CyberArk Solution files modified

Solutions/CyberArk Enterprise Password Vault (EPV) Events/Workbooks/CyberArkEPV.json

@@ -147,7 +147,7 @@
       "type": 3,
       "content": {
         "version": "KqlItem/1.0",
-        "query": "CommonSecurityLog\n| where DeviceVendor == \"Cyber-Ark\" \n| where DeviceProduct == \"Vault\" \n| where DeviceEventClassID in (302,359,360,361,412,411)\n| summarize audit=makeset(AdditionalExtensions) by ExternalID, DestinationUserName, SourceUserName",
+        "query": "CommonSecurityLog\n| where DeviceVendor == \"Cyber-Ark\" \n| where DeviceProduct == \"Vault\" \n| where DeviceEventClassID in (302,359,360,361,412,411)\n| summarize audit=makeset(AdditionalExtensions) by coalesce(column_ifexists(\"ExtID\", \"\"),tostring(ExternalID)), DestinationUserName, SourceUserName",
         "size": 0,
         "title": "General audit information",
         "noDataMessage": "There just isn't anything to show here",

Workbooks/WorkbooksMetadata.json

@@ -929,7 +929,7 @@
     "dataTypesDependencies": [ "CommonSecurityLog" ],
     "dataConnectorsDependencies": [ "CyberArk" ],
     "previewImagesFileNames": [ "CyberArkActivitiesWhite.PNG", "CyberArkActivitiesBlack.PNG" ],
-    "version": "1.1.0",
+    "version": "1.1.1",
     "title": "CyberArk EPV Events",
     "templateRelativePath": "CyberArkEPV.json",
     "subtitle": "",