Skip to content

Commit 3f613de

Browse files
Court72yelevin
andauthored
Apply suggestions from PR review
Co-authored-by: Yechiel Levin <[email protected]>
1 parent 36fc318 commit 3f613de

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/sentinel/detect-threats-custom.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -164,7 +164,7 @@ If you see that your query would trigger too many or too frequent alerts, you ca
164164
165165
| Field name | Contains | Running the query in this field<br>results in... |
166166
| - | :-: | :-: |
167-
| **Query** | The compressed record of the event that generated this instance of the alert | The event that generated this instance of the alert limeted to 10240 bytes |
167+
| **Query** | The compressed record of the event that generated this instance of the alert | The event that generated this instance of the alert;<br>limited to 10240 bytes |
168168
| **OriginalQuery** | The original query as written in the analytics&nbsp;rule | The most recent event in the timeframe in which the query runs, that fits the parameters defined by the query |
169169
170170
In other words, the **OriginalQuery** field behaves like the **Query** field usually behaves. The result of this extra field is that the problem described by the first item in the [Troubleshooting](#troubleshooting) section below has been solved.

0 commit comments

Comments
 (0)