Skip to content

Commit 77c8374

Browse files
committed
Update whats-new.md
1 parent 115ec3c commit 77c8374

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

articles/sentinel/whats-new.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ For more information, see:
4848

4949
Microsoft Sentinel is updating how it identifies account entities in incidents and alerts. This change introduces a standardized naming logic to improve consistency and reliability across your analytics and automation workflows.
5050

51-
This change might affect your analytic rules, automation rules/playbooks, workbooks, hunting queries, and custom integrations.
51+
This change might affect your analytic rules, automation rules, playbooks, workbooks, hunting queries, and custom integrations.
5252

5353
Sentinel will now select the most reliable account identifier using the following priority:
5454

@@ -58,7 +58,7 @@ Sentinel will now select the most reliable account identifier using the followin
5858
1. **Name** – used if UPN prefix is unavailable
5959
1. **Display Name** – fallback if both above are missing
6060

61-
Update your KQL queries and automation logic to follow the new precedence-aware pattern. Use the `coalesce()` function to ensure compatibility:
61+
Update your KQL queries and automation logic to follow the new precedence-aware pattern. Use the [`coalesce()`(/kusto/query/coalesce-function)](/kusto/query/coalesce-function) function to ensure compatibility:
6262

6363
```kql
6464
coalesce(Account.UPNprefix, Account.Name, Account.DisplayName)

0 commit comments

Comments
 (0)