Get-AlertEntitiesEnrichment

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


author: Sebastien Molendijk - Microsoft

Attribute Value
Type Playbook
Solution GitHub Only
Source View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azureloganalyticsdatacollector Managed 0 1
azuresentinel Managed 0 2
workflow Built-in 0 1
Action parameters (URLs, paths, function IDs)

azureloganalyticsdatacollector (Managed)

Action Method Endpoint Other
Send_Data_to_Sentinel post /api/logs

azuresentinel (Managed)

Action Method Endpoint Other
Get_accounts post /entities/account
Add_account_comment_to_incident put /Comment/@{encodeURIComponent(triggerBody()?['WorkspaceSubscriptionId'])}/@{encodeURIComponent(triggerBody()?['WorkspaceId'])}/@{encodeURIComponent(triggerBody()?['WorkspaceResourceGroup'])}/@{encodeURIComponent('Alert')}/@{encodeURIComponent(triggerBody()?['SystemAlertId'])}

workflow (Built-in)

Action Method Endpoint Other
Call_UserEnrichment_LogicApp workflowId=[parameters('UserEnrichmentLogicApp')]
triggerName=manual

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks