Skip to content

Commit 2c9e265

Browse files
authored
Update articles/sentinel/soc-optimization/soc-optimization-reference.md
1 parent db61dda commit 2c9e265

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/sentinel/soc-optimization/soc-optimization-reference.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ The following table lists the available data value SOC optimization recommendati
4343

4444
| Observation | Action |
4545
|---------|---------|
46-
| The table wasn’t used by analytics rules or detections in the last 30 days but was used by other sources, such as workbooks, log queries, hunting queries. | Turn on analytics rule templates <br>OR<br>Move to [auxiliary logs (Preview) or basic logs](https://learn.microsoft.com/en-us/azure/sentinel/billing#auxiliary-logs-and-basic-logs) if the table is eligible. |
46+
| The table wasn’t used by analytics rules or detections in the last 30 days but was used by other sources, such as workbooks, log queries, hunting queries. | Turn on analytics rule templates <br>OR<br>Move to [auxiliary logs (Preview) or basic logs](billing.md#auxiliary-logs-and-basic-logs) if the table is eligible. |
4747
| The table wasn’t used at all in the last 30 days. | Turn on analytics rule templates <br>OR<br> Stop data ingestion and remove the table or move the table to long term retention. |
4848
| The table was only used by Azure Monitor. | Turn on any relevant analytics rule templates for tables with security value <br>OR<br>Move to a non-security Log Analytics workspace. |
4949

0 commit comments

Comments
 (0)