Close-Incident-MCAS
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Content Index
Author: Benjamin Kovacevic
| Attribute |
Value |
| Type |
Playbook |
| Solution |
Standalone Content |
| Source |
View on GitHub |
Tables Used
This content item queries data from the following tables:
| Table |
Selection Criteria |
Transformations |
Ingestion API |
Lake-Only |
SecurityAlert |
SystemAlertId == "@{items(" |
✓ |
✗ |
✓ |
Logic App Connectors
This playbook uses 3 Logic App connectors / built-in actions:
Action parameters (URLs, paths, function IDs)
| Action |
Method |
Endpoint |
Other |
| Run_query_and_list_results |
post |
/queryData |
— |
| Action |
Method |
Endpoint |
Other |
| Alert_-_Get_incident |
get |
/Cases/@{encodeURIComponent(triggerBody()?['SystemAlertId'])}/@{encodeURIComponent(triggerBody()?['WorkspaceSubscriptionId'])}/@{encodeURIComponent(triggerBody()?['WorkspaceId'])}/@{encodeURIComponent(triggerBody()?['WorkspaceResourceGroup'])} |
— |
| Change_incident_status |
put |
/Case/@{encodeURIComponent(triggerBody()?['WorkspaceSubscriptionId'])}/@{encodeURIComponent(triggerBody()?['WorkspaceId'])}/@{encodeURIComponent(triggerBody()?['WorkspaceResourceGroup'])}/@{encodeURIComponent('Alert')}/@{encodeURIComponent(triggerBody()?['SystemAlertId'])}/Status/@{encodeURIComponent('Closed')} |
— |
http (Built-in)
| Action |
Method |
Endpoint |
Other |
| HTTP |
POST |
@{variables('MCASURL')}/api/v1/alerts/@{body('Run_query_and_list_results')['value'][0]['AlertID']}/dismiss/ |
— |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Playbooks