Forum Discussion
Workbook Logos and Descriptions
CliveWatson My apologies, I do believe it was too vague in my initial request. I am looking to push a logo/description with the workbook to be displayed within "My Workbooks" The logo would be presented in the area marked with the default logo and description would replace "Customer Defined Workbook" I am familiar with pushing workbooks via the deployment methods suggested but am unsuccessful when it comes to finding the parameter within the template that defines the logo or the presented description.
Please see https://github.com/Azure/Azure-Sentinel/tree/master/Workbooks#step-2---create-a-pull-request-to-this-repository
Take a look in WorkbooksMetadata.json for examples like:
{
"workbookKey": "AIVectraDetectWorkbook",
"logoFileName": "AIVectraDetect.svg",
"description": "Start investigating network attacks surfaced by Vectra Detect directly from Sentinel. View critical hosts, accounts, campaigns and detections. Also monitor Vectra system health and audit logs.",
"dataTypesDependencies": ["CommonSecurityLog"],
"dataConnectorsDependencies": ["AIVectraDetect"],
"previewImagesFileNames": ["AIVectraDetectWhite1.png", "AIVectraDetectBlack1.png"],
"version": "1.1",
"title": "AI Vectra Detect",
"templateRelativePath": "AIVectraDetectWorkbook.json",
"subtitle": "",
"provider": "Vectra AI"
},
- Understood, is there a mechanism to push the workbook with the associated metadata (logo, description ..) other than creating a PR? I would like to push these workbooks out individually and not via PR if possible.
Hello, did you manage to accomplish that ?
I am trying to update Description field (logo would be nice too but not really necessary)
bsfergu not that I'm aware of, custom workbooks get the default Icon. e.g. the bottom 4 in this list are all the same workbook, only the one from the github/PR has the icon.
