If I delete a detection, can I still access the alerts/matched events?
QUESTION
If I delete a detection, can I still access the alerts? What about the individual matched events?
ANSWER
Yes. Your alert history is accessible from the Alerts and Errors panel. To directly access the events, you need to query the rule_matches
table in the Data Explorer.