SOLVED

Incident statistics querying (for a powerbi dashboard)

Occasional Contributor

hey all,

 

I'm creating a PowerBI dash to report on some SOC statistics for the wider IT org to look at. Getting an alert view in is easy using a KQL query in PowerBI format. 

But I don't see how I can get to Incident statistics. Looking to show Nr of incidents per status / priority .. etc. Is there a way to do this?

 

thanks!

3 Replies
best response confirmed by mclaes (Occasional Contributor)
Solution

@mclaes Take a look at my blog post to see if that answers your questions.  https://www.garybushey.com/2020/01/20/azure-sentinel-incidents-in-powerbi/

Hey Gary,

Thanks alot for your howto guide! Managed to create a similar dashboard in under 30' :)

I did however needed to change the "& " in your Power Query code snippet back to a "&" to get the query to work.

@mclaes Thanks for that tip.  Perils of cut and paste :)