Create-Incident-Logic-App

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This playbook will help to create an incident in Microsoft Sentinle when an email is sent to the configured email address.

Attribute Value
Type Playbook
Solution Standalone Content
Source View on GitHub

Logic App Connectors

This playbook uses 4 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 0
microsoftsentinelconnection Managed 0 1
office365 Managed 1 0
office365connection Managed 0 1
Action parameters (URLs, paths, function IDs)

microsoftsentinelconnection (Managed)

Action Method Endpoint Other
Create_incident put [concat('/Incidents/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/workspaces/',parameters('WorkspaceName'))]

office365connection (Managed)

Action Method Endpoint Other
When_a_new_email_arrives get /Mail/OnNewEmail

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks