Forum Discussion
Mobile_Walk_In
May 10, 2024Copper Contributor
Send an Email with Incident Details
I'm endeavoring to manage incident responses in Sentinel using Logic Apps. However, I'm encountering a challenge: my COMPOSE action involves multiple JSON objects. One JSON contains information abou...
Kidd_Ip
May 28, 2024MVP
- Mobile_Walk_InJun 12, 2024Copper Contributor"Thank you for your assistance! Currently, I'm endeavoring to manage incident responses in Sentinel using Logic Apps. However, I'm encountering a challenge: my COMPOSE action involves multiple JSON objects. One JSON contains information about the initiating user, the next about the affected user, and so forth. The issue arises when I attempt to send an email related to the incident, as the Logic App triggers multiple emails—one for each JSON object.
My goal is to consolidate this information into a single email, providing a comprehensive overview of the incident. For instance:
"Hello, [initiating user from JSON1],
Sentinel has detected an alarm due to your recent activity involving multiple users: [affected user 1 from JSON2], [affected user 2 from JSON 3], and [affected user 3 FROM JSON4].
Does this clarification help in understanding the situation?"