Microsoft Sentinel Workbook - Queries disappeared and Advanced Editor empty

GigerReto-0189 1 Reputation point
2021-11-26T08:41:24.95+00:00

Hello Microsoft Community,

I have a problem, that my custom Sentiel workbook in Edit mode only shows empty Queries since 2 Weeks. The data is displayed correctly, but when i want to edit some Queries, i just see an empty query field.
152881-image.png

Also in the Advanced Editor is no Code available anymore.
152788-image.png

For sure i have appropriate Rights. It's just one tenant the problem occurs. Maybe someone experienced something similar?

Thank you for your help.

R.G

Microsoft Security | Microsoft Sentinel
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. VipulSparsh-MSFT 16,311 Reputation points Microsoft Employee
    2021-11-30T06:42:21.3+00:00

    @GigerReto-0189 If you want to know what happened and why you cannot see the query, you might need to open a support ticket with the Sentinel team, as this would take few more information to investigate like your tenant Info, Sentinel workspace ID etc.

    Usually you should be able to see all the query in workbook under edit mode.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.