You can create an analytics rule in Microsoft Sentinel.
Procedure
-
From the Microsoft Sentinel navigation pane, under Configuration, click Analytics.
-
Click Create.
The Create Rule dialog box appears.
-
Enter the query in the Rule query box.
-
Enter any other required information.
-
Click Save.