Forum Discussion
Sentinel Playbooks Logic Apps
Hello, I'm creating a playbook for some of the alerts. For example if an alert comes in, it has an entity such as email address of the user then it should send an approval email to that email tha...
Hello idontknowanything,
You can use "Parse JSON" where in the Content field put "Entities".
This will allow you to parse entities based on the schema that you put in the Schema field.
Check the first comment here: Parsing Entities from Azure Sentinel incident into Logic Apps for sending email - Microsoft Tech Community
It has a detailed explanation.