Forum Discussion

Bhavini's avatar
Bhavini
Copper Contributor
Nov 28, 2023

Auto Close Alert

Is it possible to auto close alerts using logic app? Update option is only available for incident not for alert.

  • Bhavini you dont need too auto close alerts using logic apps per say

     

    you can use "Automation rules" you can find them under Microsoft Sentinel > Automation > Automation Rules

     

    From there click create and select Automation Rule

     

    From there you can fill in the detail specific to what closed condition you want

    • Bhavini's avatar
      Bhavini
      Copper Contributor
      In automation rule, if we close alert trigger. Unlike incident trigger, we only have an option to run playbook.

Resources