Query logs in Microsoft Sentinel

Security Operations Analyst

As a Security Operations Analyst, you must understand the tables, fields, and data ingested in your workspace. Learn how to query the most used data tables in Microsoft Sentinel.

Learning objectives

Upon completion of this module, the learner will be able to:

  • Use the Logs page to view data tables in Microsoft Sentinel
  • Query the most used tables using Microsoft Sentinel


Basic knowledge of operational concepts such as monitoring, logging, and alerting