Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
This playbook is intended to be run
| Attribute | Value |
|---|---|
| Type | Playbook |
| Solution | Standalone Content |
| Source | View on GitHub |
This playbook uses 2 Logic App connectors / built-in actions:
| Connector / Action | Type | Connections | Actions |
|---|---|---|---|
keyvault |
Managed | 1 | 2 |
http |
Built-in | 0 | 10 |
keyvault (Managed)| Action | Method | Endpoint | Other |
|---|---|---|---|
| Get_Sending_App_Registration_Client_Secret | get | [concat('/secrets/@{encodeURIComponent(''', parameters('SendingAppRegistrationKeyVaultSecretName'), ''')}/value')] |
— |
| Get_Receiving_App_Registration_Client_Secret | get | [concat('/secrets/@{encodeURIComponent(''', parameters('ReceivingAppRegistrationKeyVaultSecretName'), ''')}/value')] |
— |
http (Built-in)| Action | Method | Endpoint | Other |
|---|---|---|---|
| HTTP_-_Send_Data_to_Office_Activity_Logs_Data_Collection_Endpoint | POST | [concat(parameters('OfficeActivityIngestionURL'), '/dataCollectionRules/', parameters('OfficeActivtyImmutableId'), '/streams/', parameters('OfficeActivtyDataSource'), '?api-version=2023-01-01')] |
— |
| HTTP_-_Get_O365_Content | GET | @{items('For_Each_-_O365_Audit_Logs')?['contentUri']} |
— |
| HTTP_-_Send_Data_to_Entra_Audit_Log_Data_Collection_Endpoint | POST | [concat(parameters('EntraAuditLogsIngestionURL'), '/dataCollectionRules/', parameters('EntraAuditLogsImmutableId'), '/streams/', parameters('EntraAuditLogsDataSource'), '?api-version=2023-01-01')] |
— |
| HTTP_-_Send_Data_to_SignInLog_Data_Collection_Endpoint | POST | [concat(parameters('EntraSignInLogsIngestionURL'), '/dataCollectionRules/', parameters('EntraSignInLogsImmutableId'), '/streams/', parameters('EntraSignInLogsDataSource'), '?api-version=2023-01-01')] |
— |
| HTTP-_Authenticate_to_Entra_AuditLogs_Data_Collection_Endpoint | POST | [concat('https://login.microsoftonline.com/', subscription().tenantId, '/oauth2/v2.0/token')] |
— |
| HTTP_-_Authenticate_to_OfficeActivityLogs_Data_Collection_Endpoint | POST | [concat('https://login.microsoftonline.com/', subscription().tenantId, '/oauth2/v2.0/token')] |
— |
| HTTP_-_Authenticate_to_SignInLogs_Data_Collection_Endpoint | POST | [concat('https://login.microsoftonline.com/', subscription().tenantId, '/oauth2/v2.0/token')] |
— |
| HTTP_-_Get_Entra_Audit_Logs | GET | https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?$filter=activityDateTime ge @{addMinutes(variables('UTCNow'), -5)} |
— |
| HTTP_-_Get_Entra_SignIn_Logs | GET | https://graph.microsoft.com/v1.0/auditLogs/signIns?$filter=createdDateTime ge @{addMinutes(variables('UTCNow'), -5)} |
— |
| HTTP_-_Get_O365_Audit_General_Logs | GET | [concat('https://manage.office.com/api/v1.0/', parameters('SendingTenantSubscriptionID'),'/activity/feed/subscriptions/content?contentType=Audit.AzureActiveDirectory&PublisherIdentifier=Microsoft?&startTime=@{addMinutes(variables(''UTCNow''), -5)}&endTime=@{variables(''UTCNow'')}')] |
— |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