{
  "version": "Notebook/1.0",
  "items": [
    {
      "type": 3,
      "content": {
        "version": "KqlItem/1.0",
        "query": "Sonrai_Tickets_CL\n| summarize count() by digest_criticalResourceName_s",
        "size": 0,
        "title": "Tickets per Resource (last 30 days)",
        "noDataMessage": "No tickets found",
        "noDataMessageStyle": 3,
        "timeContext": {
          "durationMs": 2592000000
        },
        "queryType": 0,
        "resourceType": "microsoft.operationalinsights/workspaces",
        "visualization": "piechart"
      },
      "customWidth": "50",
      "name": "query - 2",
      "styleSettings": {
        "maxWidth": "30%"
      }
    },
    {
      "type": 3,
      "content": {
        "version": "KqlItem/1.0",
        "query": "Sonrai_Tickets_CL\n| where digest_status_s == \"NEW\"\n| summarize count() by digest_ticketKeyName_s",
        "size": 0,
        "title": "Ticket Key Name (last 30 days)",
        "noDataMessage": "No tickets found",
        "noDataMessageStyle": 3,
        "timeContext": {
          "durationMs": 2592000000
        },
        "queryType": 0,
        "resourceType": "microsoft.operationalinsights/workspaces",
        "visualization": "piechart"
      },
      "customWidth": "50",
      "name": "query - 2",
      "styleSettings": {
        "maxWidth": "30%"
      }
    },
    {
      "type": 3,
      "content": {
        "version": "KqlItem/1.0",
        "query": "Sonrai_Tickets_CL\n| summarize Count=count() by Date = startofweek(TimeGenerated)\n| render timechart",
        "size": 1,
        "title": "Logs over time",
        "noDataMessage": "No Tickets Found",
        "noDataMessageStyle": 3,
        "queryType": 0,
        "resourceType": "microsoft.operationalinsights/workspaces"
      },
      "customWidth": "50",
      "name": "query - 2",
      "styleSettings": {
        "maxWidth": "50%"
      }
    }
  ],
  "styleSettings": {},
  "fromTemplateId": "sentinel-SonraiSecurityWorkbook",
  "$schema": "https://github.com/Microsoft/Application-Insights-Workbooks/blob/master/schema/workbook.json"
}