Work with data in Microsoft Sentinel using Kusto Query Language

  • Module
  • 7 Units
Intermediate
Security Operations Analyst
Microsoft Sentinel
Azure Log Analytics

Learn how to use the Kusto Query Language (KQL) to manipulate string data ingested from log sources.

Learning objectives

Upon completion of this module, the learner is able to:

  • Extract data from unstructured string fields using KQL
  • Extract data from structured string data using KQL
  • Create Functions using KQL
Start