Forum Discussion

pho30's avatar
pho30
Copper Contributor
Nov 21, 2019

Logic Apps - Issue Passing Entity from Sentinel Connector to PowerShell Runbook Parameter

Hi All,   I previously created some basic Logic Apps that would generate whenever an Azure Monitor (Log Analytics) alert was triggered and would then take the host name and IP address (depending on...
GaryBushey's avatar
GaryBushey
Bronze Contributor
Nov 21, 2019

pho30 It may be that you need to load the Incident between the trigger and the Get hosts alert and use the Entites from the Incident

pho30's avatar
pho30
Copper Contributor
Nov 21, 2019

GaryBushey Thanks again for the suggestion, unfortunately it's still running into the same issue.

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor
    Nov 21, 2019

    pho30 I had a response come back that was throwing a JSON Formatting error and it went away when I completely rebuilt my workbook from scratch.  Not sure if that is how you built this one or not.  Hope it helps.

    • pho30's avatar
      pho30
      Copper Contributor
      Nov 21, 2019

      GaryBushey Thanks for the heads up there as well. Went and re-created the entire flow and still hitting those same errors, at this point not entirely sure what the issue is.

       

      Thanks again.

      • GaryBushey's avatar
        GaryBushey
        Bronze Contributor
        Nov 23, 2019

        pho30 The only other thing I can suggest is writing out the values into a Team message to see if there is something wrong with it.