Update:3rd March 2021:This workbook is now available in the Azure Sentinel portal as a Template or you can still find it in my GitHub (see below)16th September 2020: There has been an issue with a name convention I used in this workbook, you will need to download v1.4.4 and above as fix to the issue. Please upgrade if you see this error: "union named column name: TableName already exists"From the above screenshot you can see you can select your Subscription and Workspace(s).The first part of the report, shows a Workspace or many if you select
in the workspace drop-down.This report is using Azure resource Graph (ARG) data, so it retrieves data like the retention and licence used. You can also see (if known) who last set the licence and what licence scheme you're on. If you have Sentinel assigned to the the workspace, you can probably adjust your retention from 30days to 90days for free, so I make a note of that. Please do check before you make changes.Download and Install:Please...
