Skip to content

Commit 7f0c406

Browse files
Merge pull request #303115 from EdB-MSFT/small-fix
fix
2 parents c7a966f + dbcaf92 commit 7f0c406

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/sentinel/manage-data-overview.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ This table compares the two analytics and data lake tiers and their key characte
6666
| Query price included |||
6767
| Optimized query performance || ❌ Slower queries.<br>Good for auditing. Not optimized for real-time analysis. |
6868
| Query capabilities | [Full query capabilities](/azure/azure-monitor/logs/get-started-queries) in the Microsoft Defender and Azure portals and using APIs. | - [Full KQL on a single table](/azure/azure-monitor/logs/basic-logs-query), which you can extend with data from an analytics table using [lookup](/azure/data-explorer/kusto/query/lookup-operator).<br>- Run scheduled KQL or Spark jobs.<br>- Use Notebooks. |
69-
| Full set of real-time analytics features || ❌ Limitations on most features, including analytics rules, hunting queries, parsers, watchlists, workbooks, and playbooks. |
69+
| Full set of real-time analytics features || ❌ Limitations on some features, including analytics rules, hunting queries, parsers, watchlists, workbooks, and playbooks. |
7070
| [Search jobs](investigate-large-datasets.md) |||
7171
| [Summary rules](summary-rules.md) || ✅ KQL limited to a single table |
7272
| [Restore](restore.md) |||

0 commit comments

Comments
 (0)