I have a number of logic apps which run on a schedule to send an email relating to AD actions that are triggered, for example account lock / unlock, account disable / re-enable and password change. These are set to run on a schedule using a recurrance pane, which links into the query and then onto a send email pane.
Is there any way I can trigger the app if this event goes into Sentinel, so in effect an "immediate" trigger? If not via logicapp, is there a way to do this in Sentinel?

