From d1b1745ad5569dd786bd8cc41e16e1767a85778a Mon Sep 17 00:00:00 2001 From: v-spadarthi <101796244+v-spadarthi@users.noreply.github.com> Date: Fri, 8 Jul 2022 12:58:04 +0530 Subject: [PATCH] Modified the workbook shortlinks --- Solutions/Snowflake/Package/2.0.0.zip | Bin 17404 -> 17407 bytes Solutions/Snowflake/Package/mainTemplate.json | 2 +- Solutions/Snowflake/Workbooks/Snowflake.json | 2 +- 3 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Solutions/Snowflake/Package/2.0.0.zip b/Solutions/Snowflake/Package/2.0.0.zip index ad0594d9e59859d91e50435c1368691d06cb9c8d..523013d6b14576503b2288f4c4ab127270ece84d 100644 GIT binary patch delta 7259 zcmV-h9His?hXMbG0kCfi4HakTR7N3Hg3&hs0Iaio3*#3}TUXBaU90ba;~UvNl4HsL zN!@j{B_&%cj_pcvveP(An-Xc8C$gv`QqJ}{P49ZwM`&NJPtq9xBta73pCnt3=!?WA z@i&9PV7|c&xU;Pz)dPPQwszl`;a-Fma|ThY%=R#k;U8$&;*@NH zsBL+&wyeFHtqXBeM$@1&c&t!!Lfmsg`*LW7+-qaN*`t3)2Fb&|z|E$=!X8YGd^G9R zUtMRWn-*zUx)FDP6k!{h79VJbq#0Pcp?;Uewe4+K_Iw2gPeHf|LVOR>XKTi+G3wF) z9)5w9hsiJGV;A_Rhwale2Ob;%-I!C`@g7$m>rVASPE9279*elkP% z3{zK_9E*HH3E6S2$+srWS)~KU*kI7<;~8DGHdAjG6Jt!?S|gpdvlmc%jx`}8><~p> z$MXj?-FSv8T5{01y+aiT@6LC}n;`CP$8{dyLI!`@l)8SrH{08^^lM)X*};ug1`Xu3 zC~g(r^k^tRe8+$>v~Q>{3=^eFz`PNfi;sjm!OU@>y~U0Y)H1>+b1dv+?s!V*FOH7o z)^fGz7`Vw02Gx~3tRtjmgvdjpxjPa}zGJ^;d!)95qhJ%qrV3XRpA#)GdsLQu_c@6D zU}}GTx2c?2W9(T&$r|J7warS4EZ<=r4ulTH4N>S8M`;VMI56Z53_U^H-fl222l_aI zhoocAFxYHbIIZFw>JJ)VP@N;8E!M1#<6`@)Ms7#efU4Qq*!x?{YmRqFos2Csi8v)D{mL%JM4*XrgTs%=Cl+!6zl(tdixp)48=i=vhkP;_ znREz8JLH|^EnaeIO&x9I2}(dDhcvL9C%7-sDFFJs!MiddqhR}H6;F&K@5-)Tj|?5- zNJPaC>rNzwT5C10O;CHtAI^Cjgav=orqOiM24%mAKa+D1EiGDEu(w_Yaf)zl=L7C(Qt#Aru) zF9!)1K{fjTSi;rv@SeCyu{L#F8Do87nPZ0^w(2HbDr7jaW;$ED+|gR5C1@hTki9Nr z_yTv%Q2r1at@=hVZ{ArCS6x;bdU`OY*7%;D$RK~sn@6E8-vRw8W4q96^1G`5L=Np( zy1ipfOdbu!^N42l?}&cDLb!jRDh6FVvWcfYrGWwau7TRy08)k=H=t_|#3@s-ZS-Mc zW@u>9Mi%QlSvM=45g)Wjl^OBDv?iKcGgnG{Ag7()cY;jta{)KyNqX@-htVszu~jCe z7_0=imv4c#HA63+7`jHgNz zFA~Im?ga6Kbm%D7%$k4xoI33}b-HuVbPGwVrp)k-l9Dc?ceOHkx=DYNyH@GBS<`ZtA$$qx zw@KcZaHLyYdaX>v=18Yqhcw!B>ojw^Y>_7WRB5u|jU=vN4BJK63NPA5_ zH!RXypFX`c&#bIb8f#|u6zQr(x@wWGTBNIH5Y{4HwMbVj(p6U@T{Z81U!X zI;z~^lO{bfRa$>!igZ&|9%P2}QhDHW>V!vG^=0!VF-YbW&*VEwk)BzkXBO$1tCXIZ zV{0tZFpD(IA`LSx4Kpr2F5{=U*7EB~J_C|70aAZ;G9iD6KgB0V?{GI8-_rQhpYsc( zzX}w3v*2$LIlkD)TO_nefVDZkKpJe~MSPDmK~ln>BNdDLSxxI8P|DoBIX*_3!2AV$ zi?og*SzR`ozCb3l5R%xR=_{pjNqwG=l%~tCvSEkTy9RnDWYOBug}z(aJq|2%uV^%B zgHLpy@}qw*tCM%#dJQCA8DR7@%*)!?md8n|v}y&9eb@oNP7mGe65*c4_9X_r!Ccsi z_;xhnspl7r+qvM+amfNOx4%xT2Xi|eVy)}OvbSvXDV%@)jA-gGzhz&M*T)}cQ z&4L1P9NO8%yY_i$3k|Jkhdh;}qJ7uGi+NNdQ?4b>&lx?mN7)(jC66ANS$j`Bo2JB$a`cS%9 zXgP1NZ5FRpr{NEa9Dp&rqu!kqW9U_PkB;SiM;}HmnJI3R;g=qWrjYv1195|$|2mnp zX1R3125v5h8)DY`Uc?5xQi<2S1Wd_z1(Sc>WZ_K|m%XIFa=`tO4yL&5MfT^Mm%TiT zW206$Hd1KNTH)A0NlD?@s1=TlWjHo!3v+BVX(q1TM?Upiv_?L&(_3*?#4=%q4>2?;`b0$E(e|%5?^5+2LwWk5(5@k!$0`lmV#j9ro z1J6&ruz85hQ z))kHKN$TWXxLyN^*6ZA8++njJtG$2fP@E3Ez~K=b&Ze{g;r>qn!j}xf_nroXOLQzr z3&Nv26|bHVge%)w0ti?3Re(7QA3j0UA&}Uy@aa3QskcYanF2eQyg*glOAb)BEKaEPnGvW9m$bFsR z{QlFxd5OLzY2kcy*W=YQ!g*yoOMvsrz6v;B!1)5s2XMkc0q0X_(1QZbqokyO^9Kc- zUk02%SQwmt3tHCD&(Q8)?<0TpgNT)|u6X`HQYY`a^%_VtUUTDlCc%V4*Ht)C&xqvD ztq_o>_;YjqwDgyU!*9fyEC6`qrvTtf2H*!z1HdH;mZSyX(QS%X&j`Sk?JNO+EBh({ zcmco*03NXH4+{XELW3R_030PH1pq%R0QfQh_~F6;_^)8N;5S}P2S|Sg6yW3UwT9z| z5u0IM;rOAXPTp1QHIQh^=7!@;mg$EKsW8*eJ*tp)Ze;!+WMr_9p-pJqb$>{^#e45y z0l-i7&Gk4Jd~bAG&33PgH%~YFjkAlZX209&d~5?`@6#HQK7;TbV7nMIUyg6EEW!BJ zRL6UYALDEO^xgn2H~fF@WF}AeIq5M5AdQH2Pd}Vv-4H$v&*Lz7=E(b#lfqN*9G-&1 zr|}d>bU#V!DTwZ%yn04YfwG+?cnXw#6`q2^Q&4yc0ubb=@D!xbphtzL03{`br{JjY z6fDD2aI`Q_0b-ZJM-Y_Q!bd=T1V@rOdDpMkK%xAe7sR8$JA@Bb87f5}+?=xMON zM2C~KSUC0jrTy&kJ_*I z>H0~;N?2FaeIluocinmoBpR=|QMY)(UHF6Ea#MB5_&a#hT?BtW+gI$_xPs;6+52u8 z`E`3K@7miUpdO;*20{3%F?1^0cP(6_>T`|p<4&{t+W3)d0@E5-op$dt``~>UxcIs2 z{a$Z0F0Oyhd+cw4^?^aJ=>>n`74bX{jpCkxb@pqVJdIyNvTu>JevRnv&#PzjYbe`U zf?q?~SK-$v{2GN{BLJAHyM<#Tg$k|i7M=|%D=AzXSZp0+>ZyGjoUd+Ab2&G_;_b50 zthH|=r2S|kYwFyn?n)}0;*ScR>1lK)~_L~hs6$iUj!xm6nOrU(zX~R--Hc@umx-R?t9a(=d_jn!*Y#^TCLmUCE)^)V0gIa_K-b>8DK58mq_G(WxSwmLk*!7C!7|I@}<8(V2#_U!-#ZeeWcG=%p9 zLurk5I#~1OX4ACC7U~q|agz@Y#tu|`xa>PyWfFM?kIwm}1I|{0MPHS@ellNyTsD7Y zwF*?60TnYos_`(_p8yWyk+5Pr_TIjZ}=b7{wE<^)$q?iJ=W;F=Eh9hhCZq<~D9D4hMCb(}7;!*Fck z+!^d|5#SF;Q41d9MlyO>nd;9#N*V^8G zO?r2xO^|zd$?F)v9`J%I8%&qe2(t{yK*QuMc=8^@*T`EARmt|Yx7xS23A{o2h-L#o z19jpU`VRT>)*6kh@5FYDiH$`7q`?e8zrnV?Zn~>k`vyxH3~H_?D_(yW$c%$M?k_tJ-$38Dk!n_cf`TlRCOLvOez(CX?|3ABbmKQ=3D8zW#ZDuj>Nf=hXzjp{LPApBzQQ1RmU za9{D}aCcwTTJ7MZwySt2knxog!ft2B*_ROQb^qfll(n755##v89E}*es8^-OSiTE? zyDFGJy58_jYs<%hW)ug8#L*Wa5Xx#bD3yB&QW+2vIzl%6UTlBt_4FFOAsDS%u~{H_ z&vLX8^?6|a?vQ`YS~qUA*$BNnyEF|p5K4P9weHD3Jn4IFqi^R2E>+WF(noT@uy2ZadcHkGhaLKE-lKBPIi^3MXZ_RqI z{!6{cu zmoT-FB`bek4H90k+>l5!gJ^|xW-oDDU+NU@Eny0U`9W(B7ic5ytEIu!3MRl<-yGUy zavU?U4gP7@?t~6?JtuWvF{%4d{%e{F)ZU6NKHtdV8IymfdvSM3tigM zBQ5QN1#9YK;}<1?j_F%1VauL!pdro=5Inmdf6#xNA(JEt2XF8jybdF#io}kL8z;6A zIwSpP<(l{4g1Q&@s3zJ7M#+fRW{$-{EnOjRX>nF=Ha79M>JhxP#0CJcnD?{$E-Wka z#vE#6r)l2e$C}x^^Ve^u8g>16?`l8j>a*{x@4wIwFTt}LZDbpn>>&170;2-$I@6i) zW8r@qIV;E!mP)9kdabw!N48wnX=TV5w)#uM-*j|iXx?ih+O={;l;aoELKaLl!-A3S zc43>x-R&0d@RBXDK$5n4eTl`?i>pfooYdWP<`=lCCZ_A0N;6lk5S%P+s=}C&{41zv zeC=2hyy6AsCQ<}l-T`BkV#CwmHvwc}U!;HahcTq_BgpjAaKq51IQKzsCBvUy11}Yc z`u5=M)YOA3+Ea0^nHW}w0ro|-;&C}qDMEw#uNDd)=nAO-9w@ZX@{~m^DDuQH=Iax& z4TNMlzOz(<%`q2+T&MAUD}_0L+bBhd&A+d{LdzkvBERO6St@e(6Uzo9^@}zQ4r70$ z4UAEbvFv(-BSq!TkBpdOrLt3Ui}JACaeroG z;4%D(WNrSXgr%mZYC%6YzO!p-R$j8>RCOK$ z_^NY88a%2zBKB)!{Td+VIv}7}N_&4(5X}goC&_e9X446dS!HSCcd?@cIAz7kht>w;Y?} z(pJE`8dP4F{(Z<@7z&fXbyH)uG0myI=&8d8;Jw{3hKBiIL|6FIRN0(9t~r!ebvK!$ zd+iol)zoTB>a|u_7FE4i7$u)ww-nDHYGrxUUssyp&4oNPrl zLULHI*MykgwQnr`(@tEHfz*v*neRo|rA8UKiH9k_F5@ zqcgTqKW{3=1uN3Q81fCpl^@DWKfpJO$A9AwsC+lDWf#4~J z<(F5CP4+l)A<0VR)IWQQureh`P^i)Do;ZEzPI#A^cpu}MQSW~aK}9ImQEf&sRpiRO z$bQYDj58_WB;}h~=?18YQ?l{OHAbmM&30Ej>SzYy9mbv6NV1`;g;?VivEDG=%2Amw zViTeX6Re*ML6$>HZC+Yxt3%7)ytM4C4lVoh(z3rgv>eP!%fafNB7DkCw8W8HL6#{wX?$g+4ZJ%&F~M&ITjXzH72ukk~ai)!j;MPaMvM=LOyf`K1Ks zqyPA;Sd|}H%Uof)g_kf%ZXnta4(bDxNqya3Z;LuV7O$`hI7>Y~)6N;08`jJXnamt^ p$I?Il6L9|j0h3}wQ4JMm=u}1_Rf5qs0069$z(Y0$WkUb}002TzGp+yt delta 7273 zcmV-v9G2t%hXMSD0kCfi4Z~RHR6ms>kIpv$0H3pb3*#3~8%fUhIVbPXs~bvMQWmLy zJIYxONqcxKOA1NZ<5)f%kboqtDS}IY@@O~CUGDM-$;;(QQq|o68bCMxNJ^9mojD!} z=)bD2uCA}Ts?cFKq3;BcV*tBWMBu(A+Tn7%!R#Q)9hHv91jgjzNhlN-)BF zH2MTaR(yxNuoxH>Us&ZGbAL8~8^$Q$_=EX~ZB*^)!5{A|sbNhXk<(|i19g?S=AMhc zTmV7-7RFvdrk|9%s#mI$uX%OSm2EIB2{UtNF)s(eYwMn$68lPj=tiO+c<2VA(9Q?q zg^6(szA-Yn4`h40$rTs(n}YfQz~ES8?#3cm<=Xl3r!TxY2NYX6Vrz#DVny^SMLKG&bei+n2zjJFvNcLEf$vr^CGnE#?fOSefl%9>YJ-u*E6a z1X0`aWNle{HCq?rri`XRW$;*`=7hNCg!bjo3c1(DfU`$`j|`HBeSw=ze}z4m8u@6_ ztG~L=OgAmkuyiBt04c&YG%Y^R4oNexbVL0vi)-84uItX%0L%0J<@!w&OjnJlGX%ufl@9n0?L|;ueAVdjLH&p+T`+ zdo``^SkvJ$|$o*u7 z?ir@8FgX_agc7pjT9a>0nzKp=jIqI>)5kNqYHg<8E+)p9ytPI;ZD%i__8eW zypHD&Xu9zXSG44yaeId<4&I&bjyFNv-Hz)#z=aHdv?+D{cyG41Y3bL#7_x&KtqdB- zYf;=Pyy?+UfcTC9V`$${Ul=Azm4JC8G#4KUcY>MYKzoZFA*f}9Pv%(I$=vaj&|e%K z%dO>V(J^q7Aq=W3d00nC%?Oc)M00l}n0&{6&Gtxb2S>psj!hM=CO#)xVD_ji`R;QN z`@z(I`fgJ>v&Pu7hLSbL(`%cR7FoW-IvfZciW{QPEsoL_UU6W^8yI?mw!Ph8UJmqe z1P@8ao?)=rv~XI*In*CCz@R!uLR+j^9mmD?S&iI|tN~TCv$6TN8FT=qrWZIM5=EWY zV3nbx1hwH_Ty@R>Q95_b6-rBgp}3(f=ar;eA5eLZ8?=og#u{=;wmSqf z?3=fD$fmJ#yW^vtYHf@2$Pk#UktrAn=Di_sn8(BJ?Huz8Hy%?p;s$9`f~l|5jf&ra zD>=AX-|qC~XdQle(@GLmS?? zSix6nl1g|;po1RPsdZHLPH0T}NgX^7!VM9>tpoMhsT(>MY@_0RerM}7!UpHs@myqm z?qLf*Mwe3fnd{AD&*8WC-OGBT)o=4B-CygSR5VXlVWY^xH882#4^VYKWx=ax>U$;WX*K8cDbXqOiR#2gduxf z#_$F1oT2<7G+OnIVBWm59K~)U8cw`e#eM$oZ_FV(Dw*jOKIc`AL9*9$>VB6@! z#LUppqKz!pd9rR+IwL-4kt#FdgK14Pw`Q)C_&`oOz3&8>;O7Ev%9Hfsc@CpjaAT`X zN-^vR=0ycl{<0->k+^hwWlQnt_JJvqmQGpy?KpR!y1V8zm)OM(=86^2QO*r#~rUSM5JY z&d`m^%uUIU=g7$Ynx2UXiSbe9U81wG~pnkj86+rl@2U*zT`;i zlwrrD49-QR{pL#dO_>pyB@;3^tv4~9Hz|!bim4;bENVs*(sYx5CU>pUbF-%9E<^Yd z(r=TzG2uwJxb#|?h|Q5syAElz>DFoHblD?zV!i*(f@UA0J8%^<8rx@wWGTBNJ4M!IU={k}*`T}WDL zigZ-D!zWF8WU91($Q0?OsyxUH>80|(=hO+0vg*s`OJbU6GFy_;Lg(d5_)++nCF|NQ z(mRXv&gV<-Tv%FXPPt#v^vy-3ZD!_5k)BzkXAbixKZaF(k)FwSlp;N|NY5SRKH5PynKklx{LHom3tsXylz zNPiV5^k%`|B657Ok+(=_lK^XTe1SCB#EbYIX@aDLKSwGS_p_STL7Q$p$W>m>z{AXQ0Nv+u=5D*1dEqJPC^A(kJr*{ zeIccPw`;I=0TryMKD8ny35KSTVod@CuJO6bu zY0Yx!f(_hU5I4lE_q~V>c%>4rdkL75@d_q?yUD_vC@yfESF>f~L! zUIU2+Y;NZUmtrqSd?g(j&CbPTDe}JcTdz+Y0HoxOUMST1t<|{dwJ*;5-Cn(S)pdP; zB3F$@tJ^JQ1o1BqtLx#3eI8tX57O-{vgb^IeE;~M0OZdB$ZJmn$R)~_qy^;BEsIyr z2*{P~ECG-!`zio=0mutL9?MAm1wh`7!|c-l73{k9NA&XnZeX zCafzO-;>nIyKub*60O&{(YV8ALsol#)uA{YdV#|uIGjys0mA*C0)#Iagzr5K2$$$s zk`{zVcPd^zBM4Wvvjh;X?5hCb1qd%dc)+^fFF<$-4Z2@|aFmo3Abh_7;mZKw`-=nN zG~txm>uU|c_ajEaxUnjs7uD-d%L=SfWu|c z^Zwg*x6ko3N7tVXI~4Yhc%jd}z~ZRBb|DXSXI+Hr{|j>#@In662!0xsh-bp_MUeYC z!}IV@kVO{b3fuv5}b?Y^dXuRge^Gt#Xg|4e`qMi}S zpIadyPx0sG{AuYg4~O4~Gg$!e$WH;lmkhuUo(6zR6f8*#z@ys~ubvTrE8AHD09W=^ z0Pq5U7XUn9*&h}FJcR~5EC4u4N(umeSOD;40Pw?w0q|eJaKUf9nhubE3@E_I-)jxW z4YM9vF8JQ)w3_W+7jK?!_8VsxSIvI6)%n;4$lj+lB7FwoJHU1^X1*NXU|E9k zt*MUp6hFq-{OP>`TyFS(-N{Uz@N?2*3_uzY?Vf%($GRbW8lJ~t@XV3-Cntrc;5j@6 zhfm`vkm!Dr)>9DOL3#Czo&se%OYjsZ`zkyIg{PqK6a*m1QQ;{_p+S!dPXS6w3QxgN z;VD>#r{HK|o&v-!g^wU8v4xL-`Us9Bb@HxXuYp7(Hn)!eCHcvJJp?-ch895M>hA7t zUjIPvqE|obx6bO9h{}8I53R6U!0jl(FCc3u)*T?L@Y8z%9I2=jSl|CCu>O*<{?XH5 zeTfbyX|aBEC*;*LVtr*hOThZdz6z{gVEqE?2SCJef%Q{p(BlH@qokz3`o{&K9^#O+8*iW*5yWOUW}g$ zz(;PpyE=b=e(~wNl!VvUD;S?6ZTd-YOlII*Dv-DTQy}jpBk$v$+P#} zGV<&8Qr@+o%h(^0_y{VUegQy!Ykr=92&(v1MBS9IC&bshGgF&Y5f|}-Je&_=+{uT zvjo3}vaiCgQTR0qzeWHsRd)-=MhX>L-7P#DR8~^BHn7+_$kbE&HaK71p5}6HfW_No zqgiX;Mo9b7M%L81QQehP%DZyC1`Mw6=UtUv1BnJ`PCzaQs@$>^@OM`Oxl!Qmo7s4Xqpy!l%?@-SE$+c|A&bA? zIJ=$-fS7{ukMJ9y#Zyx9%9Wy}E~l108#=OoV(#%g7}!8O!G|~kTCMA7QwO~Qr`=w? z(_=aLPB~Bp71U|#W9z)fV;;QML1=z@)opcngo9T^ME|Favo^NUzUvXW@&CRB1k1f(3?7~HO9z~-1dF~Zd;Mg-0=aB| z%4!v;I0GtXd{pCMu0H`B#v@_HcI>^6)5+oDU!%<@>bU?^mYV=sbT#lp#n`C9;2Q~2 zRjCBwtaihL-%02@MjtD1cf!8RD<=T%v`9K7FfRai0l2dOtt`tn0dyTEqj06YnA=uU z!vv{qmf0ptvc*!`V1@0qGPaj!b1i;tVGl7_}oo(MC2`z{=Sr`R$Py zJ0zF=p|Cp=?1&_DB)fefZsiJlBFTJw67y2ho-C~^RZfkiw=q{gMhWk85D#8wQx9HF1LXQ)iWjN7e7@l$OR7tOYC%keg ze&N3Ks1!brH$A#$1J(%+QRdQ))65C3j@&EEYrr)f>^m^KbV&i3E>Sr9J?l7KWQXC{ z#JMxr&88IBU^o*9&gjuLqoG4l|3R{kE2NPl96}aXE7-Tv(__G#jLg3qdXrJM@sDfQ zcDvqqeZ6rG2nL&ZRo&UW-Y8#xZK867!wYPSCt>nM{=NU(=+d2)Hn7g)qd!-inWj!F4E5vv{UiOPGT1#i ztn42i?Nv@{`f;VERgL4?NmZ-X4rl|Zdhv#iptPfnZw>mGk9;3~6~vYnOpsgFHTvKg zt?nhrACQcrqoc!J`tyT-cLJ?poR7^4+r|jy3U$CoY{8{G&_?x`HxPcYcc^%Ae7LW8 zbGW;&YOQu~QrlI$6Ug{V31JtqZ(+pVVv?+#1@u)FIqId?I zyVw5ks~>=F`5}r?wH7Bw?(XnzYRx8|G~MD~9y{=(UAW{`yT|;3>IGg44!35#SO2Bn z^>WFtgYnlo6W&NELD=>J!bU}(dR%dbvQx-aNExntn<~Cd?VQPESG%e;;F|V~H%&R|T_9^_n+4`;3xazep z&iO|V*u?U~0b=*5MRE!o#S|gE{R%(tP$nf}8^coK{Ia-eZ=ZNsd%{Adc26<2yGxkb z$dVOr0|_sGSZ+w9nL)HdI5-Q9 z!GbmQvGI$NK*#j0mat_{InWU22MC_sk3VS6kV%q%go8Ku* zvC}kf@%zkd-udgdQ;m9iymz%9boJSH*7slNx0c}9jW)84Om+}^EP+vhcAe?W__1(} zoE7AM2umeYQoUAOgd$Eat3|sxB;cq&+F*NVB5$#&JBFgcLX(0=ynqk36ce}97 zc!Qi0#52~2J;JCRTI;7PNkVER|rm)HdSHFNd6U6G`@DM z3Et`ga}z0oF7JS`O0nT-@G}6iNH5a*!x++kkP&41X}Do%Q=I#tx02ycuYs3}M16bk zc53Ru744}w*Gvqn!vOmtTJgA?s1%_={Z|Wx4|Ii801p&eXnD#a78H5n81uo2*akwf z9N$?g!RDBYLax*JzLmlpz-^Qw#OB{uU!mm?T9IFK$t)GQ`-x=(lKMrP28S`y2F9p= z$5?i~!I7eJ=SN1&vGG@Te`H-i3)kRNVF?AViajMI5X*Y6g;LomxkY&-?zlg*G1eIV zM6x#jQo>T#@MCY{zuiA?mCB@A4lJ@Qw-I+?coD(0Ikljl8{gSYG%GLJajH6x0esat zBMlx%9ufOBvVIK^a~%*+ETz3Eh-QR;(3503C$s4U$E>onaq{MHE!DE3*uY^RT62p= zvC361To4`HFEic{jg>=JM7#Go$KU=eyS7BKZ7&{);`wi;c~HacL{y zT@5O)OaBVwE)0c9;JT?X+nDB5U-Z=B1MuGN7(>H+Frq7bX{u~aAJ-g8tGb&^(!F*I zt!iquCG}b>EQ=~?nXlL>2$~xv+16Pg$;0h+X^8`A}xxSI`VK&BU{_^Ljc zj7%0MSaE|ED{fQvtHH<`yt>zaY~TQo;`AaKcUUaj4@~lrM$id~4%Hp`txdKf0U2jG84IvCZ2uBpAiRhdoRmf{KeaetmB^<7;N@+=%0p!lCItR#|-o!NK z8cS)6hcMF9?jwlu{m#VzH?A*VS+Ry2cbQO@&r%x~x$TZrQjQD$X%&O2-w>*beS+V3 z(bpXV{srxMsX2H4d%CXPz&1Z%6|r9?TYi}zI|&y8DDOiHOmEgK?3BUDLUge^yGaTn zQ&cyvZcB5byw@pntlb5F=J8fhPNk}pxl-;=G<=y9x!CebOV7oYQLhVYUdaMxpV1lH zsGm0#*-oO;J~-9F|{R zF*e!b$Q>jrl}7*US;5LIAVHx<6MEwGp*!JSYT|v2Yev001QnrwSVy%P#Z-|i_afmn zi!#ongp-tSW~CdTCQix5E7usM8a3Np@u;I2h}RZ(W+Talt`=gASHyb5cq>O`zKBhT zCQPt?G6Y!;Ewy=RsjUtzd-Kw=w>q@!&r8ex>ddJuEl2axaOu#Ld#r+%wlQDX2?irnahw_EG-!g8RchN@=_DMIgS@l z(~)o~9j~t-AbS5?-jS=%eC9t|%5r8D8o&6b=pYvQ*tjvLwsScfj7eq=3kh3OXFyCk`EXhS%t4^SrcB6WMcE$aMOytOLe zEcN(IJ7;8WSTkobbJ(>?|NKwz-~R)XWkXR7!&v83Kb0bn&Nl!6pOeEwHU?rt00000 DqANQR diff --git a/Solutions/Snowflake/Package/mainTemplate.json b/Solutions/Snowflake/Package/mainTemplate.json index 9c75ffcfc6..1b9d433b6d 100644 --- a/Solutions/Snowflake/Package/mainTemplate.json +++ b/Solutions/Snowflake/Package/mainTemplate.json @@ -2700,7 +2700,7 @@ }, "properties": { "displayName": "[parameters('workbook1-name')]", - "serializedData": "{\"version\":\"Notebook/1.0\",\"items\":[{\"type\":1,\"content\":{\"json\":\"**NOTE**: This data connector depends on a parser based on Kusto Function **Snowflake** to work as expected. [Follow steps to get this Kusto Function](https://aka.ms/sentinel-snowflake-parser)\"},\"name\":\"text - 8\"},{\"type\":9,\"content\":{\"version\":\"KqlParameterItem/1.0\",\"parameters\":[{\"id\":\"cd8447d9-b096-4673-92d8-2a1e8291a125\",\"version\":\"KqlParameterItem/1.0\",\"name\":\"TimeRange\",\"type\":4,\"description\":\"Sets the time name for analysis\",\"value\":{\"durationMs\":7776000000},\"typeSettings\":{\"selectableValues\":[{\"durationMs\":1800000},{\"durationMs\":3600000},{\"durationMs\":86400000},{\"durationMs\":604800000},{\"durationMs\":2592000000},{\"durationMs\":7776000000}]},\"timeContext\":{\"durationMs\":86400000}}],\"style\":\"pills\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\"},\"name\":\"parameters - 11\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\r\\n| make-series TotalEvents = count() default = 0 on TimeGenerated from {TimeRange:start} to {TimeRange:end} step {TimeRange:grain};\",\"size\":0,\"title\":\"Events Over Time\",\"color\":\"green\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"timechart\",\"graphSettings\":{\"type\":0}},\"customWidth\":\"60\",\"name\":\"query - 12\",\"styleSettings\":{\"maxWidth\":\"55\"}},{\"type\":12,\"content\":{\"version\":\"NotebookGroup/1.0\",\"groupType\":\"editable\",\"items\":[{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(DATABASE_NAME_s)\\n| summarize dcount(DATABASE_NAME_s)\",\"size\":3,\"title\":\"Total Databases\",\"timeContext\":{\"durationMs\":7776000000},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"50\",\"name\":\"query - 1\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(source_table_s)\\n| summarize dcount(source_table_s)\",\"size\":3,\"title\":\"Total Tables\",\"timeContext\":{\"durationMs\":7776000000},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"50\",\"name\":\"query - 2\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| summarize s=sum(EXECUTION_TIME_d)\\n| project s_time = strcat(s/1000, ' sec')\",\"size\":3,\"title\":\"Total Query Time\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"30\",\"name\":\"query - 0\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(QUERY_TYPE_s)\\n| summarize count()\",\"size\":3,\"title\":\"Total Queries Run\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"30\",\"name\":\"query - 3\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| summarize cs = sum(CREDITS_USED_CLOUD_SERVICES_d)\\n| project round(cs, 8)\",\"size\":3,\"title\":\"Credits Spent\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"40\",\"name\":\"query - 4\"}]},\"customWidth\":\"40\",\"name\":\"group - 0\"},{\"type\":12,\"content\":{\"version\":\"NotebookGroup/1.0\",\"groupType\":\"editable\",\"items\":[{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(source_table_s)\\n| summarize count() by source_table_s\",\"size\":3,\"title\":\"Table Events Summary\",\"color\":\"orange\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"tiles\",\"tileSettings\":{\"titleContent\":{\"columnMatch\":\"source_table_s\",\"formatter\":1},\"leftContent\":{\"columnMatch\":\"count_\",\"formatter\":12,\"formatOptions\":{\"palette\":\"auto\"},\"numberFormat\":{\"unit\":17,\"options\":{\"maximumSignificantDigits\":3,\"maximumFractionDigits\":2}}},\"showBorder\":false}},\"customWidth\":\"50\",\"name\":\"query - 0\",\"styleSettings\":{\"showBorder\":true}},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(DATABASE_NAME_s)\\n| summarize count() by DATABASE_NAME_s\",\"size\":3,\"title\":\"Database Events Summary\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"tiles\",\"tileSettings\":{\"titleContent\":{\"columnMatch\":\"DATABASE_NAME_s\",\"formatter\":1},\"leftContent\":{\"columnMatch\":\"count_\",\"formatter\":12,\"formatOptions\":{\"palette\":\"auto\"},\"numberFormat\":{\"unit\":17,\"options\":{\"style\":\"decimal\",\"maximumFractionDigits\":2,\"maximumSignificantDigits\":3}}},\"showBorder\":false}},\"customWidth\":\"50\",\"name\":\"query - 1\",\"styleSettings\":{\"showBorder\":true}}]},\"customWidth\":\"30\",\"name\":\"group - 11\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(SrcDvcIpAddr)\\n| summarize count() by SrcDvcIpAddr\",\"size\":3,\"title\":\"Source Addresses\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"piechart\"},\"customWidth\":\"30\",\"name\":\"query - 9\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where EXECUTION_TIME_d > 0\\n| top 10 by EXECUTION_TIME_d desc\\n| project Query=QUERY_TEXT_s, User=TargetUsername, ExecutionTime=EXECUTION_TIME_d\\n\",\"size\":0,\"title\":\"Query Execution Time\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"table\",\"gridSettings\":{\"formatters\":[{\"columnMatch\":\"ExecutionTime\",\"formatter\":8,\"formatOptions\":{\"palette\":\"coldHot\"}}]}},\"customWidth\":\"35\",\"name\":\"query - 11\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where CREDITS_USED_CLOUD_SERVICES_d > 0\\n| summarize by QUERY_TEXT_s, CREDITS_USED_CLOUD_SERVICES_d\\n| top 10 by CREDITS_USED_CLOUD_SERVICES_d desc\\n| project Query=QUERY_TEXT_s, CreditsSpent=CREDITS_USED_CLOUD_SERVICES_d\",\"size\":0,\"title\":\"Credits Spent by Queriws\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"gridSettings\":{\"formatters\":[{\"columnMatch\":\"CreditsSpent\",\"formatter\":8,\"formatOptions\":{\"palette\":\"coldHot\",\"compositeBarSettings\":{\"labelText\":\"\"}},\"numberFormat\":{\"unit\":0,\"options\":{\"style\":\"decimal\",\"maximumFractionDigits\":10}}}]}},\"customWidth\":\"35\",\"name\":\"query - 9\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\r\\n| where QUERY_TYPE_s == 'CREATE_USER'\\r\\n| extend n_usr = extract(@'USER\\\\s(\\\\S+)', 1, QUERY_TEXT_s)\\r\\n| project Username=n_usr\",\"size\":0,\"title\":\"New Users\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"table\",\"tileSettings\":{\"titleContent\":{\"columnMatch\":\"URL Category\",\"formatter\":1},\"leftContent\":{\"columnMatch\":\"count_\",\"formatter\":12,\"formatOptions\":{\"palette\":\"auto\"},\"numberFormat\":{\"unit\":17,\"options\":{\"style\":\"decimal\",\"maximumFractionDigits\":2,\"maximumSignificantDigits\":3}}},\"secondaryContent\":{\"columnMatch\":\"Trend\",\"formatter\":9,\"formatOptions\":{\"palette\":\"purple\"}},\"showBorder\":false},\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"20\",\"name\":\"query - 0\",\"styleSettings\":{\"maxWidth\":\"30\"}},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n\\n| where QUERY_TYPE_s =~ 'SELECT'\\n| summarize roles = makeset(ROLE_NAME_s) by TargetUsername\\n| join(Snowflake\\n | where EventType =~ 'LOGIN') on TargetUsername\\n| project EventTime=TimeGenerated, TargetUsername, SourceAddress=SrcDvcIpAddr, Status=strcat(iif(IS_SUCCESS_s =~ 'No', '❌ - Login Failure' , '✅ - Logged in'))\",\"size\":0,\"title\":\"Privileged Sessions\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"table\",\"tileSettings\":{\"titleContent\":{\"columnMatch\":\"User\",\"formatter\":1},\"leftContent\":{\"columnMatch\":\"TotalMailsReceived\",\"formatter\":12,\"formatOptions\":{\"palette\":\"auto\"},\"numberFormat\":{\"unit\":17,\"options\":{\"maximumSignificantDigits\":3,\"maximumFractionDigits\":2}}},\"secondaryContent\":{\"columnMatch\":\"Trend\",\"formatter\":10,\"formatOptions\":{\"palette\":\"magenta\"}},\"showBorder\":false}},\"customWidth\":\"45\",\"name\":\"query - 10\"}],\"fromTemplateId\":\"sentinel-SnowflakeWorkbook\",\"$schema\":\"https://github.com/Microsoft/Application-Insights-Workbooks/blob/master/schema/workbook.json\"}\r\n", + "serializedData": "{\"version\":\"Notebook/1.0\",\"items\":[{\"type\":1,\"content\":{\"json\":\"**NOTE**: This data connector depends on a parser based on Kusto Function **Snowflake** to work as expected. [Follow steps to get this Kusto Function](https://aka.ms/sentinel-SnowflakeDataConnector-parser)\"},\"name\":\"text - 8\"},{\"type\":9,\"content\":{\"version\":\"KqlParameterItem/1.0\",\"parameters\":[{\"id\":\"cd8447d9-b096-4673-92d8-2a1e8291a125\",\"version\":\"KqlParameterItem/1.0\",\"name\":\"TimeRange\",\"type\":4,\"description\":\"Sets the time name for analysis\",\"value\":{\"durationMs\":7776000000},\"typeSettings\":{\"selectableValues\":[{\"durationMs\":1800000},{\"durationMs\":3600000},{\"durationMs\":86400000},{\"durationMs\":604800000},{\"durationMs\":2592000000},{\"durationMs\":7776000000}]},\"timeContext\":{\"durationMs\":86400000}}],\"style\":\"pills\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\"},\"name\":\"parameters - 11\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\r\\n| make-series TotalEvents = count() default = 0 on TimeGenerated from {TimeRange:start} to {TimeRange:end} step {TimeRange:grain};\",\"size\":0,\"title\":\"Events Over Time\",\"color\":\"green\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"timechart\",\"graphSettings\":{\"type\":0}},\"customWidth\":\"60\",\"name\":\"query - 12\",\"styleSettings\":{\"maxWidth\":\"55\"}},{\"type\":12,\"content\":{\"version\":\"NotebookGroup/1.0\",\"groupType\":\"editable\",\"items\":[{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(DATABASE_NAME_s)\\n| summarize dcount(DATABASE_NAME_s)\",\"size\":3,\"title\":\"Total Databases\",\"timeContext\":{\"durationMs\":7776000000},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"50\",\"name\":\"query - 1\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(source_table_s)\\n| summarize dcount(source_table_s)\",\"size\":3,\"title\":\"Total Tables\",\"timeContext\":{\"durationMs\":7776000000},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"50\",\"name\":\"query - 2\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| summarize s=sum(EXECUTION_TIME_d)\\n| project s_time = strcat(s/1000, ' sec')\",\"size\":3,\"title\":\"Total Query Time\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"30\",\"name\":\"query - 0\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(QUERY_TYPE_s)\\n| summarize count()\",\"size\":3,\"title\":\"Total Queries Run\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"30\",\"name\":\"query - 3\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| summarize cs = sum(CREDITS_USED_CLOUD_SERVICES_d)\\n| project round(cs, 8)\",\"size\":3,\"title\":\"Credits Spent\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"card\",\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"40\",\"name\":\"query - 4\"}]},\"customWidth\":\"40\",\"name\":\"group - 0\"},{\"type\":12,\"content\":{\"version\":\"NotebookGroup/1.0\",\"groupType\":\"editable\",\"items\":[{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(source_table_s)\\n| summarize count() by source_table_s\",\"size\":3,\"title\":\"Table Events Summary\",\"color\":\"orange\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"tiles\",\"tileSettings\":{\"titleContent\":{\"columnMatch\":\"source_table_s\",\"formatter\":1},\"leftContent\":{\"columnMatch\":\"count_\",\"formatter\":12,\"formatOptions\":{\"palette\":\"auto\"},\"numberFormat\":{\"unit\":17,\"options\":{\"maximumSignificantDigits\":3,\"maximumFractionDigits\":2}}},\"showBorder\":false}},\"customWidth\":\"50\",\"name\":\"query - 0\",\"styleSettings\":{\"showBorder\":true}},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(DATABASE_NAME_s)\\n| summarize count() by DATABASE_NAME_s\",\"size\":3,\"title\":\"Database Events Summary\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"tiles\",\"tileSettings\":{\"titleContent\":{\"columnMatch\":\"DATABASE_NAME_s\",\"formatter\":1},\"leftContent\":{\"columnMatch\":\"count_\",\"formatter\":12,\"formatOptions\":{\"palette\":\"auto\"},\"numberFormat\":{\"unit\":17,\"options\":{\"style\":\"decimal\",\"maximumFractionDigits\":2,\"maximumSignificantDigits\":3}}},\"showBorder\":false}},\"customWidth\":\"50\",\"name\":\"query - 1\",\"styleSettings\":{\"showBorder\":true}}]},\"customWidth\":\"30\",\"name\":\"group - 11\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where isnotempty(SrcDvcIpAddr)\\n| summarize count() by SrcDvcIpAddr\",\"size\":3,\"title\":\"Source Addresses\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"piechart\"},\"customWidth\":\"30\",\"name\":\"query - 9\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where EXECUTION_TIME_d > 0\\n| top 10 by EXECUTION_TIME_d desc\\n| project Query=QUERY_TEXT_s, User=TargetUsername, ExecutionTime=EXECUTION_TIME_d\\n\",\"size\":0,\"title\":\"Query Execution Time\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"table\",\"gridSettings\":{\"formatters\":[{\"columnMatch\":\"ExecutionTime\",\"formatter\":8,\"formatOptions\":{\"palette\":\"coldHot\"}}]}},\"customWidth\":\"35\",\"name\":\"query - 11\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n| where CREDITS_USED_CLOUD_SERVICES_d > 0\\n| summarize by QUERY_TEXT_s, CREDITS_USED_CLOUD_SERVICES_d\\n| top 10 by CREDITS_USED_CLOUD_SERVICES_d desc\\n| project Query=QUERY_TEXT_s, CreditsSpent=CREDITS_USED_CLOUD_SERVICES_d\",\"size\":0,\"title\":\"Credits Spent by Queriws\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"gridSettings\":{\"formatters\":[{\"columnMatch\":\"CreditsSpent\",\"formatter\":8,\"formatOptions\":{\"palette\":\"coldHot\",\"compositeBarSettings\":{\"labelText\":\"\"}},\"numberFormat\":{\"unit\":0,\"options\":{\"style\":\"decimal\",\"maximumFractionDigits\":10}}}]}},\"customWidth\":\"35\",\"name\":\"query - 9\"},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\r\\n| where QUERY_TYPE_s == 'CREATE_USER'\\r\\n| extend n_usr = extract(@'USER\\\\s(\\\\S+)', 1, QUERY_TEXT_s)\\r\\n| project Username=n_usr\",\"size\":0,\"title\":\"New Users\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"table\",\"tileSettings\":{\"titleContent\":{\"columnMatch\":\"URL Category\",\"formatter\":1},\"leftContent\":{\"columnMatch\":\"count_\",\"formatter\":12,\"formatOptions\":{\"palette\":\"auto\"},\"numberFormat\":{\"unit\":17,\"options\":{\"style\":\"decimal\",\"maximumFractionDigits\":2,\"maximumSignificantDigits\":3}}},\"secondaryContent\":{\"columnMatch\":\"Trend\",\"formatter\":9,\"formatOptions\":{\"palette\":\"purple\"}},\"showBorder\":false},\"textSettings\":{\"style\":\"bignumber\"}},\"customWidth\":\"20\",\"name\":\"query - 0\",\"styleSettings\":{\"maxWidth\":\"30\"}},{\"type\":3,\"content\":{\"version\":\"KqlItem/1.0\",\"query\":\"Snowflake\\n\\n| where QUERY_TYPE_s =~ 'SELECT'\\n| summarize roles = makeset(ROLE_NAME_s) by TargetUsername\\n| join(Snowflake\\n | where EventType =~ 'LOGIN') on TargetUsername\\n| project EventTime=TimeGenerated, TargetUsername, SourceAddress=SrcDvcIpAddr, Status=strcat(iif(IS_SUCCESS_s =~ 'No', '❌ - Login Failure' , '✅ - Logged in'))\",\"size\":0,\"title\":\"Privileged Sessions\",\"timeContext\":{\"durationMs\":0},\"timeContextFromParameter\":\"TimeRange\",\"queryType\":0,\"resourceType\":\"microsoft.operationalinsights/workspaces\",\"visualization\":\"table\",\"tileSettings\":{\"titleContent\":{\"columnMatch\":\"User\",\"formatter\":1},\"leftContent\":{\"columnMatch\":\"TotalMailsReceived\",\"formatter\":12,\"formatOptions\":{\"palette\":\"auto\"},\"numberFormat\":{\"unit\":17,\"options\":{\"maximumSignificantDigits\":3,\"maximumFractionDigits\":2}}},\"secondaryContent\":{\"columnMatch\":\"Trend\",\"formatter\":10,\"formatOptions\":{\"palette\":\"magenta\"}},\"showBorder\":false}},\"customWidth\":\"45\",\"name\":\"query - 10\"}],\"fromTemplateId\":\"sentinel-SnowflakeWorkbook\",\"$schema\":\"https://github.com/Microsoft/Application-Insights-Workbooks/blob/master/schema/workbook.json\"}\r\n", "version": "1.0", "sourceId": "[variables('workspaceResourceId')]", "category": "sentinel" diff --git a/Solutions/Snowflake/Workbooks/Snowflake.json b/Solutions/Snowflake/Workbooks/Snowflake.json index 6f93200232..7fd2b7c8c7 100644 --- a/Solutions/Snowflake/Workbooks/Snowflake.json +++ b/Solutions/Snowflake/Workbooks/Snowflake.json @@ -4,7 +4,7 @@ { "type": 1, "content": { - "json": "**NOTE**: This data connector depends on a parser based on Kusto Function **Snowflake** to work as expected. [Follow steps to get this Kusto Function](https://aka.ms/sentinel-snowflake-parser)" + "json": "**NOTE**: This data connector depends on a parser based on Kusto Function **Snowflake** to work as expected. [Follow steps to get this Kusto Function](https://aka.ms/sentinel-SnowflakeDataConnector-parser)" }, "name": "text - 8" },