What Changed

Solution Analyzer toolset upgraded to v9.0 with significant enhancements to table schema discovery, documentation source prioritization, and solution dependency mapping.

Table Schema Discovery System

New comprehensive column schema collection from three primary sources:

  • DCR definitions: Stream declarations from CCP/CCF connector DCR.json files extracting column names, types, stream configurations, and transform KQL
  • Azure Monitor documentation: Rendered learn.microsoft.com table reference pages providing column names, types, and descriptions
  • KQL validation schemas: CI test table definitions for tables not covered by other sources

Produces two new CSV outputs: la_table_schemas.csv (documentation schemas) and table_schemas.csv (unified schemas with 77,457+ column definitions across all discovered tables).

Documentation Source Prioritization

Tables index now displays single primary discovery source using hierarchical priority: Connector > Content > Docs > Schema. This replaces previous multi-source listing with cleaner categorization:

  • Connector: Tables from solution data connectors
  • Content: Tables from standalone detection/hunting content
  • Docs: Unified category for all documentation sources (Azure Monitor, Defender XDR, Sentinel Tables, Feature Support, Ingestion API)
  • Schema: Tables discovered only via schema files

Enhanced Table Documentation

Individual table pages gain new Schema section displaying column definitions (name, type, description, source) with clickable attribution links. Tables with schema information marked with book icon in the index for quick identification.

Solution Dependencies Tracking

New solution_dependencies.csv maps explicit dependencies (from dependentDomainSolutionIds) and optional ASIM-based dependencies. Solution pages show dependency relationships with connector and table mappings from dependent solutions.

Statistics Improvements

Statistics page restructured with detailed discovery breakdowns: primary discovery source counts, individual documentation source breakdowns, and schema source attribution (Azure Monitor docs, DCR, KQL validation).

Affected Files

Tools/Solutions Analyzer/README.md
Tools/Solutions Analyzer/collect_table_info.py
Tools/Solutions Analyzer/content_tables_mapping.csv
Tools/Solutions Analyzer/generate_connector_docs.py
Tools/Solutions Analyzer/la_table_schemas.csv
Tools/Solutions Analyzer/map_solutions_connectors_tables.py
Tools/Solutions Analyzer/script-docs/collect_table_info.md
Tools/Solutions Analyzer/script-docs/generate_connector_docs.md
Tools/Solutions Analyzer/script-docs/map_solutions_connectors_tables.md
Tools/Solutions Analyzer/solution_dependencies.csv
Tools/Solutions Analyzer/table_schemas.csv
Tools/Solutions Analyzer/upload_to_kusto.py