Need to schedule reporting in azure sentinel

Question

Hi everyone can some help me how to create a logic app to schedule daily,weekly,monthly reporting in Sentinel.

garybushey · Answer

Dinesh_G&nbsp;You can easily create a logic app that uses the recurrence trigger to run on a set schedule. The harder part is what kind of report do you want and how to you want it delivered?&nbsp;

clivewatson · Answer

Dinesh_G&nbsp;
&nbsp;
This is my example, it uses a "recurrence" as the trigger (I need two queries in the report and did these in parallel).&nbsp; Recurrence allows you to schedule, a playbook to run.

thijs lecomte · Answer

Also check this from Rod Trent: https://azurecloudai.blog/2020/08/04/azure-sentinel-sending-an-email-each-morning-with-the-list-of-daily-incidents-created/

Forum Discussion

Need to schedule reporting in azure sentinel

3 Replies

Resources