New KQL Data Types
Five more data sources can be queried with KQL as typed tables — Zscaler, Cisco Meraki, F5 BIG-IP LTM, Palo Alto Networks Cortex alerts and incidents, and Qualys — each released with sample queries. Windows audit events, whose schema shipped in v2.6.16, gain sample queries too.