Skip to content

Commit 3073bf6

Browse files
committed
Added links to watchlists-queries.md
1 parent cc7e6b7 commit 3073bf6

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

articles/sentinel/watchlists-queries.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -119,6 +119,15 @@ You might need to see a list of watchlist aliases to identify a watchlist to use
119119
120120
:::image type="content" source="./media/watchlists-queries/sentinel-watchlist-alias.png" alt-text="Screenshot that shows a list of watchlists." lightbox="./media/watchlists-queries/sentinel-watchlist-alias.png":::
121121
122+
See more information on the following items used in the preceding examples, in the Kusto documentation:
123+
- [***where*** operator](/kusto/query/where-operator?view=microsoft-sentinel&preserve-view=true)
124+
- [***project*** operator](/kusto/query/project-operator?view=microsoft-sentinel&preserve-view=true)
125+
- [***lookup*** operator](/kusto/query/lookup-operator?view=microsoft-sentinel&preserve-view=true)
126+
- [***in*** operator](/kusto/query/in-cs-operator?view=microsoft-sentinel&preserve-view=true)
127+
- [***let*** statement](/kusto/query/let-statement?view=microsoft-sentinel&preserve-view=true)
128+
129+
[!INCLUDE [kusto-reference-general-no-alert](includes/kusto-reference-general-no-alert.md)]
130+
122131
## Related content
123132
124133
In this document, you learned how to use watchlists in Microsoft Sentinel to enrich data and improve investigations. To learn more about Microsoft Sentinel, see the following articles:

0 commit comments

Comments
 (0)