Query Data Lake - BlinkOps Documentation

Run a Kusto Query Language (KQL) query against Microsoft Sentinel data lake data.

External DocumentationTo learn more, visit the Microsoft Sentinel Data Lake documentation.

Parameters

Parameter	Description
Query	The KQL query to execute. For more information, see Kusto Query Language (KQL) reference.
Query Consistency	The consistency level to use when running the query.
Read Only	Select to require the query to be read-only.
Read Only Hardline	Select to strictly enforce read-only mode.
Server Timeout	The server timeout for the query, in `hh:mm:ss` format.
Workspace	The Sentinel workspace, specified as `<workspaceName>-<workspaceId>`.

Preview this Workflow on desktop

⌘I