Forum Discussion
Dean_Gross
Apr 17, 2021Silver Contributor
Resource Groups in Workbook
When I look at the Resource group filter at the top of the workbook page, I see 2 versions of the same group, with different upper and lower case letters. When I look at my main Resource Group pages,...
Apr 18, 2021
Have you tried searching for both the rg names in the global search of azure portal. Maybe the second one is a RG you created in another subscription. If there is no result for any one of the rg names, it surely should b a glitch.
- CliveWatsonApr 19, 2021Former Employee
Often in the default Workbooks (is this your own or a Azure Sentinel templated one, if so which one?) provide Resource Group info from a Azure Resource Group (ARG) query
resources | where type =~ 'microsoft.operationalinsights/workspaces' | project resourceGroupIf you are using KQL you may have some in lower or upper case combinations or maybe a renamed RG?
- Apr 19, 2021Hi Clive,
As per the screenshot, I think this should be custom workbook.
Your query is really helpful but don't you think it's more feasible to select the RG from the drop down which is automatically populated instead of providing RG info in each and every pod of the workbook?
I may have got your point incorrectly, if so, please correct me.- CliveWatsonApr 19, 2021Former EmployeeI'd always select a ResourceGroup from a global parameter, at the top of a Workbook, using ARG. I suspect the query used is something like this KQL (you didn't provide what you are using):
AzureActivity
| summarize by ResourceGroup
This has two areas for optimisation: 1. It can return lower/upper case examples for the same RG, just like you have seen 2. ARG queries like in my 1st reply, can be used instead, and they will be case correct, and as it uses the api will list all ResourceGroups not just those that have written a log file (i.e if a RG was created 100days ago, and you retain data for 90days, the KQL wont know the RG exists on day 91, ARG will)