Azure Sentinel Incident filter or sorting

Copper Contributor

Just a simple question, I think.  We are beginning to use Azure Sentinel for our Microsoft 365 and Azure IaaS implementations and with all the incidents being generated, it would be very helpful to be able to either filter or sort the list by entity account or user name.  Is there a way to do this other then viewing details on each user and selecting the entity account there?  This will show the other related incidents to the account but we still have to act on the incident individually instead of applying the status to all the related incidents. 

2 Replies

@rlmieth Sorry this is an Azure Speech technology focused AMA. I would suggest you repost your question here: Azure Monitor - Microsoft Tech Community

Hi rlmieth,

This feature is currently in work in progress.
We are working on adding search and filter of entities.

Yaron