I started working with Microsoft’s sentinel one. I’m working on gathering information from the logs that sentinel is producing. For better readability, I want to change the names of the columns that I’m projecting, but couldn’t rename a column that contained numbers and special characters. I’m using KQL to gather the logs from sentinel AuditLogs… Read More Is it possible to rename a column that contains special signs and numbers in microsoft azure in KQL?

I can’t figure out how to turn this: 20.20.5.4 vuxml.freebsd.org 20.20.5.20 vuxml.freebsd.org 20.20.8.7 edgedl.me.gvt1.com 20.20.8.7 dl.google.com 20.20.8.7 redirector.gvt1.com 20.20.32.8 armmf.adobe.com into this: 20.20.5.4 vuxml.freebsd.org 20.20.5.20 vuxml.freebsd.org 20.20.8.7 edgedl.me.gvt1.com dl.google.com redirector.gvt1.com 20.20.32.8 armmf.adobe.com Essentially, I am trying to summarize the destinations per IP address (group similar IP addresses, instead of showing 20.20.8.7 3 times per each… Read More Group similar column results into 1 row – KQL – Azure