question

aniketdvd avatar image
0 Votes"
aniketdvd asked tbgangav-MSFT edited

Is trigger for 'when update in an incident is made' possible?

133557-image.png


For example, changing this incident severity, can I have a trigger for that in a logic app/playbook? When I list available triggers in sentinel

133601-image.png

Both of these triggers don't seem to run when I change something in an incident. I have seen automation rules too but they only have 'when incident is created' trigger available

I would love some assistance on this one!
Regards,
Aniket






azure-logic-appsazure-sentinel
image.png (6.6 KiB)
image.png (27.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

MayankBargali-MSFT avatar image
0 Votes"
MayankBargali-MSFT answered

@aniketdvd As per the document currently there are only two trigger avaiable for Azure Sentinel connector and unfortunately there are no trigger aviable for your requirement.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.