Forum Discussion

JMSHW0420's avatar
JMSHW0420
Iron Contributor
Apr 07, 2023

RE: KQL query for event types per table used by Microsoft Sentinel (and connected Data Connectors)

So with a base KQL query of:   union withsource= table *   ...is there a way to query each table in Microsoft Sentinel and identify each EVENT type used within it? So listed as... Table 1...

Resources