Azure workbook question

Question

hi,

I've created a KQL query to basically provide means to audit group membership changes. Exported to a csv the name of each security group and its managedBy attributes and using it inside the query as external data. Then joining with SecurityEvent table, so that I get a view like this:

Added the query to a Azure Workbook, but now wondering how can I have a picker/dropdown menu of some sorts, that for example would allow me to pick any given user name from the  ManagedBy column so that responsible for any of their groups could review the changes. Is this duable, so that Azure somehow magically ingest the data and provide as a selectable option?

 

Thanks !

Answer 1

Thanks for posting your question in the Microsoft Q&A forum.

You can make it static or dynamic based on following article

https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-dropdowns

** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful **