asim/add-audit-custom-take-3

ASIM/deploy/EmptyCustomUnifyingParsers/ASimEmptyView.json

@@ -3,13 +3,20 @@
   "contentVersion": "1.0.0.0",
   "parameters": {
     "Workspace": {
-      "type": "string"
+      "type": "string",
+      "metadata": {
+        "description": "The Microsoft Sentinel workspace into which the function will be deployed. Has to be in the selected Resource Group."
+      }
     },
-    "location": {
-      "type": "string"
+    "WorkspaceRegion": {
+      "type": "string",
+      "defaultValue": "[resourceGroup().location]",
+      "metadata": {
+        "description": "The region of the selected workspace. The default value will use the Region selection above."
+      }
     }
   },
-  "resources": [
+ "resources": [
     {
       "type": "Microsoft.OperationalInsights/workspaces",
       "apiVersion": "2017-03-15-preview",

ASIM/deploy/EmptyCustomUnifyingParsers/AuditEventDeploymentCustomUnifyingParsers.json

@@ -41,7 +41,7 @@
     {
       "type": "Microsoft.Resources/deployments",
       "apiVersion": "2020-10-01",
-      "name": "linkedASim_DnsCustom",
+      "name": "linkedASim_AuditEventCustom",
       "properties": {
         "mode": "Incremental",
         "templateLink": {
@@ -61,7 +61,7 @@
     {
       "type": "Microsoft.Resources/deployments",
       "apiVersion": "2020-10-01",
-      "name": "linkedIm_DnsCustom",
+      "name": "linkedIm_AuditEventCustom",
       "properties": {
         "mode": "Incremental",
         "templateLink": {