Veeam-PerformInstantVMRecovery

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This Microsoft Sentinel playbook performs instant VM recovery on the vm specified by MachineDisplayName custom field of Microsoft Sentinel's incident custom fields. The playbook automatically finds the latest clean restore point, initiates the instant recovery monitor for its state and indicates results as incident comments.

Attribute Value
Type Playbook
Solution Veeam
Source View on GitHub

Logic App Connectors

This playbook uses 2 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 3
function Built-in 0 3
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Add_comment post /Incidents/Comment
Add_comment_to_incident post /Incidents/Comment
Add_comment_to_incident_(V3) post /Incidents/Comment

function (Built-in)

Action Method Endpoint Other
GetLastCleanRestorePointForVMAsync functionId=[concat(variables('functionAppId'), '/functions/GetCleanRestorePointsAsync')]
StartInstantVMRecoveryAsync functionId=[concat(variables('functionAppId'), '/functions/StartInstantVMRecoveryAsync')]
GetSession_ functionId=[concat(variables('functionAppId'), '/functions/GetSessionAsync')]

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks · Back to Veeam