Hi, I've got a bunch of connectors added and it's pulling data, but I know O365 and Azure for example have like 90 days of legacy data in there, is there a way to tell Sentinel to pull in all that data for events that have already occurred?
At the moment the collectors will collect the data generated after they were enabled.
We will consider adding support for history data later on.
Ah okay, thanks. Please do consider it, that would be super helpful.