Skip to content

Commit 4928ce8

Browse files
authored
Update unified-secops-platform/mto-advanced-hunting.md
1 parent 1968144 commit 4928ce8

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

unified-secops-platform/mto-advanced-hunting.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ You can run any query that you already have access to in the multitenant managem
4949

5050
:::image type="content" source="media/mto-advanced-hunting/mto-cross-tenants-sidepane.png" alt-text="Screenshot of the Microsoft Defender XDR cross tenants advanced hunting query side pane scope" lightbox="media/mto-advanced-hunting/mto-cross-tenants-sidepane.png":::
5151

52-
When selecting multiple tenants, the query is sent to each tenant separately and the results are then gathered and presented to the user in a single table. For example, this means that for the sample query shown below (`DeviceEvents | take 10`), 10 results are returned from each tenant, and the sum total of results are equal to 10 times the number of tenants that you queried.
52+
When you select multiple tenants, the query runs independently in each tenant, and the combined results are displayed in a single table. For example, the sample query below (`DeviceEvents | take 10`) returns 10 results per tenant, resulting in a total equal to 10 multiplied by the number of tenants selected.
5353

5454
1. When you're done, select **Apply** > **Run query**.
5555

0 commit comments

Comments
 (0)