Blog Post

Microsoft Sentinel Blog
15 MIN READ

Deploying and Managing Microsoft Sentinel as Code

Javier-Soriano's avatar
Javier-Soriano
Icon for Microsoft rankMicrosoft
Jan 28, 2020
  Philippe Zenhaeusern and Javier Soriano co-author this blog post.   This blog post serves as a guideline for implementing Sentinel as Code. You may need to update the scripts for your env...
clipboard_image_1.png
Updated Mar 06, 2025
Version 19.0
microsoft sentinel
security
gregoval's avatar
gregoval
Copper Contributor
Nov 11, 2021

Hello,

 

I am getting confused with the Powershell task "Create and Update Workbooks" (with AnalyticRules, everything is ok). Steps performed:

 

Workbook ARM template (json code) exported from Azure Sentinel and saved as Worbook1.json

A variable created in a variable group in Azure Devops with name eg "id" and its vaule (Azure Sentinel Worbook resource id).

In IDE I have configured the following (many different tries with different values):

workbooksFolder: Workbooks
workbookSourceId: id

 

The pipeline fails with the following message:

 

 

Thank you,