Author: admin


  • In Microsoft Sentinel, tables are where all your collected data is stored and organized within the Log Analytics workspace. Each table represents a specific type of data—like security events, sign-ins, alerts, or network logs—and has its own schema with defined fields. These tables are the foundation for running Kusto Query Language (KQL) queries, building workbooks,…