{
    "version": "Notebook/1.0",
    "items": [
        {
            "type": 1,
            "content": {
                "json": "Gain insights into alert statuses, severity, and product distribution for efficient alert management."
            },
            "name": "Text"
        },
        {
            "type": 3,
            "content": {
                "version": "KqlItem/1.0",
                "query": "DoppelTable_CL | summarize count() by 'Total Alerts'",
                "size": 0,
                "title": "Total Alerts",
                "timeContext": {
                    "durationMs": 604800000
                },
                "queryType": 0,
                "resourceType": "microsoft.operationalinsights/workspaces",
                "visualization": "categoricalbar"
            },
            "name": "TotalAlerts"
        },
        {
            "type": 3,
            "content": {
                "version": "KqlItem/1.0",
                "query": "DoppelTable_CL\n| where QueueState in ('doppel_review', 'needs_confirmation', 'actioned', 'monitoring')\n| summarize count() by 'Verified Alerts'\n",
                "size": 0,
                "title": "Verified Alerts",
                "timeContext": {
                    "durationMs": 604800000
                },
                "queryType": 0,
                "resourceType": "microsoft.operationalinsights/workspaces",
                "visualization": "categoricalbar"
            },
            "name": "VerifiedAlerts"
        },
        {
            "type": 3,
            "content": {
                "version": "KqlItem/1.0",
                "query": "DoppelTable_CL\n| where EntityState == 'resolved'\n| summarize count() by 'Resolved Alerts'\n",
                "size": 0,
                "title": "Resolved Alerts",
                "timeContext": {
                    "durationMs": 604800000
                },
                "queryType": 0,
                "resourceType": "microsoft.operationalinsights/workspaces",
                "visualization": "categoricalbar"
            },
            "name": "ResolvedAlerts"
        },
        {
            "type": 3,
            "content": {
                "version": "KqlItem/1.0",
                "query": "DoppelTable_CL\n| summarize TotalAlerts = count() by QueueState",
                "size": 0,
                "title": "Alerts by Status",
                "timeContext": {
                    "durationMs": 604800000
                },
                "queryType": 0,
                "resourceType": "microsoft.operationalinsights/workspaces",
                "visualization": "categoricalbar"
            },
            "name": "AlertsByStatus"
        },
        {
            "type": 3,
            "content": {
                "version": "KqlItem/1.0",
                "query": "DoppelTable_CL\n| summarize Count = count() by Product",
                "size": 0,
                "title": "Alerts by Product",
                "timeContext": {
                    "durationMs": 604800000
                },
                "queryType": 0,
                "resourceType": "microsoft.operationalinsights/workspaces",
                "visualization": "categoricalbar"
            },
            "name": "AlertsByProduct"
        },
        {
            "type": 3,
            "content": {
                "version": "KqlItem/1.0",
                "query": "DoppelTable_CL\n| summarize Count = count() by Product",
                "size": 0,
                "title": "Total Alerts by Product",
                "timeContext": {
                    "durationMs": 604800000
                },
                "queryType": 0,
                "resourceType": "microsoft.operationalinsights/workspaces",
                "visualization": "barchart"
            },
            "name": "TotalAlertsByProduct"
        }
    ],
    "fromTemplateId": "sentinel-Doppel",
    "$schema": "https://github.com/Microsoft/Application-Insights-Workbooks/blob/master/schema/workbook.json"
}