Forum Discussion
Extracting Additional Data for E-mail Alert via Playbook
I have a logic app setup to be used for email alerting with one of my scheduled queries. I am able to pull out the entity data such as Account, Host, IP, etc., but is there a way to pull out other se...
pho30 Hi Sean, apart from the pre-defined values you can add other values by parsing the JSON parameter. All the parameters in the alert are to be converted into string. I've used this logic in my case. "Everytime an alert is triggered, using data operations connectors click on parse json, take the predefined value available in the alert For eg: "Extended properties" or "Entities" and click on sample payload to generate sample schema. From the logs copy the exact parameter and paste it in the sample schema, it will automatically generate a new schema for you. You can then make use of these values as per your requirement to either send an email or create a ticket in SNOW.
Hope this helps!!