Forum Discussion
deep198486
Apr 24, 2025Copper Contributor
create incident in sentinel using logic apps after running query in azure data explorer
create incident in sentinel using logic apps after running query in azure data explorer
Clive_Watson
Apr 25, 2025Bronze Contributor
ADX doesn't have a trigger like you have for Sentinel. So you probably need to run your logic app on a schedule (every 5, 10, 15mins etc...) and have it run the code and then use the HTTP control to talk to the Incident API Incidents - Create Or Update - REST API (Azure Sentinel) | Microsoft Learn