Feb 23 2021 07:23 AM
Feb 23 2021 07:45 AM
@Ben Curran You can extract your KQL query from the Logs section of Azure Sentinel into a text file that explains how to import the data into PowerBI. From there you can create whatever dashboard you want and schedule it to automatically update (or manually update) as needed.
I seem to recall a while ago that some people were having trouble getting the data to update once the PowerBI was published however I have not tried that so I am not sure what the issue was.