Veeam-PerformConfigurationBackupOnIncident

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


A Microsoft Sentinel playbook that automatically runs configuration backup session when triggered by an incident. The playbook gets Veeam Backup & Replication settings from incident custom fields, runs the configuration backup session, and collects the session result.

Attribute Value
Type Playbook
Solution Veeam
Source View on GitHub

Logic App Connectors

This playbook uses 2 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 3
function Built-in 0 3
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Add_backup_started_comment post /Incidents/Comment
Add_backup_completed_comment post /Incidents/Comment
Add_no_hostname_comment post /Incidents/Comment

function (Built-in)

Action Method Endpoint Other
StartConfigurationBackupAsync functionId=[concat(variables('functionAppId'), '/functions/StartConfigurationBackupAsync')]
GetSession functionId=[concat(variables('functionAppId'), '/functions/GetSessionAsync')]
IngestSessionDataBySessionIdAsync functionId=[concat(variables('functionAppId'), '/functions/IngestSessionDataBySessionIdAsync')]

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks · Back to Veeam