Forum Discussion
Parsing Entities from Azure Sentinel incident into Logic Apps for sending email
Hello, We are trying to automate first level response for our Azure Sentinel Incidents, These Incidents have Custom Entities and we need to pass these Entities to Azure logic Apps so that this En...
Where / How do you get the Sample Schema from for Entities?
KentuckyMike2085 You would need to run the playbook once and then in the run history you can see the various steps that were run. You can then click on one to see the input and output variables. You would be able to get the data that way.
I would also say that the way the playbook was written should be modified to use the new incident trigger as it will provide you the means to easily get the entities needed.