Forum Discussion

Ben Curran's avatar
Ben Curran
Brass Contributor
Feb 23, 2021

Sentinel PowerBI Dashboards

Has anyone created real time (or as close as possible to real time) dashboards for Sentinel in PowerBI?

 

It seems like something that should be quite simple and in high demand, however I am not able to find much information.

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor

    Ben Curran You can extract your KQL query from the Logs section of Azure Sentinel into a text file that explains how to import the data into PowerBI.  From there you can create whatever dashboard you want and schedule it to automatically update (or manually update) as needed.

     

    I seem to recall a while ago that some people were having trouble getting the data to update once the PowerBI was published however I have not tried that so I am not sure what the issue was.

Resources