Project Sentinel workbooks on SOC TV screens?

%3CLINGO-SUB%20id%3D%22lingo-sub-1504504%22%20slang%3D%22en-US%22%3EProject%20Sentinel%20workbooks%20on%20SOC%20TV%20screens%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1504504%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20use%20kiosk%20computers%20to%20show%20monitoring%20dashboards%20etc.%20on%20TV%20screens%20in%20our%20operations%20room.%20Is%20there%20a%20good%2Fsecure%20way%20to%20display%20some%20Sentinel%20stuff%20there%3F%20For%20example%2C%20I%20have%20made%20a%20workbook%20showing%20all%20AAD%20sign-in%20logs%20on%20a%20map.%20That%20would%20be%20sweet%20to%20project%20on%20a%20screen.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20wise%20or%20is%20the%20product%20not%20really%20made%20for%20this%20kind%20of%20SOC-view%20stuff%3F%20Automatic%20refresh%20would%20be%20a%20requirement.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%2FBL%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22soc.png%22%20style%3D%22width%3A%20806px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F203326iC34070F804AF2B4F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22soc.png%22%20alt%3D%22soc.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1504504%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESentinel%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESOC%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eworkbook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1504507%22%20slang%3D%22en-US%22%3ERe%3A%20Project%20Sentinel%20workbooks%20on%20SOC%20TV%20screens%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1504507%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F134719%22%20target%3D%22_blank%22%3E%40Bj%C3%B6rn%20Lagerwall%3C%2FA%3E%26nbsp%3BThere%20is%20no%20auto-refresh%20in%20Azure%20Sentinel%20workbooks%20so%20you%20would%20either%20need%20to%20refresh%20your%20page%20manually%20or%20use%20a%203rd%20party%20add-in%20that%20will%20refresh%20your%20page%20periodically.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20believe%20the%20data%20is%20also%20cached%20although%20I%20do%20not%20know%20for%20how%20long.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1504509%22%20slang%3D%22en-US%22%3ERe%3A%20Project%20Sentinel%20workbooks%20on%20SOC%20TV%20screens%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1504509%22%20slang%3D%22en-US%22%3EThanks%20for%20fast%20reply%2C%20Gary.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20suspected%20that.%20Also%2C%20login%20to%20the%20dashboard%2Fworkbook%20would%20have%20to%20be%20sorted%20as%20well.%20A%20bit%20of%20a%20bummer%2C%20really%20like%20to%20have%20a%20situational%20awareness%20view%20on%20TV%20screens.%20Also%2C%20our%20bosses%20likes%20them%20nice%20graphs%20%3B)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1504546%22%20slang%3D%22en-US%22%3ERe%3A%20Project%20Sentinel%20workbooks%20on%20SOC%20TV%20screens%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1504546%22%20slang%3D%22en-US%22%3EYou%20can%20pin%20certain%20Workbook%20items%20to%20a%20Azure%20Dashboard%20which%20does%20have%20auto%20refresh%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1506125%22%20slang%3D%22en-US%22%3ERe%3A%20Project%20Sentinel%20workbooks%20on%20SOC%20TV%20screens%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1506125%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F134719%22%20target%3D%22_blank%22%3E%40Bj%C3%B6rn%20Lagerwall%3C%2FA%3E%26nbsp%3BBuilding%20on%20what%20Clive%20wrote%2C%20Microsoft's%20Rod%20Trent%20just%20posted%20a%20blog%20post%20that%20shows%20how%20to%20pin%20an%20entire%20workbook%20to%20a%20dashboard.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsecureinfra.blog%2F2020%2F07%2F06%2Fpinning-entire-azure-sentinel-workbooks-to-azure-dashboards%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsecureinfra.blog%2F2020%2F07%2F06%2Fpinning-entire-azure-sentinel-workbooks-to-azure-dashboards%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1508165%22%20slang%3D%22en-US%22%3ERe%3A%20Project%20Sentinel%20workbooks%20on%20SOC%20TV%20screens%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1508165%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F46875%22%20target%3D%22_blank%22%3E%40Gary%20Bushey%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F11412%22%20target%3D%22_blank%22%3E%40Rod%20Trent%3C%2FA%3E%26nbsp%3Bthanks.%20Will%20check%20it%20out!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi all, 

 

We use kiosk computers to show monitoring dashboards etc. on TV screens in our operations room. Is there a good/secure way to display some Sentinel stuff there? For example, I have made a workbook showing all AAD sign-in logs on a map. That would be sweet to project on a screen.

 

Is this wise or is the product not really made for this kind of SOC-view stuff? Automatic refresh would be a requirement. 

 

Thanks

 

/BLsoc.png

5 Replies

@Björn Lagerwall There is no auto-refresh in Azure Sentinel workbooks so you would either need to refresh your page manually or use a 3rd party add-in that will refresh your page periodically.

 

I believe the data is also cached although I do not know for how long.

Thanks for fast reply, Gary.

I suspected that. Also, login to the dashboard/workbook would have to be sorted as well. A bit of a bummer, really like to have a situational awareness view on TV screens. Also, our bosses likes them nice graphs ;)
You can pin certain Workbook items to a Azure Dashboard which does have auto refresh

@Björn Lagerwall Building on what Clive wrote, Microsoft's Rod Trent just posted a blog post that shows how to pin an entire workbook to a dashboard.

 

https://secureinfra.blog/2020/07/06/pinning-entire-azure-sentinel-workbooks-to-azure-dashboards/

@Gary Bushey @Rod Trent thanks. Will check it out!