Community Syslog workbook mirroring Windows Event Log workbook
https://www.systemcenterautomation.com/azure-sentinel-syslog-workbook
Workbook is entirely dynamic. Facility and Severity Level paramters rely on HostName parameter, and Severity Level relies on both.