Skip to content

Commit 7a4a1a8

Browse files
committed
Fix acrolinx issues
1 parent 095a7f8 commit 7a4a1a8

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/sentinel/investigate-large-datasets.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.author: cwatson
1111

1212
One of the primary activities of a security team is to search logs for specific events. For example, you might search logs for the activities of a specific user within a given time-frame.
1313

14-
In Microsoft Sentinel, you can search across long time periods in extremely large datasets by using a search job. While you can run a search job on any type of log, search jobs are ideally suited to search archived logs. If need to do a full investigation on archived data, you can restore that data into the hot cache to run high performing queries and analytics.
14+
In Microsoft Sentinel, you can search across long time periods in extremely large datasets by using a search job. While you can run a search job on any type of log, search jobs are ideally suited to search archived logs. If you need to do a full investigation on archived data, you can restore that data into the hot cache to run high performing queries and analytics.
1515

1616
> [!IMPORTANT]
1717
> The search job and restore features are currently in **PREVIEW**. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
@@ -69,7 +69,7 @@ Before you start to restore an archived log table, be aware of the following lim
6969

7070
- Restore data for a minimum of two days.
7171
- Restore data more than 14 days old.
72-
- Restore up to 60TB.
72+
- Restore up to 60 TB.
7373
- Restore is limited to one active restore per table.
7474
- Restore up to four archived tables per workspace per week.
7575
- Limited to two concurrent restore jobs per workspace.
@@ -78,7 +78,7 @@ To learn more, see [Restore logs in Azure Monitor](../azure-monitor/logs/restore
7878

7979
## Bookmark search results or restored data rows
8080

81-
Similar to the [threat hunting dashboard](hunting.md#use-the-hunting-dashboard), you bookmark rows that contain information you find interesting so you can attach them to an incident or refer to them later. To learn more, see [Create bookmarks](hunting.md#create-bookmarks).
81+
Similar to the [threat hunting dashboard](hunting.md#use-the-hunting-dashboard), bookmark rows that contain information you find interesting so you can attach them to an incident or refer to them later. For more information, see [Create bookmarks](hunting.md#create-bookmarks).
8282

8383
## Next steps
8484

0 commit comments

Comments
 (0)