You manage an Azure subscription named Sub1. Sub1 is associated to an Azure Active Directory (Azure AD) tenant named contoso.com.
You configure Azure Monitor to store and track Azure AD sign-in log data in a Log Analytics workspace named workspace1.
You need to create a security dashboard in the Azure portal that will display the summary of sign-in events during the current week based on the Azure AD sign-in log data.
What should you do first?
1-In workspace1, create a query.
2-In workspace1, create a scope configuration.
3-In Azure Monitor, create a collection rule.
4-In Azure Monitor, create a workbook.
