Skip to content

Commit ff9a2fd

Browse files
committed
add options
1 parent bc35005 commit ff9a2fd

1 file changed

Lines changed: 19 additions & 3 deletions

File tree

articles/sentinel/datalake/kql-queries-api.md

Lines changed: 19 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: EdB-MSFT
66
ms.service: microsoft-sentinel
77
ms.subservice: sentinel-platform
88
ms.topic: how-to
9-
ms.date: 03/23/2026
9+
ms.date: 03/26/2026
1010
ms.author: edbaynash
1111
ms.collection: ms-security
1212
---
@@ -85,10 +85,26 @@ You can include additional execution options in the request payload, such as:
8585

8686
- Server timeout
8787
- Query consistency
88-
- Read-only enforcement
88+
- Read-only enforcement
8989

9090
These options are useful when running queries in automated or high-scale environments.
91-
91+
92+
sample payload:
93+
```json
94+
{
95+
"csl": "SigninLogs | take 10",
96+
"db": "workspace1-12345678-abcd-abcd-1234-1234567890ab",
97+
"properties": {
98+
"Options": {
99+
"servertimeout": "00:04:00",
100+
"queryconsistency": "strongconsistency",
101+
"query_language": "kql",
102+
"request_readonly": False,
103+
"request_readonly_hardline": False
104+
}
105+
}
106+
```
107+
92108
## Service limits and considerations
93109

94110
Query execution is subject to time and result size limits. For current limits, see: [Microsoft Sentinel data lake service limits](sentinel-lake-service-limits.md)

0 commit comments

Comments
 (0)