↳ GitHub sourceWorkbook

Sentinel Central

Description

Use this report to view Incident (and Alert data) across many workspaces, this works with Azure Lighthouse and across any subscription you have access to.

Version: 2.1.2
Declared author / publisher: Microsoft Sentinel community

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Connectors

IdentityAndAccessWhite.png IdentityAndAccessBlack.png

Data types

SecurityEvent

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Workbooks/Sentinel_Central.json ↗
Commit: 629d1d3 ↗
Source identifier: Sentinel_Central

Additional source files 2

Workbooks/Sentinel_Central.jsonsource ↗Workbooks/WorkbooksMetadata.jsonworkbook-metadata ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 17:57 UTC

GSTEP sync dates, separate from the source content’s publication dates.