Resource Groups in Workbook

Question

When I look at the Resource group filter at the top of the workbook page, I see 2 versions of the same group, with different upper and lower case letters. When I look at my main Resource Group pages, I only see one of them. Does anyone know why I am seeing 2 different versions of the same thing?

garybushey · Answer

Dean_Gross&nbsp;Different systems report resource groups in different ways, especially when it comes to using different cases.&nbsp; To avoid this you can use something like the KQL command "tolower()" to make everything lowercase or "toupper()" to make everything uppercase.

yash_mudaliar · Answer

Have you tried searching for both the rg names in the global search of azure portal. Maybe the second one is a RG you created in another subscription. If there is no result for any one of the rg names, it surely should b a glitch.

clivewatson · Answer

Yash_Mudaliar&nbsp;
&nbsp;
Often in the default Workbooks (is this your own or a Azure Sentinel templated one, if so which one?) provide Resource Group info from a Azure Resource Group (ARG) query
resources
| where type =~ 'microsoft.operationalinsights/workspaces'
| project resourceGroup
If you are using KQL you may have some in lower or upper case combinations or maybe a renamed RG?

yash_mudaliar · Answer

Hi Clive,As per the screenshot, I think this should be custom workbook.Your query is really helpful but don't you think it's more feasible to select the RG from the drop down which is automatically populated instead of providing RG info in each and every pod of the workbook?I may have got your point incorrectly, if so, please correct me.

clivewatson · Answer

I'd always select a ResourceGroup from a global parameter, at the top of a Workbook, using ARG.  I suspect the query used is something like this KQL (you didn't provide what you are using):AzureActivity| summarize by ResourceGroupThis has two areas for optimisation:  1. It can return lower/upper case examples for the same RG, just like you have seen  2. ARG queries like in my 1st reply, can be used instead, and they will be case correct, and as it uses the api will list all ResourceGroups not just those that have written a log file (i.e if a RG was created 100days ago, and you retain data for 90days, the KQL wont know the RG exists on day 91, ARG will)

Forum Discussion

Resource Groups in Workbook

7 Replies

Resources