Work with data in Microsoft Sentinel using Kusto Query Language

Security Operations Analyst
Microsoft Sentinel
Azure Log Analytics

Learn how to use the Kusto Query Language (KQL) to manipulate string data ingested from log sources.

Learning objectives

Upon completion of this module, the learner will be able to:

  • Extract data from unstructured string fields using KQL
  • Extract data from structured string data using KQL
  • Create Functions using KQL