Hi,
Does anyone else have issues with Datalake queries just timing out? It's been pretty unusable for us every since we turned on the function. We have around 15,000 endpoints on our Central environment so I wonder if it's just down to the sheer volume of data it needs to query? We also use MS MDE for threat hunting, this returns results in seconds.
Live endpoint queries are fine, they work pretty much 100% of the time, Datalake just seems to struggle with any queries we run (Built-in quieres or our own)
Many Thanks
Tom
This thread was automatically locked due to age.