Navigating through the Logs page
The Logs page is where you can see a listing of all the tables that belong to your workspace, view some existing queries, write your own queries, view the results, and much more. Let's explore this page.
To get to the Logs page, select Logs from the Microsoft Sentinel navigation section. This will open the following page:
Figure 6.1 – Microsoft Sentinel Logs page
The page is broken down into different sections, such as the following:
- The page header
- The Tables/Queries/Functions/More Tools panes
- The KQL code window
- The sample queries/results window
These sections can be seen in the following screenshot:
Figure 6.2 – Microsoft Sentinel Logs page sections
Let's describe each of these sections in more detail.
The page header
The page header is located at the top of the page and contains useful links, such as feedback, sample queries, query explorer...
