Create alert based on no. of open incidents

Question

Hello!&nbsp;&nbsp;Hoping someone can help... I'm looking to create an email notification based on if the number of open incidents is greater than X value. Has anyone achieved this or can provide pointers, or guidance in setting up a playbook or similar to achieve this?&nbsp;&nbsp;Thanks 🙂&nbsp;

clivewatson · Answer

ClemFandango2055&nbsp;
&nbsp;
For looking at Incidents this may help&nbsp;Re: How to show amount of query results as entity on incident created in Azure Sentinel - Microsoft Tech Community&nbsp; you then you can use one of the two templates for an example Playbook to send the email

clemfandango2055 · Answer

Perfect thanks&nbsp;CliveWatson&nbsp;

Forum Discussion

Create alert based on no. of open incidents

2 Replies

Resources