Forum Discussion

Usama_Saleem's avatar
Usama_Saleem
Brass Contributor
Aug 30, 2023

Playbook Error: Failed to get HTTP response

Hello,

I am currently deploying 'ScheduledIncidentEmail' from 

https://github.com/rod-trent/SentinelPlaybooks/tree/master/ScheduledIncidentEmail

But the I am getting the following error.

 

Although I have owner account. Also I don't understand what does it mean by 'Please refresh your credentials'

data collection
integration
siem

1 Reply

  • BillClarksonAntill's avatar
    BillClarksonAntill
    Iron Contributor
    Sep 04, 2023
    By what i can read it seems you have a read permission error so the playbook more then likely hasnt been assigned read access to your log analytics / Microsoft Sentinel workspace

    To complete this follow the following steps
    Select your Log analytics workspace (same name as your Microsoft Sentinel workspace)
    Go into IAM section
    Add Read against your Logic app name

    Logic Apps have a managed identity built into them if it has been enabled, if not perform these steps

    Seach for your Logic App (ScheduledIncidentEmail)
    in the Logic app, find the settings section and select identity
    click the radio button to on for System Assigned
    Repeat steps above