Feb 26 2022 11:23 PM
Hi, we want to create a barchart for the severity of the incident. However, we only have High incident now. The result could not show the zero for the medium and low. Is there any other alternative approach for it? Thanks.
SecurityIncident
|summarize count() by Severity
| render barchart
Feb 27 2022 11:24 PM
SolutionThis will create a entry for any named Severity of Zero
let Sev_ = dynamic(['High','Medium','Low','Informational']);
SecurityIncident
|mv-expand NewSev=Sev_
|summarize Count = countif(NewSev==Severity) by Severity=tostring(NewSev)
Mar 01 2022 02:11 AM
Feb 27 2022 11:24 PM
SolutionThis will create a entry for any named Severity of Zero
let Sev_ = dynamic(['High','Medium','Low','Informational']);
SecurityIncident
|mv-expand NewSev=Sev_
|summarize Count = countif(NewSev==Severity) by Severity=tostring(NewSev)