Check correlation search health, RBA activity, log ingestion, and visibility gaps
Investigative LQL searches