diff --git a/Workbooks/AzureActiveDirectorySignins.json b/Workbooks/AzureActiveDirectorySignins.json
index c5fe5d341b6..5e679243b1d 100644
--- a/Workbooks/AzureActiveDirectorySignins.json
+++ b/Workbooks/AzureActiveDirectorySignins.json
@@ -219,6 +219,24 @@
       },
       "name": "parameters - 1"
     },
+    {
+      "type": 3,
+      "content": {
+        "version": "KqlItem/1.0",
+        "query": "let data = \r\nunion SigninLogs,AADNonInteractiveUserSignInLogs\r\n| where Category in ({Category})\r\n|where AppDisplayName in ({Apps}) or '*' in ({Apps})\r\n|where UserDisplayName in ({Users});\r\ndata\r\n| summarize count() by UserPrincipalName, bin (TimeGenerated,5m)\r\n",
+        "size": 0,
+        "title": "Sign-in Trend over Time",
+        "timeContext": {
+          "durationMs": 86400000
+        },
+        "timeContextFromParameter": "TimeRange",
+        "timeBrushParameterName": "TimeBrush",
+        "queryType": 0,
+        "resourceType": "microsoft.operationalinsights/workspaces",
+        "visualization": "timechart"
+      },
+      "name": "query - 19"
+    },
     {
       "type": 3,
       "content": {
@@ -228,7 +246,7 @@
         "timeContext": {
           "durationMs": 1209600000
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "exportFieldName": "Status",
         "exportParameterName": "SigninStatus",
         "exportDefaultValue": "*",
@@ -291,7 +309,7 @@
         "timeContext": {
           "durationMs": 0
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "showRefreshButton": true,
         "exportMultipleValues": true,
         "exportedParameters": [
@@ -405,7 +423,7 @@
         "timeContext": {
           "durationMs": 0
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "queryType": 0,
         "resourceType": "microsoft.operationalinsights/workspaces",
         "gridSettings": {
@@ -537,13 +555,6 @@
       "customWidth": "33",
       "name": "query - 8"
     },
-    {
-      "type": 1,
-      "content": {
-        "json": ""
-      },
-      "name": "text - 5"
-    },
     {
       "type": 3,
       "content": {
@@ -555,7 +566,7 @@
         "timeContext": {
           "durationMs": 0
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "exportedParameters": [
           {
             "parameterName": "DeviceDetail",
@@ -788,7 +799,7 @@
         "timeContext": {
           "durationMs": 1209600000
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "queryType": 0,
         "resourceType": "microsoft.operationalinsights/workspaces",
         "visualization": "tiles",
@@ -829,7 +840,7 @@
         "timeContext": {
           "durationMs": 1209600000
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "exportParameterName": "Detail",
         "exportDefaultValue": "{ \"Name\":\"\", \"Type\":\"*\", \"Parent\":\"*\"}",
         "queryType": 0,
@@ -1012,7 +1023,7 @@
         "timeContext": {
           "durationMs": 1209600000
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "exportFieldName": "❌ Error Code",
         "exportParameterName": "ErrorCode",
         "exportDefaultValue": "*",
@@ -1049,7 +1060,7 @@
         "timeContext": {
           "durationMs": 1209600000
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "queryType": 0,
         "resourceType": "microsoft.operationalinsights/workspaces",
         "visualization": "table",
@@ -1187,7 +1198,7 @@
         "timeContext": {
           "durationMs": 1209600000
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "exportFieldName": "❌ Error Code",
         "exportParameterName": "InterruptErrorCode",
         "exportDefaultValue": "*",
@@ -1222,7 +1233,7 @@
         "timeContext": {
           "durationMs": 1209600000
         },
-        "timeContextFromParameter": "TimeRange",
+        "timeContextFromParameter": "TimeBrush",
         "queryType": 0,
         "resourceType": "microsoft.operationalinsights/workspaces",
         "gridSettings": {
diff --git a/Workbooks/WorkbooksMetadata.json b/Workbooks/WorkbooksMetadata.json
index 18ee84a1573..60135967652 100644
--- a/Workbooks/WorkbooksMetadata.json
+++ b/Workbooks/WorkbooksMetadata.json
@@ -162,7 +162,7 @@
     "dataTypesDependencies": [ "SigninLogs" ],
     "dataConnectorsDependencies": [ "AzureActiveDirectory" ],
     "previewImagesFileNames": [ "AADsigninBlack1.png", "AADsigninBlack2.png", "AADsigninWhite1.png", "AADsigninWhite2.png" ],
-    "version": "2.3",
+    "version": "2.4",
     "title": "Azure AD Sign-in logs",
     "templateRelativePath": "AzureActiveDirectorySignins.json",
     "subtitle": "",