How to Get Time Range Help Directly in the Azure Sentinel Console

There’s been a mighty effort over the last many months to include helpful links and information directly in the Log Analytics workspace for Azure Monitor – which, thankfully, is also available to Azure Sentinel customers in the Logs blade.

A recent update makes getting better information around Time Range syntax quicker and easier, and I’m positive many of you may have missed this – hence, the effort here to highlight it.

In the dropdown for the Time Range, there’s now a “Time range syntax” option that produces a pop-up window explaining and providing some custom options for customizing your own queries.