How to export incidents in azure sentinel

[Pavan_Gelli]

Hi Team,

I have need to export the incidents to excel. Is this possible ?

Basically i want to summarize the no of incidents triggered for curtain time period and do further analysis on this.

Thanks

[#2]

@Pavan_Gelli would be doing a query against SecurityAlert work?  It shows the alerts but not the actual incidents but the numbers should be close if you don't need the exact information from the incident. If you query in the Logs screen you can export your results.

[#3]

@Pavan_Gelli Once you have the KQL query you want, run it and then choose the Export menu. Is this what you're talking about?

[#4]

Just saw this great post on LinkedIn about it. https://azsec.azurewebsites.net/2019/12/16/extract-all-azure-sentinel-incidents/

[#5]

I want close all key vault incidents. But i dont see way to do this using PS @Gary Bushey