Microsoft Sentinel Workbooks 101 (with sample Workbook)

There is a change on this:

*Set up the variable to take on a value*

SecurityAlert
| extend Resource = ResourceId
| summarize count() by Resource
| sort by count_ desc

*Set up a variable to inherit the exported value of the selected object*

let Resource_ = dynamic('{Resource}');
SecurityAlert
| where ResourceId contains tostring(Resource_)
| project TimeGenerated, Resource_, AlertName, AlertSeverity, ProductName

The curly brackets { } will need to be within quotation ' '

let Resource_ = dynamic('{Resource}');