You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/livestream.md
+6-6Lines changed: 6 additions & 6 deletions
Original file line number
Diff line number
Diff line change
@@ -50,10 +50,10 @@ You can create a Livestream session from an existing hunting query, or create yo
50
50
2. To create a Livestream session from a hunting query:
51
51
52
52
1. From the **Queries** tab, locate the hunting query to use.
53
-
2. Right-click the query and select **Add to Livestream**:
53
+
2. Right-click the query and select **Add to Livestream**. For example:
54
54
55
55
> [!div class="mx-imgBorder"]
56
-
> 
56
+
> 
57
57
58
58
3. To create a Livestream session from scratch:
59
59
@@ -70,7 +70,7 @@ You can create a Livestream session from an existing hunting query, or create yo
70
70
The status bar under the command bar indicates whether your Livestream is running or paused. In the following example, the session is running:
71
71
72
72
> [!div class="mx-imgBorder"]
73
-
> 
73
+
> 
74
74
75
75
6. Select **Save** from the command bar.
76
76
@@ -85,15 +85,15 @@ if you want to leave the Livestream session running when you close the blade, it
85
85
2. Select the Livestream session you want to view or edit. For example:
86
86
87
87
> [!div class="mx-imgBorder"]
88
-
> 
88
+
> 
89
89
90
90
Your selected Livestream session opens for you to play, pause, edit, and so on.
91
91
92
92
## Receive notifications when new events occur
93
93
94
94
Because Livestream notifications for new events use Azure portal notifications, you see these notifications whenever you use the Azure portal. For example:
95
95
96
-

96
+

97
97
98
98
Select the notification to open the **Livestream** blade.
99
99
@@ -102,7 +102,7 @@ Select the notification to open the **Livestream** blade.
102
102
You can promote a Livestream session to a new alert by selecting **Elevate to alert** from the command bar on the relevant Livestream session:
103
103
104
104
> [!div class="mx-imgBorder"]
105
-
> 
105
+
> 
106
106
107
107
This action opens the rule creation wizard, which is prepopulated with the query that is associated with the Livestream session.
0 commit comments