Forum Discussion
Unable to utilize logics apps to feed data in a watchlist
abubakr786 That is exactly what I was referring to. So your For loop isn't being executed because there is nothing for it to execute on. At least in this case, the incident or alert has no account entities so the loop doesn't run.
- GaryBusheySep 16, 2021Bronze Contributor
abubakr786 The first thing would be to check that your alert/incident (depending on what trigger you are using) actually has any entities.
- abubakr786Sep 17, 2021Copper Contributor
GaryBushey Does logic map output in any form returns the values of entities fetched? As I dont see any entity field or value in code format of the alert trigger
- stianhoydalSep 20, 2021Brass Contributor
abubakr786 GaryBushey correct me if I'm wrong, but i believe you will never get any entities/other useful information in your logic app/watchlist unless you run the logic app on an actual alert. Just pressing "run trigger" will end up returning blanks regardless since there is no information in the initial trigger "When a response to an Azure Sentinel alert is triggered"