Export data from sentinel to external systems

[tomscloud]

Can I export data from sentinel?

[#2]

@tomscloud 

Probably depending on the external System?  Some options:

1.  Export to a CSV file the query results in the Log Blade

2. Use the Log Analytics API query the Log Analytics API 

3. Use Logic Apps 

[#3 · Accepted solution]

@tomscloud @CliveWatson

We have recently created a Sentinel template notebook which helps users export large log datasets from Sentinel/LA to external storage (using the Log Analytics API under the hood).

See the blog post for a walkthrough: Export Historical Data from Log Analytics (microsoft.com)

The template notebook is available via the Sentinel UI (see below) or from GitHub.