Home

Azure Sentinel Dashboards and Power BI

%3CLINGO-SUB%20id%3D%22lingo-sub-915276%22%20slang%3D%22en-US%22%3EAzure%20Sentinel%20Dashboards%20and%20Power%20BI%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-915276%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Community%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat's%20the%20easiest%20way%20to%20publish%20Sentinel%20dashboards%20to%20Power%20BI%3F%20I%20have%20a%20customer%20who%20has%20a%20rule%20that%20you%20can't%20get%20into%20the%20Azure%20Portal%2C%20even%20as%20a%20reader%2C%20without%20a%20separate%20account.%20However%20they%20would%20like%20to%20be%20able%20to%20publish%20certain%20Azure%20dashboards%20including%20those%20in%20Sentinel%20in%20Power%20BI%20so%20that%20execs%20could%20view%20them%20without%20requiring%20direct%20Azure%20Portal%20access.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20been%20able%20to%20do%20some%20stuff%20by%20querying%20the%20Log%20Analytics%20workspace%20directly%20but%20I've%20not%20been%20able%20to%20exactly%20mirror%20the%20dashboards...%20Is%20this%20even%20possible%3F%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-916597%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Sentinel%20Dashboards%20and%20Power%20BI%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-916597%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F312381%22%20target%3D%22_blank%22%3E%40PeterJ_Inobits%3C%2FA%3E%26nbsp%3Bcan%20you%20provide%20some%20examples%20of%20what%20you%20have%20not%20been%20able%20to%20reproduce%20and%20how%20you%20get%20the%20data%20into%20PowerBI%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20taken%20KQL%20queries%20and%20posted%20them%20into%20the%20Logs%20section%20of%20Sentinel%20and%20then%20use%20the%20export%20command%20to%20bring%20the%20information%20into%20PowerBI.%26nbsp%3B%20Is%20that%20how%20you%20are%20getting%20the%20information%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
PeterJ_Inobits
New Contributor

Hi Community

 

What's the easiest way to publish Sentinel dashboards to Power BI? I have a customer who has a rule that you can't get into the Azure Portal, even as a reader, without a separate account. However they would like to be able to publish certain Azure dashboards including those in Sentinel in Power BI so that execs could view them without requiring direct Azure Portal access.

 

I've been able to do some stuff by querying the Log Analytics workspace directly but I've not been able to exactly mirror the dashboards... Is this even possible?   

1 Reply

@PeterJ_Inobits can you provide some examples of what you have not been able to reproduce and how you get the data into PowerBI? 

 

I have taken KQL queries and posted them into the Logs section of Sentinel and then use the export command to bring the information into PowerBI.  Is that how you are getting the information?

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies