AutoConnect-ASCSubscriptions

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


author: Lior Tamir modifiedby: Nathan Swift

Attribute Value
Type Playbook
Solution Standalone Content
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
AutoConnectASC_CL ? ?

Logic App Connectors

This playbook uses 4 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
arm Managed 1 3
azureloganalyticsdatacollector Managed 1 1
office365 Managed 1 1
http Built-in 0 1
Action parameters (URLs, paths, function IDs)

arm (Managed)

Action Method Endpoint Other
Create_or_update_a_resource put /subscriptions/@{encodeURIComponent(variables('sentinel-sub'))}/resourcegroups/@{encodeURIComponent(variables('sentinel-RGname'))}/providers/@{encodeURIComponent('Microsoft.OperationalInsights')}/@{encodeURIComponent('/workspaces/',variables('sentinel-WorkspaceName'),'/providers/Microsoft.SecurityInsights/dataConnectors/',guid())}
GetAll_DataConnectors get /subscriptions/@{encodeURIComponent(variables('sentinel-sub'))}/resourcegroups/@{encodeURIComponent(variables('sentinel-RGname'))}/providers/@{encodeURIComponent('Microsoft.OperationalInsights')}/@{encodeURIComponent('/workspaces/',variables('sentinel-WorkspaceName'),'/providers/Microsoft.SecurityInsights/dataConnectors')}
List_subscriptions get /subscriptions

azureloganalyticsdatacollector (Managed)

Action Method Endpoint Other
Send_Data post /api/logs

office365 (Managed)

Action Method Endpoint Other
Send_an_email_(V2) post /v2/Mail

http (Built-in)

Action Method Endpoint Other
PUT_SyncSettings PUT https://management.azure.com/subscriptions/@{items('For_each')?['SubscriptionID']}/providers/Microsoft.Security/settings/Sentinel?api-version=2021-06-01

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks