KQL query to check tri.sensor for MDI

Brass Contributor

I was looking for a query to run to check that all the deployed MDI sensor's are running successfully.  I have reviewed the 3 Identity tables listed within the Monitor > Logs table schema but unable to find the right query.

Please let me know if any other information is needed.

Cheers,

Serge

1 Reply

@SergioT1228 

The Advanced Hunting tables contain security related data from your environment. They don't contain details on your deployment status.

You can use the portal for that, see the sensors page and the health issues page.

Also, we are working on public APIs that you could use to get this information (and much more). But these are several months away from GA.