Forum Discussion
Azure resource Graph integration
- Jun 30, 2020
shijain13 yea. It is possible. But how do you combine results from both the queries. ( join kusto queries / cross workspace queries / etc ). Currently only we can query Log analytics / application insights.
yesoreyeram - this is high on our list, but unfortunately, gets pushed away, as more urgent stuff comes in. But we will get there, we understand the need and will address it.
OlegAnaniev- I would like to join in a Sentinel workbook an ARG 'resources' query with a Log Analytics 'SecurityAlert' query to produce aggregated output like this:
Resource Group No. of Resources No. of Alerts
------------------ ------------------- --------------
rg_A 50 1,295
rg_B 125 96
Is that possible? I have tried the Merge query, however have not found a way to imclude aggregate columns.