Need to schedule reporting in azure sentinel

%3CLINGO-SUB%20id%3D%22lingo-sub-1984557%22%20slang%3D%22en-US%22%3ENeed%20to%20schedule%20reporting%20in%20azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1984557%22%20slang%3D%22en-US%22%3EHi%20everyone%20can%20some%20help%20me%20how%20to%20create%20a%20logic%20app%20to%20schedule%20daily%2Cweekly%2Cmonthly%20reporting%20in%20Sentinel.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1985165%22%20slang%3D%22en-US%22%3ERe%3A%20Need%20to%20schedule%20reporting%20in%20azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1985165%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F722541%22%20target%3D%22_blank%22%3E%40Dinesh_G%3C%2FA%3E%26nbsp%3BYou%20can%20easily%20create%20a%20logic%20app%20that%20uses%20the%20recurrence%20trigger%20to%20run%20on%20a%20set%20schedule.%20The%20harder%20part%20is%20what%20kind%20of%20report%20do%20you%20want%20and%20how%20to%20you%20want%20it%20delivered%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1985167%22%20slang%3D%22en-US%22%3ERe%3A%20Need%20to%20schedule%20reporting%20in%20azure%20sentinel%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1985167%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F722541%22%20target%3D%22_blank%22%3E%40Dinesh_G%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20my%20example%2C%20it%20uses%20a%20%22recurrence%22%20as%20the%20trigger%20(I%20need%20two%20queries%20in%20the%20report%20and%20did%20these%20in%20parallel).%26nbsp%3B%20Recurrence%20allows%20you%20to%20schedule%2C%20a%20playbook%20to%20run.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Annotation%202020-12-14%20123923.jpg%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F240158i83C61B9DCFA288D9%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Annotation%202020-12-14%20123923.jpg%22%20alt%3D%22Annotation%202020-12-14%20123923.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor
Hi everyone can some help me how to create a logic app to schedule daily,weekly,monthly reporting in Sentinel.

3 Replies

@Dinesh_G You can easily create a logic app that uses the recurrence trigger to run on a set schedule. The harder part is what kind of report do you want and how to you want it delivered? 

@Dinesh_G 

 

This is my example, it uses a "recurrence" as the trigger (I need two queries in the report and did these in parallel).  Recurrence allows you to schedule, a playbook to run.

Annotation 2020-12-14 123923.jpg