How to create a Workbook for timeframe search in Azure Sentinel

%3CLINGO-SUB%20id%3D%22lingo-sub-1415593%22%20slang%3D%22en-US%22%3EHow%20to%20create%20a%20Workbook%20for%20timeframe%20search%20in%20Azure%20Sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1415593%22%20slang%3D%22en-US%22%3E%3CP%3EI%20want%20to%20create%20a%20workbook%20to%20check%20the%20time%20frame%20for%20any%20activity%20with%20the%20dynamic%20time%20range.%20Please%20suggest.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1417621%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20create%20a%20Workbook%20for%20timeframe%20search%20in%20Azure%20Sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1417621%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F394938%22%20target%3D%22_blank%22%3E%40Pinku1725%3C%2FA%3E%26nbsp%3BI%20would%20suggest%20looking%20at%20Clive%20Watson's%20post%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fusage-reporting-for-azure-sentinel%2Fba-p%2F1267383%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fusage-reporting-for-azure-sentinel%2Fba-p%2F1267383%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eas%20it%20basically%20does%20what%20you%20want%20other%20than%20setting%20the%20beginning%20and%20ending%20range.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I want to create a workbook to check the time frame for any activity with the dynamic time range. Please suggest.

1 Reply

@Pinku1725 I would suggest looking at Clive Watson's post: https://techcommunity.microsoft.com/t5/azure-sentinel/usage-reporting-for-azure-sentinel/ba-p/126738...

 

as it basically does what you want other than setting the beginning and ending range.