# Guard workbook queries when an optional Log Analytics table is absent

> Design workbook visibility around the tables available in each target workspace.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:34:17+00:00
- Modified: 2026-09-17T16:35:04+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 2 minutes

## What you need to know

Design workbook visibility around the tables available in each target workspace.

## Potentially affected

Use this review for a workbook distributed across workspaces with intentionally different data sources. Identify each optional table and the panels that depend on it. Do not treat an unexpectedly missing required table as an ordinary optional-data case. Review dependency graphs and merge references separately before relying on a conditional display guard.

## DSE recommendation

DSE recommends documenting which panels are optional and displaying an understandable explanation when their data is unavailable.

## Article

## Source facts

Microsoft describes using a workbook parameter query to check whether a table exists and hide dependent content when it does not. In that conditional-content pattern, the hidden dependent items are not run. Its example also uses a fuzzy union so a query can continue when some referenced tables are unavailable. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-create-workbook).

## Applicability

Use this review for a workbook distributed across workspaces with intentionally different data sources. Identify each optional table and the panels that depend on it. Do not treat an unexpectedly missing required table as an ordinary optional-data case. Review dependency graphs and merge references separately before relying on a conditional display guard.

## DSE recommendation

DSE recommends documenting which panels are optional and displaying an understandable explanation when their data is unavailable. Review the source’s existence-check pattern and place dependent queries behind the corresponding condition. Keep the required-data panels separate so collection failures remain visible. Test a copy of the workbook before replacing the shared version.

## Verification

Open the workbook against approved test workspaces with and without the optional table. Confirm the intended panels appear and execute only in the relevant case, while required-data failures remain apparent. Then restore the table or select a workspace containing it and verify that the dependent view becomes usable without editing its query. Preserve the workbook version and both test results.

## Official references

[Microsoft Learn: Create or edit an Azure Workbook](https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-create-workbook).

## Primary reference

- Name: Create or edit an Azure Workbook - Azure Monitor | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-create-workbook
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Guard workbook queries when an optional Log Analytics table is absent,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-043-guard-workbook-queries-when-an-optional-log-analytics-table-is-absent/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.