Skip to content

Commit 518db64

Browse files
clarify time range selection
KQL time range is ignored - clarifying based on CSS feedback
1 parent 7a0807c commit 518db64

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/sentinel/search-jobs.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ Go to **Search** in Microsoft Sentinel from the Azure portal or the Microsoft De
4848
1. When you're satisfied with the query and the search results preview, select the ellipses **...** and toggle **Search job mode** on.
4949

5050
:::image type="content" source="media/search-jobs/search-job-advanced-kql-ellipsis.png" alt-text="Screenshot of KQL editor with revised search with ellipsis highlighted for Search job mode." lightbox="media/search-jobs/search-job-advanced-kql-ellipsis.png":::
51-
1. Select the appropriate **Time range**.
51+
1. Specify the search job date range using the **Time range** selector. Don't include a time range in your KQL query as it is ignored.
5252
1. Resolve any KQL issues indicated by a squiggly red line in the editor.
5353
1. When you're ready to start the search job, select **Search job**.
5454
1. Enter a new table name to store the search job results.

0 commit comments

Comments
 (0)