Best practices for queries used in log alerts rules

added by DotNetKicks
12/20/2018 6:39:19 PM

1 Kicks, 310 Views

Queries can start with either a table name like "search" or "union *" operators. These commands are useful during data exploration and for searching terms over the entire data model. However, these operators are not efficient for productization in alerts.