{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/", "slug": "dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent", "url": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/" }, "title": "Guard workbook queries when an optional Log Analytics table is absent", "summary": "Design workbook visibility around the tables available in each target workspace.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "cyber-defense", "label": "Cyber defense", "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-17T16:34:17+00:00", "modified_at": "2026-09-17T16:35:04+00:00", "reviewed_on": "2026-09-17", "reading_minutes": 2, "word_count": 231, "potentially_affected": "Use this review for a workbook distributed across workspaces with intentionally different data sources. Identify each optional table and the panels that depend on it. Do not treat an unexpectedly missing required table as an ordinary optional-data case. Review dependency graphs and merge references separately before relying on a conditional display guard.", "dse_recommendation": "DSE recommends documenting which panels are optional and displaying an understandable explanation when their data is unavailable.", "primary_source": { "name": "Create or edit an Azure Workbook - Azure Monitor | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-create-workbook", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft describes using a workbook parameter query to check whether a table exists and hide dependent content when it does not. In that conditional-content pattern, the hidden dependent items are not run. Its example also uses a fuzzy union so a query can continue when some referenced tables are unavailable. Microsoft Learn.

\n

Applicability

\n

Use this review for a workbook distributed across workspaces with intentionally different data sources. Identify each optional table and the panels that depend on it. Do not treat an unexpectedly missing required table as an ordinary optional-data case. Review dependency graphs and merge references separately before relying on a conditional display guard.

\n

DSE recommendation

\n

DSE recommends documenting which panels are optional and displaying an understandable explanation when their data is unavailable. Review the source’s existence-check pattern and place dependent queries behind the corresponding condition. Keep the required-data panels separate so collection failures remain visible. Test a copy of the workbook before replacing the shared version.

\n

Verification

\n

Open the workbook against approved test workspaces with and without the optional table. Confirm the intended panels appear and execute only in the relevant case, while required-data failures remain apparent. Then restore the table or select a workspace containing it and verify that the dependent view becomes usable without editing its query. Preserve the workbook version and both test results.

\n

Official references

\n

Microsoft Learn: Create or edit an Azure Workbook.

", "content_text": "Source facts\nMicrosoft describes using a workbook parameter query to check whether a table exists and hide dependent content when it does not. In that conditional-content pattern, the hidden dependent items are not run. Its example also uses a fuzzy union so a query can continue when some referenced tables are unavailable. Microsoft Learn.\nApplicability\nUse this review for a workbook distributed across workspaces with intentionally different data sources. Identify each optional table and the panels that depend on it. Do not treat an unexpectedly missing required table as an ordinary optional-data case. Review dependency graphs and merge references separately before relying on a conditional display guard.\nDSE recommendation\nDSE recommends documenting which panels are optional and displaying an understandable explanation when their data is unavailable. Review the source’s existence-check pattern and place dependent queries behind the corresponding condition. Keep the required-data panels separate so collection failures remain visible. Test a copy of the workbook before replacing the shared version.\nVerification\nOpen the workbook against approved test workspaces with and without the optional table. Confirm the intended panels appear and execute only in the relevant case, while required-data failures remain apparent. Then restore the table or select a workspace containing it and verify that the dependent view becomes usable without editing its query. Preserve the workbook version and both test results.\nOfficial references\nMicrosoft Learn: Create or edit an Azure Workbook.", "content_markdown": "## Source facts\n\nMicrosoft describes using a workbook parameter query to check whether a table exists and hide dependent content when it does not. In that conditional-content pattern, the hidden dependent items are not run. Its example also uses a fuzzy union so a query can continue when some referenced tables are unavailable. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-create-workbook).\n\n## Applicability\n\nUse this review for a workbook distributed across workspaces with intentionally different data sources. Identify each optional table and the panels that depend on it. Do not treat an unexpectedly missing required table as an ordinary optional-data case. Review dependency graphs and merge references separately before relying on a conditional display guard.\n\n## DSE recommendation\n\nDSE recommends documenting which panels are optional and displaying an understandable explanation when their data is unavailable. Review the source’s existence-check pattern and place dependent queries behind the corresponding condition. Keep the required-data panels separate so collection failures remain visible. Test a copy of the workbook before replacing the shared version.\n\n## Verification\n\nOpen the workbook against approved test workspaces with and without the optional table. Confirm the intended panels appear and execute only in the relevant case, while required-data failures remain apparent. Then restore the table or select a workspace containing it and verify that the dependent view becomes usable without editing its query. Preserve the workbook version and both test results.\n\n## Official references\n\n[Microsoft Learn: Create or edit an Azure Workbook](https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-create-workbook)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/", "url": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-17" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Guard workbook queries when an optional Log Analytics table is absent", "item": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/", "url": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/", "headline": "Guard workbook queries when an optional Log Analytics table is absent", "description": "Design workbook visibility around the tables available in each target workspace.", "abstract": "Design workbook visibility around the tables available in each target workspace.", "articleBody": "Source facts\nMicrosoft describes using a workbook parameter query to check whether a table exists and hide dependent content when it does not. In that conditional-content pattern, the hidden dependent items are not run. Its example also uses a fuzzy union so a query can continue when some referenced tables are unavailable. Microsoft Learn.\nApplicability\nUse this review for a workbook distributed across workspaces with intentionally different data sources. Identify each optional table and the panels that depend on it. Do not treat an unexpectedly missing required table as an ordinary optional-data case. Review dependency graphs and merge references separately before relying on a conditional display guard.\nDSE recommendation\nDSE recommends documenting which panels are optional and displaying an understandable explanation when their data is unavailable. Review the source’s existence-check pattern and place dependent queries behind the corresponding condition. Keep the required-data panels separate so collection failures remain visible. Test a copy of the workbook before replacing the shared version.\nVerification\nOpen the workbook against approved test workspaces with and without the optional table. Confirm the intended panels appear and execute only in the relevant case, while required-data failures remain apparent. Then restore the table or select a workspace containing it and verify that the dependent view becomes usable without editing its query. Preserve the workbook version and both test results.\nOfficial references\nMicrosoft Learn: Create or edit an Azure Workbook.", "datePublished": "2026-09-17T16:34:17+00:00", "dateModified": "2026-09-17T16:35:04+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Guard workbook queries when an optional Log Analytics table is absent" }, "articleSection": [ "Cybersecurity", "IT" ], "keywords": [ "Cybersecurity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 231, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Create or edit an Azure Workbook - Azure Monitor | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-create-workbook" } } ] } }