Forum Discussion
Sep 06, 2021
Closing alerts in Azure Sentinel does not automatically close in Cloud App Security console
We have both Cloud App Security and Azure Sentinel deploy on the environment. When we get alerts from Cloud App Security to Azure Sentinel, we overlook the incidents and close them accordingly. When ...
Rod_Trent
Microsoft
Sep 06, 2021This capability is coming.
However, in the interim there's a Playbook available that will accomplish this for you: https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Close-Incident-MCAS
Sep 07, 2021
Thanks Rodtrent. Let me check on this Playbook on customer's environment.