{"id":13782,"date":"2020-07-28T06:32:50","date_gmt":"2020-07-28T06:32:50","guid":{"rendered":"https:\/\/www.testpreptraining.com\/tutorial\/?page_id=13782"},"modified":"2022-04-18T11:21:15","modified_gmt":"2022-04-18T11:21:15","slug":"how-to-monitor-and-visualize-your-data-in-azure-sentinel","status":"publish","type":"page","link":"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/","title":{"rendered":"How to Monitor and Visualize your Data in Azure Sentinel?"},"content":{"rendered":"\n

Exam AZ-303 is retired.\u00a0AZ-305<\/a>\u00a0replacement is available.<\/strong><\/h2>\n\n\n\n

This tutorial will help you in visualize your data in Azure Sentinel. You will learn how to Use built-in workbooks and Create new workbooks.  Azure Sentinel allows you to create custom workbooks across your data, and also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source. Let us get underway in learning visualization of data. <\/p>\n\n\n\n

Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM)<\/strong> and security orchestration automated response (SOAR)<\/strong> solution. Azure Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response.<\/p>\n\n\n\n

Prerequisites <\/strong><\/h3>\n\n\n\n

You will need to have at least Workbook reader or Workbook contributor permissions on the resource group of the Azure Sentinel workspace.<\/p>\n\n\n\n

How to Use built-in workbooks?<\/strong><\/h3>\n\n\n\n

Firstly, Go to Workbooks<\/strong> and then select Templates<\/strong> to see the full list of Azure Sentinel built-in workbooks. To see which are relevant to the data types you have connected, the Required data types<\/strong> field in each workbook will list the data type next to a green check mark if you already stream relevant data to Azure Sentinel. <\/p>\n\n\n\n

\"azure
Image Source – Microsoft<\/figcaption><\/figure><\/div>\n\n\n\n

Click View workbook<\/strong> to see the template populated with your data.<\/p>\n\n\n\n

Now, To edit the workbook, select Save<\/strong>, and then select the location where you want to save the json file for the template. <\/p>\n\n\n\n

Note – This creates an Azure resource based on the relevant template and saves the template Json file itself and not the data.<\/p>\n\n\n\n

Select View workbook<\/strong>. Then, click the Edit<\/strong> button at the top. You can now edit the workbook and customize it according to your needs. For more information on how to customize the workbook, see how to Create interactive reports with Azure Monitor Workbooks. <\/p>\n\n\n\n

\"AZ-303
Image Source – Microsoft<\/figcaption><\/figure><\/div>\n\n\n\n

After you make your changes, you can save the workbook.<\/p>\n\n\n\n

You can also clone the workbook: Select Edit<\/strong> and then Save as<\/strong>, making sure to save it with another name, under the same subscription and resource group. These workbooks are displayed under the My workbooks<\/strong> tab.<\/p>\n\n\n\n

How to Create a new workbook Azure Sentinel?<\/strong><\/h3>\n\n\n\n

Go to Workbooks<\/strong> and then select Add workbook<\/strong> to create a new workbook from scratch. <\/p>\n\n\n\n

\"azure
Image Source – Microsoft<\/figcaption><\/figure><\/div>\n\n\n\n

To edit the workbook, select Edit<\/strong>, and then add text, queries, and parameters as necessary. .<\/p>\n\n\n\n

While building a query, set the Data source<\/strong> is set to Logs<\/strong>, the Resource type<\/strong> is set to Log Analytics<\/strong> and then choose the relevant workspace(s).<\/p>\n\n\n\n

After you create your workbook, save the workbook making sure you save it under the subscription and resource group of your Azure Sentinel workspace.<\/p>\n\n\n\n

If you want to let others in your organization use the workbook, under Save to<\/strong> select Shared reports<\/strong>. If you want this workbook to be available only to you, select My reports<\/strong>.<\/p>\n\n\n\n

\"AZ-303
Image Source – Microsoft<\/figcaption><\/figure><\/div>\n\n\n\n

To switch between workbooks in your workspace, you can select Open<\/strong> \"Switchin the top pane of any workbook. On the window that opens to the right, switch between workbooks.<\/p>\n\n\n\n

How to delete workbooks Azure Sentinel<\/strong> ?<\/strong><\/h3>\n\n\n\n

You can delete Workbooks that were created from an Azure Sentinel template.<\/p>\n\n\n\n

