Skip to content

Commit 71533bd

Browse files
Merge pull request #292181 from batamig/patch-414110
adding note about entities in schema but not in ui
2 parents 3252bf3 + 4c70d71 commit 71533bd

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

articles/sentinel/entities-reference.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,7 @@ You can currently use up to three identifiers for a given entity when creating a
5353
- \* These identifiers appear in the list of identifiers that can be used in entity mapping, but strictly speaking they are not part of the entity schema.
5454
- \*\* These identifiers are considered strong only under certain conditions. Follow the asterisks' links to see the conditions that apply, under the relevant entity's listing in the [entity schemas section below](#entity-type-schemas).
5555
- *Italicized identifier names* (without an asterisk) represent internal entities, which means that one entity type can have other entity types as attributes (see the [entity schemas section below](#entity-type-schemas)). Follow the identifier's link to see the internal entity's own schema.
56+
- Other entities may be present in the schema to support Microsoft Sentinel functionality, but aren't represented by an entity details page in Microsoft Sentinel.
5657

5758
## Entity type schemas
5859

0 commit comments

Comments
 (0)