ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Transfer Microsoft Sentinel Logs to Azure Data Explorer

    Starwind
    starwind microsoft azure sentinel kql kusto query language
    2
    1
    256
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • OksanaO
      Oksana
      last edited by

      1.png

      Azure Data Explorer is a powerful software for real-time analysis of large volumes of streamed data. However, it can be used for data storage as well, and it’s cheaper than Microsoft Sentinel. Additionally, the service is useful if you want to query logs with Kusto Query Language (KQL), which is also available for Azure Log Analytics.

      Read the article by Nicolas Prigent, a three-time Microsoft MVP, on how to transfer your Microsoft Sentinel logs to Azure Data Explorer for cheaper data storage and robust data analytics.

      1 Reply Last reply Reply Quote 1
      • 1 / 1
      • First post
        Last post