Forum Discussion

twessel's avatar
twessel
Copper Contributor
Apr 06, 2021

No Playbooks available when creating an Automation Rule.

I am wanting to create an automation rule to trigger a logic app to send me a slack notification whenever a specific alert comes through. My logic app has an Azure Sentinel trigger and I can see it if I am looking at all of my playbooks in the Automations tab in Sentinel. However when I create an automation rule and select the run a playbook action it says that no playbooks are available. Is this a bug or am I doing something wrong?

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor

    twessel For Azure Sentinel automation, the playbooks have to be using the Azure Sentinel Incident trigger (rather than the alert trigger).  The good news is that the Incident triggers gives you all the alert information as well.

Resources