Plugins/MSFT_Plugin_Samples/KQL/KQL_Template.yaml (4 lines of code) (raw):

Settings: # What type of KQL endpoint to connect to. # One of { Defender, Sentinel, LogAnalytics, Kusto } Target: # A URL to download the KQL query template from. # Specify either TemplatUrl or Template but not both. TemplateUrl: # An inline KQL query template. # Specify either TemplatUrl or Template but not both. Template: