{ "algorithms": { "GradientBoostingRegressor": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false }, "LinearRegression": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false }, "LogisticRegression": { "accuracy": 0, "f1_score": 0, "modelId": "", "precision": 0, "recall": 0, "recommended": false }, "RandomForestRegressor": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false } }, "description": "Contains Power BI Activities", "enabled": true, "entity_rules": [], "key": "da-itsi-cp-m365-m365-powerbi-performance", "kpis": [ { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": null, "severity_color": "#B50101", "severity_color_light": "#E5A6A6", "severity_label": "critical", "severity_label_localized": null, "severity_value": 6.0, "threshold_value": 0.0 }, { "dynamic_param": null, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": null, "severity_value": 5.0, "threshold_value": 20.0 }, { "dynamic_param": null, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": null, "severity_value": 4.0, "threshold_value": 40.0 }, { "dynamic_param": null, "severity_color": "#FFE98C", "severity_color_light": "#FFF4C5", "severity_label": "low", "severity_label_localized": null, "severity_value": 3.0, "threshold_value": 60.0 }, { "dynamic_param": null, "severity_color": "#99D18B", "severity_color_light": "#DCEFD7", "severity_label": "normal", "severity_label_localized": null, "severity_value": 2.0, "threshold_value": 80.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "1", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": 0.999, "anomaly_detection_training_window": "-7d", "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-m365-m365-powerbi-performance)`", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "", "enabled": false, "entity_filter_field": "", "entity_split_field": "", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": null, "severity_color": "#B50101", "severity_color_light": "#E5A6A6", "severity_label": "critical", "severity_label_localized": null, "severity_value": 6.0, "threshold_value": 0.0 }, { "dynamic_param": null, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": null, "severity_value": 5.0, "threshold_value": 20.0 }, { "dynamic_param": null, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": null, "severity_value": 4.0, "threshold_value": 40.0 }, { "dynamic_param": null, "severity_color": "#FFE98C", "severity_color_light": "#FFF4C5", "severity_label": "low", "severity_label_localized": null, "severity_value": 3.0, "threshold_value": 60.0 }, { "dynamic_param": null, "severity_color": "#99D18B", "severity_color_light": "#DCEFD7", "severity_label": "normal", "severity_label_localized": null, "severity_value": 2.0, "threshold_value": 80.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": false, "key": "SHKPI-da-itsi-cp-m365-m365-powerbi-performance", "kpi_base_search": "", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-m365-m365-powerbi-performance)` | stats latest(health_score) AS aggregate", "search_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-m365-m365-powerbi-performance)` | stats latest(health_score) AS aggregate", "search_alert": "", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": null, "search_occurrences": 1.0, "search_time_compare": "`get_full_itsi_summary_service_health_events(da-itsi-cp-m365-m365-powerbi-performance)` [| stats count | addinfo | eval search= \"earliest=\" + tostring(info_min_time-(info_max_time-info_min_time))+ \" latest=\" + tostring(info_max_time) |fields search] | addinfo | eval bucket=if(_time0, \"increase\", if(window_delta < 0, \"decrease\", \"none\"))", "search_time_series": "`get_full_itsi_summary_service_health_events(da-itsi-cp-m365-m365-powerbi-performance)` | timechart avg(health_score) AS aggregate", "search_time_series_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-m365-m365-powerbi-performance)` | timechart avg(health_score) AS aggregate", "search_time_series_entities": "", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "aggregate", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "ServiceHealthScore", "trending_ad": { "sensitivity": 8 }, "type": "service_health", "tz_offset": null, "unit": "", "urgency": 11.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "All user activities in Power Bi.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "Activity", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-3075363df6f053b9b28c16e8", "kpi_base_search": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity | `aggregate_raw_into_entity(sum, count, \"Activity\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(Activity, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-3075363df6f053b9b28c16e8, true, true, true)` | eval kpi=\"All Activities\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity | `aggregate_raw_into_single_value(sum, sum, count, \"Activity\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-3075363df6f053b9b28c16e8)`", "search_alert": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity | `aggregate_raw_into_entity(sum, count, \"Activity\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(Activity, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-3075363df6f053b9b28c16e8, true, true, true)` | eval kpi=\"All Activities\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity | `aggregate_raw_into_single_value(sum, sum, count, \"Activity\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-3075363df6f053b9b28c16e8)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity | `aggregate_raw_and_compare(sum, sum, count, \"Activity\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-3075363df6f053b9b28c16e8)`", "search_time_series": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity | `aggregate_raw_into_entity_time_series(sum, count, \"Activity\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-3075363df6f053b9b28c16e8)`", "search_time_series_aggregate": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity | `aggregate_raw_into_entity_time_series(sum, count, \"Activity\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-3075363df6f053b9b28c16e8)`", "search_time_series_entities": "`m365_cp_default_index` Workload=PowerBi\n| stats count by Activity | `aggregate_raw_into_limited_entity_time_series(sum, count, \"Activity\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "All Activities", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User created power bi dashboard", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-b4bc641267e6b940509cad42", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b4bc641267e6b940509cad42, true, true, true)` | eval kpi=\"Created Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b4bc641267e6b940509cad42)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b4bc641267e6b940509cad42, true, true, true)` | eval kpi=\"Created Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b4bc641267e6b940509cad42)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b4bc641267e6b940509cad42)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b4bc641267e6b940509cad42)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b4bc641267e6b940509cad42)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Created Power BI dashboard", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User created power bi dataflow", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-9d5735dfbdbef3cd01e2ef28", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9d5735dfbdbef3cd01e2ef28, true, true, true)` | eval kpi=\"Created Power BI dataflow\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9d5735dfbdbef3cd01e2ef28)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9d5735dfbdbef3cd01e2ef28, true, true, true)` | eval kpi=\"Created Power BI dataflow\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9d5735dfbdbef3cd01e2ef28)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9d5735dfbdbef3cd01e2ef28)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9d5735dfbdbef3cd01e2ef28)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9d5735dfbdbef3cd01e2ef28)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Created Power BI dataflow", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User created power bi dataset", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-d5ff8fa96dd68f5567ca845f", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-d5ff8fa96dd68f5567ca845f, true, true, true)` | eval kpi=\"Created Power BI dataset\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-d5ff8fa96dd68f5567ca845f)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-d5ff8fa96dd68f5567ca845f, true, true, true)` | eval kpi=\"Created Power BI dataset\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-d5ff8fa96dd68f5567ca845f)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-d5ff8fa96dd68f5567ca845f)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-d5ff8fa96dd68f5567ca845f)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-d5ff8fa96dd68f5567ca845f)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Created Power BI dataset", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User created power bi report", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-dcae365d9c698eb469564e43", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-dcae365d9c698eb469564e43, true, true, true)` | eval kpi=\"Created Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-dcae365d9c698eb469564e43)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-dcae365d9c698eb469564e43, true, true, true)` | eval kpi=\"Created Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-dcae365d9c698eb469564e43)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-dcae365d9c698eb469564e43)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-dcae365d9c698eb469564e43)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-dcae365d9c698eb469564e43)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"CreateReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Created Power BI report", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User deleted power bi comment", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-a4393fa6c972daa6748387fc", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a4393fa6c972daa6748387fc, true, true, true)` | eval kpi=\"Deleted Power BI comment\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a4393fa6c972daa6748387fc)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a4393fa6c972daa6748387fc, true, true, true)` | eval kpi=\"Deleted Power BI comment\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a4393fa6c972daa6748387fc)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a4393fa6c972daa6748387fc)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a4393fa6c972daa6748387fc)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a4393fa6c972daa6748387fc)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Deleted Power BI comment", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "deleted power bi dashboard", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-f7d6212245b8313fa6f051f6", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f7d6212245b8313fa6f051f6, true, true, true)` | eval kpi=\"Deleted Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f7d6212245b8313fa6f051f6)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f7d6212245b8313fa6f051f6, true, true, true)` | eval kpi=\"Deleted Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f7d6212245b8313fa6f051f6)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f7d6212245b8313fa6f051f6)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f7d6212245b8313fa6f051f6)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f7d6212245b8313fa6f051f6)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Deleted Power BI dashboard", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User deleted power bi dataset", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-1b4e2806e118d5ef01dffde6", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-1b4e2806e118d5ef01dffde6, true, true, true)` | eval kpi=\"Deleted Power BI dataset\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-1b4e2806e118d5ef01dffde6)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-1b4e2806e118d5ef01dffde6, true, true, true)` | eval kpi=\"Deleted Power BI dataset\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-1b4e2806e118d5ef01dffde6)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-1b4e2806e118d5ef01dffde6)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-1b4e2806e118d5ef01dffde6)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-1b4e2806e118d5ef01dffde6)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Deleted Power BI dataset", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User deleted power bi report", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-e78b0336175661a03394dda4", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-e78b0336175661a03394dda4, true, true, true)` | eval kpi=\"Deleted Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-e78b0336175661a03394dda4)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-e78b0336175661a03394dda4, true, true, true)` | eval kpi=\"Deleted Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-e78b0336175661a03394dda4)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-e78b0336175661a03394dda4)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-e78b0336175661a03394dda4)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-e78b0336175661a03394dda4)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DeleteReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Deleted Power BI report", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User downloaded power bi report", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-8a2a27479e0d2d5784de4fd9", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-8a2a27479e0d2d5784de4fd9, true, true, true)` | eval kpi=\"Downloaded Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-8a2a27479e0d2d5784de4fd9)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-8a2a27479e0d2d5784de4fd9, true, true, true)` | eval kpi=\"Downloaded Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-8a2a27479e0d2d5784de4fd9)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-8a2a27479e0d2d5784de4fd9)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-8a2a27479e0d2d5784de4fd9)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-8a2a27479e0d2d5784de4fd9)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"DownloadReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Downloaded Power BI report", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User edited power bi dataset", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-92a1ab0c012106efcc75bf88", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-92a1ab0c012106efcc75bf88, true, true, true)` | eval kpi=\"Edited Power BI dataset\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-92a1ab0c012106efcc75bf88)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-92a1ab0c012106efcc75bf88, true, true, true)` | eval kpi=\"Edited Power BI dataset\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-92a1ab0c012106efcc75bf88)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-92a1ab0c012106efcc75bf88)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-92a1ab0c012106efcc75bf88)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-92a1ab0c012106efcc75bf88)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Edited Power BI dataset", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User edited power bi report", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-43a5c70519682a4b35c1197f", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-43a5c70519682a4b35c1197f, true, true, true)` | eval kpi=\"Edited Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-43a5c70519682a4b35c1197f)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-43a5c70519682a4b35c1197f, true, true, true)` | eval kpi=\"Edited Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-43a5c70519682a4b35c1197f)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-43a5c70519682a4b35c1197f)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-43a5c70519682a4b35c1197f)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-43a5c70519682a4b35c1197f)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"EditReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Edited Power BI report", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "exported power bi dataflow", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-6cf9d32964a0a15fcb62c976", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6cf9d32964a0a15fcb62c976, true, true, true)` | eval kpi=\"Exported Power BI dataflow\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6cf9d32964a0a15fcb62c976)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6cf9d32964a0a15fcb62c976, true, true, true)` | eval kpi=\"Exported Power BI dataflow\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6cf9d32964a0a15fcb62c976)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6cf9d32964a0a15fcb62c976)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6cf9d32964a0a15fcb62c976)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6cf9d32964a0a15fcb62c976)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Exported Power BI dataflow", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User exported power bi report visual data", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-ad4fa5da9fa9dc6234ffbfae", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-ad4fa5da9fa9dc6234ffbfae, true, true, true)` | eval kpi=\"Exported Power BI report visual data\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-ad4fa5da9fa9dc6234ffbfae)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-ad4fa5da9fa9dc6234ffbfae, true, true, true)` | eval kpi=\"Exported Power BI report visual data\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-ad4fa5da9fa9dc6234ffbfae)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-ad4fa5da9fa9dc6234ffbfae)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-ad4fa5da9fa9dc6234ffbfae)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-ad4fa5da9fa9dc6234ffbfae)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Exported Power BI report visual data", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User exported power bi tile data", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-c7641b8dd991d9d8391778d4", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c7641b8dd991d9d8391778d4, true, true, true)` | eval kpi=\"Exported Power BI tile data\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c7641b8dd991d9d8391778d4)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c7641b8dd991d9d8391778d4, true, true, true)` | eval kpi=\"Exported Power BI tile data\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c7641b8dd991d9d8391778d4)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c7641b8dd991d9d8391778d4)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c7641b8dd991d9d8391778d4)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c7641b8dd991d9d8391778d4)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ExportTile\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Exported Power BI tile data", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User imported file to power bi", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-6a3fe1014b2f55a78bdba277", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6a3fe1014b2f55a78bdba277, true, true, true)` | eval kpi=\"Imported file to Power BI\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6a3fe1014b2f55a78bdba277)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6a3fe1014b2f55a78bdba277, true, true, true)` | eval kpi=\"Imported file to Power BI\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6a3fe1014b2f55a78bdba277)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6a3fe1014b2f55a78bdba277)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6a3fe1014b2f55a78bdba277)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-6a3fe1014b2f55a78bdba277)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"Import\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Imported file to Power BI", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "installed power bi app", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-c736fe8105e84a698b36a660", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c736fe8105e84a698b36a660, true, true, true)` | eval kpi=\"Installed Power BI app\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c736fe8105e84a698b36a660)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c736fe8105e84a698b36a660, true, true, true)` | eval kpi=\"Installed Power BI app\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c736fe8105e84a698b36a660)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c736fe8105e84a698b36a660)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c736fe8105e84a698b36a660)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-c736fe8105e84a698b36a660)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"InstallApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Installed Power BI app", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "aggregate", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "User posted power bi comment", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-25fbe934db6fc4d6d55367b1", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-25fbe934db6fc4d6d55367b1, true, true, true)` | eval kpi=\"Posted Power BI comment\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-25fbe934db6fc4d6d55367b1)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, count, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-25fbe934db6fc4d6d55367b1, true, true, true)` | eval kpi=\"Posted Power BI comment\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-25fbe934db6fc4d6d55367b1)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, count, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-25fbe934db6fc4d6d55367b1)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-25fbe934db6fc4d6d55367b1)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, count, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-25fbe934db6fc4d6d55367b1)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PostComment\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, count, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": "", "threshold_field": "count", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Posted Power BI comment", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "printed power bi dashboard", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-7cef501199b91b2bd671ae03", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7cef501199b91b2bd671ae03, true, true, true)` | eval kpi=\"Printed Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7cef501199b91b2bd671ae03)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7cef501199b91b2bd671ae03, true, true, true)` | eval kpi=\"Printed Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7cef501199b91b2bd671ae03)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7cef501199b91b2bd671ae03)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7cef501199b91b2bd671ae03)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7cef501199b91b2bd671ae03)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Printed Power BI dashboard", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "printed power bi report page", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-75600658a274952dd1443d08", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-75600658a274952dd1443d08, true, true, true)` | eval kpi=\"Printed Power BI report page\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-75600658a274952dd1443d08)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-75600658a274952dd1443d08, true, true, true)` | eval kpi=\"Printed Power BI report page\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-75600658a274952dd1443d08)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-75600658a274952dd1443d08)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-75600658a274952dd1443d08)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-75600658a274952dd1443d08)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PrintReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Printed Power BI report page", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "published power bi report to web", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-83f924408d1646caeff5910d", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-83f924408d1646caeff5910d, true, true, true)` | eval kpi=\"Published Power BI report to web\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-83f924408d1646caeff5910d)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-83f924408d1646caeff5910d, true, true, true)` | eval kpi=\"Published Power BI report to web\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-83f924408d1646caeff5910d)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-83f924408d1646caeff5910d)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-83f924408d1646caeff5910d)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-83f924408d1646caeff5910d)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"PublishToWebReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Published Power BI report to web", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "requested power bi dataset refresh", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-a1c64216579d2ff425f89b95", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a1c64216579d2ff425f89b95, true, true, true)` | eval kpi=\"Requested Power BI dataset refresh\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a1c64216579d2ff425f89b95)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a1c64216579d2ff425f89b95, true, true, true)` | eval kpi=\"Requested Power BI dataset refresh\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a1c64216579d2ff425f89b95)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a1c64216579d2ff425f89b95)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a1c64216579d2ff425f89b95)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-a1c64216579d2ff425f89b95)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"RefreshDataset\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Requested Power BI dataset refresh", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "set dataflow storage location for a workspace", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-9ce067d3a78d99182b35e3b2", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9ce067d3a78d99182b35e3b2, true, true, true)` | eval kpi=\"Set dataflow storage location for a workspace\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9ce067d3a78d99182b35e3b2)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9ce067d3a78d99182b35e3b2, true, true, true)` | eval kpi=\"Set dataflow storage location for a workspace\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9ce067d3a78d99182b35e3b2)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9ce067d3a78d99182b35e3b2)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9ce067d3a78d99182b35e3b2)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-9ce067d3a78d99182b35e3b2)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetDataflowStorageLocationForWorkspace\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Set dataflow storage location for a workspace", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "set scheduled refresh on power bi dataflow", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-5c34f4e6d8b6c7f93c543ca9", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-5c34f4e6d8b6c7f93c543ca9, true, true, true)` | eval kpi=\"Set scheduled refresh on Power BI dataflow\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-5c34f4e6d8b6c7f93c543ca9)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-5c34f4e6d8b6c7f93c543ca9, true, true, true)` | eval kpi=\"Set scheduled refresh on Power BI dataflow\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-5c34f4e6d8b6c7f93c543ca9)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-5c34f4e6d8b6c7f93c543ca9)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-5c34f4e6d8b6c7f93c543ca9)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-5c34f4e6d8b6c7f93c543ca9)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefreshOnDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Set scheduled refresh on Power BI dataflow", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "set scheduled refresh on power bi dataset", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-f904fa365be87297a0b1ee3c", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f904fa365be87297a0b1ee3c, true, true, true)` | eval kpi=\"Set scheduled refresh on Power BI dataset\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f904fa365be87297a0b1ee3c)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f904fa365be87297a0b1ee3c, true, true, true)` | eval kpi=\"Set scheduled refresh on Power BI dataset\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f904fa365be87297a0b1ee3c)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f904fa365be87297a0b1ee3c)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f904fa365be87297a0b1ee3c)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f904fa365be87297a0b1ee3c)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"SetScheduledRefresh\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Set scheduled refresh on Power BI dataset", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "shared power bi dashboard", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-7fb09319620f58db3735c0e0", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7fb09319620f58db3735c0e0, true, true, true)` | eval kpi=\"Shared Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7fb09319620f58db3735c0e0)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7fb09319620f58db3735c0e0, true, true, true)` | eval kpi=\"Shared Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7fb09319620f58db3735c0e0)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7fb09319620f58db3735c0e0)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7fb09319620f58db3735c0e0)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7fb09319620f58db3735c0e0)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Shared Power BI dashboard", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "shared power bi report", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-b51bfbd757ffbe738ea291c7", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b51bfbd757ffbe738ea291c7, true, true, true)` | eval kpi=\"Shared Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b51bfbd757ffbe738ea291c7)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b51bfbd757ffbe738ea291c7, true, true, true)` | eval kpi=\"Shared Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b51bfbd757ffbe738ea291c7)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b51bfbd757ffbe738ea291c7)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b51bfbd757ffbe738ea291c7)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-b51bfbd757ffbe738ea291c7)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ShareReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Shared Power BI report", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "updated power bi app", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-cdadac1160778ecdadc13fbc", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-cdadac1160778ecdadc13fbc, true, true, true)` | eval kpi=\"Updated Power BI app\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-cdadac1160778ecdadc13fbc)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-cdadac1160778ecdadc13fbc, true, true, true)` | eval kpi=\"Updated Power BI app\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-cdadac1160778ecdadc13fbc)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-cdadac1160778ecdadc13fbc)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-cdadac1160778ecdadc13fbc)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-cdadac1160778ecdadc13fbc)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"UpdateApp\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Updated Power BI app", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "viewed power bi dashboard", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-f67e46d7567579e8124d3b9c", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f67e46d7567579e8124d3b9c, true, true, true)` | eval kpi=\"Viewed Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f67e46d7567579e8124d3b9c)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f67e46d7567579e8124d3b9c, true, true, true)` | eval kpi=\"Viewed Power BI dashboard\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f67e46d7567579e8124d3b9c)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f67e46d7567579e8124d3b9c)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f67e46d7567579e8124d3b9c)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-f67e46d7567579e8124d3b9c)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDashboard\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Viewed Power BI dashboard", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "viewed power bi dataflow", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-2b38e8101e1605df5d9fa245", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-2b38e8101e1605df5d9fa245, true, true, true)` | eval kpi=\"Viewed Power BI dataflow\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-2b38e8101e1605df5d9fa245)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-2b38e8101e1605df5d9fa245, true, true, true)` | eval kpi=\"Viewed Power BI dataflow\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-2b38e8101e1605df5d9fa245)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-2b38e8101e1605df5d9fa245)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-2b38e8101e1605df5d9fa245)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-2b38e8101e1605df5d9fa245)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewDataflow\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Viewed Power BI dataflow", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": null, "aggregate_statop": "sum", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": null, "alert_lag": "30", "alert_on": "both", "alert_period": "15", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "viewed power bi report", "enabled": true, "entity_filter_field": "host", "entity_split_field": "WorkSpaceName", "entity_statop": "sum", "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "fill_gaps": "custom_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-m365-7a7ad8daf3134fc0339d4383", "kpi_base_search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": null, "search": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7a7ad8daf3134fc0339d4383, true, true, true)` | eval kpi=\"Viewed Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7a7ad8daf3134fc0339d4383)`", "search_alert": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity(sum, Operation, \"WorkSpaceName\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(WorkSpaceName, sec_grp)` | eval serviceid = \"da-itsi-cp-m365-m365-powerbi-performance\" | `aggregate_entity_into_service(sum)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7a7ad8daf3134fc0339d4383, true, true, true)` | eval kpi=\"Viewed Power BI report\", urgency=\"0\", alert_period=\"15\", serviceid=\"da-itsi-cp-m365-m365-powerbi-performance\" | `assess_urgency` | `gettime`", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_single_value(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7a7ad8daf3134fc0339d4383)`", "search_occurrences": 1.0, "search_time_compare": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_and_compare(sum, sum, Operation, \"WorkSpaceName\", 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7a7ad8daf3134fc0339d4383)`", "search_time_series": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7a7ad8daf3134fc0339d4383)`", "search_time_series_aggregate": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)` | `aggregate_entity_into_service_time_series(sum, 15)` | `assess_severity(da-itsi-cp-m365-m365-powerbi-performance, da-itsi-cp-m365-7a7ad8daf3134fc0339d4383)`", "search_time_series_entities": "`m365_cp_default_index` sourcetype=\"o365:management:activity\" Workload=PowerBi Operation=\"ViewReport\" WorkSpaceName=* | stats count by Operation, WorkSpaceName | `aggregate_raw_into_limited_entity_time_series(sum, Operation, \"WorkSpaceName\", 15)`", "search_type": "adhoc", "service_title": "M365_PowerBI_Performance", "threshold_eval": null, "threshold_field": "Operation", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Viewed Power BI report", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 0.0, "use_time_policies": false } ], "service_tags": { "tags": [], "template_tags": [] }, "service_template_id": "", "services_depending_on_me": [ { "kpis_depending_on": [ "SHKPI-da-itsi-cp-m365-m365-powerbi-performance" ], "service_id": "da-itsi-cp-m365-m365-powerbi" } ], "services_depends_on": [], "team_id": "default_itsi_security_group", "title": "M365_PowerBI_Performance", "version": "0.0.33" }