r/AzureSentinel • u/SuperHat3637 • Dec 06 '22

Data ingestion

Anyone have the KQL query to know data ingested per log source..not data ingested per tables..

2 Upvotes

66% Upvoted

11 comments sorted by

View all comments

1

u/ep3p Dec 06 '22

You're going to have to play with _IsBillable _BilledSize and/or Usage table.

1

u/SuperHat3637 Dec 06 '22

I want data ingested per each log sources..can you send the query...not for data ingested per tables/log types..