spur_alert

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Attribute Value
Type Playbook
Solution Standalone Content
Source View on GitHub

Logic App Connectors

This playbook uses 5 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 0
azuresentinel_conn Managed 0 6
keyvault Managed 1 0
keyvault_conn Managed 0 1
http Built-in 0 1
Action parameters (URLs, paths, function IDs)

azuresentinel_conn (Managed)

Action Method Endpoint Other
Alert_-_Get_incident get /Incidents/subscriptions/@{encodeURIComponent(triggerBody()?['WorkspaceSubscriptionId'])}/resourceGroups/@{encodeURIComponent(triggerBody()?['WorkspaceResourceGroup'])}/workspaces/@{encodeURIComponent(triggerBody()?['WorkspaceId'])}/alerts/@{encodeURIComponent(triggerBody()?['SystemAlertId'])}
Entities_-_Get_IPs post /entities/ip
Add_comment_to_incident_(V3) post /Incidents/Comment
Update_incident put /Incidents
Update_incident_2 put /Incidents
Update_incident_-_Removing_taxonomy_tags put /Incidents

keyvault_conn (Managed)

Action Method Endpoint Other
Get_secret get [concat('/secrets/@{encodeURIComponent(''', parameters('SecretName'), ''')}/value')]

http (Built-in)

Action Method Endpoint Other
HTTP_-_Request_IP_information GET https://api.spur.us/v1/context/@{body('Parse_IP_Entity_')?['address']}

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks