Microsoft Sentinel + Splunk/Elastic concepts

Learn

• log ingestion
• agents/connectors
• parsing
• normalization
• fields
• indexes/data sources
• queries
• dashboards
• alerts
• correlation
• rules
• investigations