Koos Goossens TheCloudScout

Parameter	isRequired?	Description
secretAddDays	false	The number of days the new application secret will be valid. Default is for 31 days.
tenantId	true	The Tenant ID of the Azure Active Directory in which the application resides.
applicationId	true	The app id of the application on which the secret needs to be rotated.
logstashConfigLocation	false	Path to logstash pipeline configuration file i.e. '/etc/logstash/conf.d/syslog-to-dcr-based-sentinel.conf'.
logstashKeystoreKey	false	Name of the key in the keystore container the app secret referenced inside the Logstash configuration file.
printOutput	false	Add -printOutput to for easier troubleshooting external Logstash-specific command like update keystore key and restarting service.

	Clear-Host

	$ShieldColor1 = 'DarkBlue'
	$ShieldColor2 = 'DarkCyan'
	$ShieldColor3 = 'Cyan'
	$TextColor = "Magenta"

	Write-Host ''
	Write-Host ''
	Write-Host ' ██ ' -ForegroundColor $ShieldColor1

	<#
	.DESCRIPTION
	This script will generate ADX commands based on sample files to determine their schema.
	These sample files should be in a proper JSON format and contain a single object.

	.PARAMETER TemplateFolder <String>
	Location which contains the sample files


	#>

	name: SentinelPricingTierAutoScale
	on:
	schedule:
	- cron: '0 1 8 * *' # At 08:00 on every 1st day of the month

	permissions:
	id-token: write
	contents: write
	pull-requests: write

	# Automated Code Pull Request

	Before submitting this Pull Request, please make sure and check the list below.

	## General

	* [x] Change purpose checkboxe(s) are updated
	* [x] Change has been described

	## Purpose for change

	{
	"properties": {
	"roleName": "Tag Reader",
	"description": "Lets you read tags on entities, without providing access to the entities themselves.",
	"permissions": [
	{
	"actions": [
	"Microsoft.Resources/tags/read",
	"Microsoft.Resources/subscriptions/tagNames/read"
	],

	{
	"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
	"contentVersion": "1.0.0.0",
	"parameters": {
	"queryPackName": {
	"value": "InvestigationsPack"
	},
	"queryPackQueries": {
	"value": [
	{

	"resources": [
	{
	"type": "microsoft.operationalInsights/querypacks",
	"apiVersion": "2019-09-01-preview",
	"name": "[parameters('queryPackName')]",
	"location": "[resourceGroup().location]",
	"properties": {}
	},
	{
	"type": "microsoft.operationalInsights/querypacks/queries",