Forum Discussion
Playbook Error: Failed to get HTTP response
Hello, I am currently deploying 'ScheduledIncidentEmail' from https://github.com/rod-trent/SentinelPlaybooks/tree/master/ScheduledIncidentEmail But the I am getting the following error. ...
By what i can read it seems you have a read permission error so the playbook more then likely hasnt been assigned read access to your log analytics / Microsoft Sentinel workspace
To complete this follow the following steps
Select your Log analytics workspace (same name as your Microsoft Sentinel workspace)
Go into IAM section
Add Read against your Logic app name
Logic Apps have a managed identity built into them if it has been enabled, if not perform these steps
Seach for your Logic App (ScheduledIncidentEmail)
in the Logic app, find the settings section and select identity
click the radio button to on for System Assigned
Repeat steps above
To complete this follow the following steps
Select your Log analytics workspace (same name as your Microsoft Sentinel workspace)
Go into IAM section
Add Read against your Logic app name
Logic Apps have a managed identity built into them if it has been enabled, if not perform these steps
Seach for your Logic App (ScheduledIncidentEmail)
in the Logic app, find the settings section and select identity
click the radio button to on for System Assigned
Repeat steps above