your query history. Not only does it log the query but you can also get an idea of how performant your queries are: Use the advanced hunting query resource report - Microsoft Defender XDR | Microsoft Learn

Alternatively, you could also start ingesting your queries so you always have 'em in their own table within Sentinel: Audit queries in Azure Monitor log queries - Azure Monitor | Microsoft Learn

Best regards,

Dylan