To delete a customized workbook, in the Workbooks page, select the saved workbook that you want to delete and select Delete<\/strong>. This will remove the saved workbook.<\/p>\n\n\n\n

 Note – This removes the resource as well as any changes you made to the template. The original template will remain available.<\/p>\n\n\n\n

\"AZ-303<\/a><\/figure><\/div>\n\n\n\n

Go back to Home Page<\/a><\/p>\n\n\n\n

Reference Documentation:<\/strong> Monitor your Data<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"

Exam AZ-303 is retired.\u00a0AZ-305\u00a0replacement is available. This tutorial will help you in visualize your data in Azure Sentinel. You will learn how to Use built-in workbooks and Create new workbooks.  Azure Sentinel allows you to create custom workbooks across your data, and also comes with built-in workbook templates to allow you to quickly gain insights…<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"categories":[],"tags":[],"class_list":["post-13782","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nHow to Monitor and Visualize your Data in Azure Sentinel?<\/title>\n<meta name=\"description\" content=\"Enhance and upgrade your Azure Architect skills by preparing and passing the Microsoft Azure Architect Technologies (AZ-303) Exam Now!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Monitor and Visualize your Data in Azure Sentinel?\" \/>\n<meta property=\"og:description\" content=\"Enhance and upgrade your Azure Architect skills by preparing and passing the Microsoft Azure Architect Technologies (AZ-303) Exam Now!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/\" \/>\n<meta property=\"og:site_name\" content=\"Testprep Training Tutorials\" \/>\n<meta property=\"article:modified_time\" content=\"2022-04-18T11:21:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2020\/07\/access-workbooks.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/\",\"name\":\"How to Monitor and Visualize your Data in Azure Sentinel?\",\"isPartOf\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#website\"},\"datePublished\":\"2020-07-28T06:32:50+00:00\",\"dateModified\":\"2022-04-18T11:21:15+00:00\",\"description\":\"Enhance and upgrade your Azure Architect skills by preparing and passing the Microsoft Azure Architect Technologies (AZ-303) Exam Now!\",\"breadcrumb\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Monitor and Visualize your Data in Azure Sentinel?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#website\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\",\"name\":\"Testprep Training Tutorials\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.testpreptraining.ai\/tutorial\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#organization\",\"name\":\"Testprep Training\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png\",\"contentUrl\":\"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png\",\"width\":583,\"height\":153,\"caption\":\"Testprep Training\"},\"image\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Monitor and Visualize your Data in Azure Sentinel?","description":"Enhance and upgrade your Azure Architect skills by preparing and passing the Microsoft Azure Architect Technologies (AZ-303) Exam Now!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/","og_locale":"en_US","og_type":"article","og_title":"How to Monitor and Visualize your Data in Azure Sentinel?","og_description":"Enhance and upgrade your Azure Architect skills by preparing and passing the Microsoft Azure Architect Technologies (AZ-303) Exam Now!","og_url":"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/","og_site_name":"Testprep Training Tutorials","article_modified_time":"2022-04-18T11:21:15+00:00","og_image":[{"url":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2020\/07\/access-workbooks.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/","url":"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/","name":"How to Monitor and Visualize your Data in Azure Sentinel?","isPartOf":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#website"},"datePublished":"2020-07-28T06:32:50+00:00","dateModified":"2022-04-18T11:21:15+00:00","description":"Enhance and upgrade your Azure Architect skills by preparing and passing the Microsoft Azure Architect Technologies (AZ-303) Exam Now!","breadcrumb":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/how-to-monitor-and-visualize-your-data-in-azure-sentinel\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.testpreptraining.ai\/tutorial\/"},{"@type":"ListItem","position":2,"name":"How to Monitor and Visualize your Data in Azure Sentinel?"}]},{"@type":"WebSite","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#website","url":"https:\/\/www.testpreptraining.ai\/tutorial\/","name":"Testprep Training Tutorials","description":"","publisher":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.testpreptraining.ai\/tutorial\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#organization","name":"Testprep Training","url":"https:\/\/www.testpreptraining.ai\/tutorial\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/","url":"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png","contentUrl":"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png","width":583,"height":153,"caption":"Testprep Training"},"image":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/13782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/comments?post=13782"}],"version-history":[{"count":9,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/13782\/revisions"}],"predecessor-version":[{"id":54723,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/13782\/revisions\/54723"}],"wp:attachment":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/media?parent=13782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/categories?post=13782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/tags?post=13782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}