Skip to content

Commit 5fb6e45

Browse files
Merge pull request #310013 from oshezaf/asim/known-issues
Update ASIM known issues documentation
2 parents e5ad2aa + 95920bf commit 5fb6e45

1 file changed

Lines changed: 2 additions & 6 deletions

File tree

articles/sentinel/normalization-known-issues.md

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,13 +15,9 @@ ms.author: ofshezaf
1515

1616
The following are the Advanced Security Information Model (ASIM) known issues and limitations:
1717

18-
## Time picker set to a custom range
18+
## Sentinel data lake
1919

20-
When using filtering ASIM parsers (with the prefixes `_Im`, `im`, or `vim`) in the log screen, the time picker changes automatically to "set in query," which will result in querying over all data in the relevant tables. The query results may not be the expected results and performance may be slow.
21-
22-
:::image type="content" source="media/normalization/asim-custom-time-picker.png" alt-text="Screenshot of custom time picker when using ASIM.":::
23-
24-
To ensure correct and timely results, set the time range to your preferred range after it changes to "set in query". In add-hoc queries, you may want to use nonfiltering parsers (with the prefixes `_ASim` or `ASim`).
20+
ASIM query time parsers are not supported for lake explorer and KQL jobs.
2521

2622
## Performance challenges
2723

0 commit comments

Comments
 (0)