Skip to content

Commit

Permalink
Update notebook authoring doc (#177)
Browse files Browse the repository at this point in the history
* Update notebook authoring doc

* Add dev/test section

---------

Co-authored-by: Ian Hellen <ianhelle@microsoft.com>
  • Loading branch information
zhzhao8888 and ianhelle committed Apr 20, 2023
1 parent acfa997 commit 527a912
Showing 1 changed file with 1 addition and 0 deletions.
Expand Up @@ -91,6 +91,7 @@ Since each notebook template may access different data sources and REST APIs wit

To avoid the situation, the service principal should be given peoper permissions to execute target notebooks. At the same time, notebook authors should try to catch the exception and render meaningful error message. Usually, client object initizliation will not throw exception, but when the client object is used to access a resource object, permission exception will be thrown.

=======
## How to persist key findings in Sentinel through REST API
Sentinel Dynamic Summaries REST API is the recommended way to persist notebook execution results to Azure Log Analytics, where the notebook data can be joined with other data for further analysis. And regular Sentinel users can query the data as long as they have proper permissions. [The cred scan notebook on Azure Log Analytics](https://github.com/Azure/Azure-Sentinel-Notebooks/blob/master/scenario-notebooks/Automated-Notebooks/AutomationGallery-CredentialScanOnAzureLogAnalytics.ipynb) and [The cred scan notebook on Azure blob storage](https://github.com/Azure/Azure-Sentinel-Notebooks/blob/master/scenario-notebooks/Automated-Notebooks/AutomationGallery-CredentialScanOnAzureBlobStorage.ipynb) provide good examples to send the results to the Dynamic Summaries table in an Azure Log Analytics workspace.

Expand Down

0 comments on commit 527a912

Please sign in to comment.