ARM template for deploying a workbook template to Microsoft Sentinel

Hey Jason,

Thanks for the clarification.  You are quite right, what I was referring to was deploying individual workbooks by template - as long as the category is "sentinel", the example on the page you referenced works in deploying custom sourced workbooks.

But this isnt what you were getting at.  Your question was (I believe) about populating the templates section of the Sentinel workbooks blade.  I don't have the right answer for you unfortunately.

From the documentation, something like this I believed would have worked (it doesn't):

{
    "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "workbookDisplayName": {
            "type": "string",
            "defaultValue": "Sentinel Workbook Template",
            "metadata": {
                "description": "The friendly name for the workbook that is used in the Gallery or Saved List. Needs to be unique in the scope of the resource group and source"
            }
        },
        "workbookDescription": {
            "type": "string",
            "defaultValue": "A sample Sentinel workbook template",
            "metadata": {
                "description": "Description for the workbook"
            }
        },
        "workbookSourceId": {
            "type": "string",
            "metadata": {
                "description": "The id of resource instance to which the workbook will be associated"
            }
        },
        "workbookId": {
            "type": "string",
            "defaultValue": "438ebb27-5c19-4dbd-9a88-9424f8a65361",
            "metadata": {
                "description": "The unique guid for this workbook template"
            }
        }
    },
    "resources": [
        {
            "name": "[parameters('workbookId')]",
            "type": "Microsoft.Insights/workbookTemplates",
            "location": "[resourceGroup().location]",
            "apiVersion": "2020-11-20",
            "properties": {
                "priority": 1,
                "galleries": [
                    {
                      "name": "Microsoft Sentinel Example",
                      "category": "Microsoft Sentinel",
                      "order": 100,
                      "type": "workbook",
                      "resourceType": "microsoft.operationalinsights/workspaces"
                    }
                ],
                "templateData": {
                    "strings": {
                        "title": "[parameters('workbookDisplayName')]",
                        "description": "[parameters('workbookDescription')]"
                    },
                    "workbook": {
                        "version": "Notebook/1.0",
                        "items": [
                            {
                                "type": 1,
                                "content": {
                                   "json": "{\"name\": \"Welcome Section\", \"type\": \"markdown\", \"content\": \"## Welcome to your Sentinel workbook!\"}"
                                }
                            }
                        ]
                    }
                }
            },
            "tags": {
                "hidden-title": "[parameters('workbookDisplayName')]",
                "hidden-link": "[parameters('workbookSourceId')]"
            }
        }
    ],
    "outputs": {
        "workbookTemplateId": {
            "type": "string",
            "value": "[resourceId('Microsoft.Insights/workbookTemplates', parameters('workbookId'))]"
        }
    }
}

I'm surprised that the specifics about the properties that are needed to specify the Microsoft Sentinel gallery don't seem to be documented anywhere.  These seem to be case sensitive too.

                "galleries": [
                    {
                      "name": "Microsoft Sentinel Example",
                      "category": "Microsoft Sentinel",
                      "order": 100,
                      "type": "workbook",
                      "resourceType": "microsoft.operationalinsights/workspaces"
                    }
                ],

That page shows eleven combinations for different types of galleries but nothing for Sentinel.
https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-automate

I had thought that using hidden titles and links might have solved this - but it was of no help.  Hopefully someone from Microsoft can provide some deeper insights!  I'm really curious now too! :)