Blog Post

Microsoft Sentinel Blog
4 MIN READ

Using the Sentinel API to view data in a Workbook

CliveWatson's avatar
CliveWatson
Icon for Microsoft rankMicrosoft
May 13, 2020
Sometimes when you need data for your reporting you have to ingest and store it, here are two recent use cases that do that, they get Teams and Azure Sentinel Incident data and keep the data within a...
Updated Nov 03, 2021
Version 10.0
microsoft sentinel
CliveWatson's avatar
Icon for Microsoft rankMicrosoft
Joined November 07, 2018
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Microsoft Sentinel by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Here are the Privacy/Guideline links: Microsoft Privacy Statement, Gartner’s Community Guidelines & Gartner Peer Insights Review Guide.

PrashTechTalk's avatar
PrashTechTalk
Brass Contributor
Jun 29, 2020

CliveWatson - Thanks I tried implementing various means but to get the time selected parameter value from an Azure Dashboard (not the work book time selection custom field)  while using API to get results doesn't work.    But using just a query not the API call we can get the results based on Azure dashboard time selection.  I think it needs some workaround.

Requirement is to filter OData results based on the Azure Dashboard time selection (time generated say 48hours or between X & Y dates) 

 

Thanks.