[Playbook] Disappear "Add comment to incident V2"

%3CLINGO-SUB%20id%3D%22lingo-sub-1922606%22%20slang%3D%22en-US%22%3E%5BPlaybook%5D%20Disappear%20%22Add%20comment%20to%20incident%20V2%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1922606%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%26nbsp%3B%3CBR%20%2F%3EI%20can't%20find%26nbsp%3B%22Add%20comment%20to%20incident%20V2%22%20in%20Actions%20in%20Azure%20Sentinel%20in%20Playbooks%2C%20can%20someone%20check%20how%20it%20looks%20in%20your%20tenants%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22gizapawel_0-1606119513461.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F235518i30DE4BD92993719E%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22gizapawel_0-1606119513461.png%22%20alt%3D%22gizapawel_0-1606119513461.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1923489%22%20slang%3D%22en-US%22%3ERe%3A%20%5BPlaybook%5D%20Disappear%20%22Add%20comment%20to%20incident%20V2%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1923489%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F738814%22%20target%3D%22_blank%22%3E%40Pawel_Giza%3C%2FA%3E%26nbsp%3BIt%20is%20not%20showing%20in%20my%20environment%20either%20but%20luckily%20it%20still%20works.%20It%20looks%20like%20if%20you%20really%20need%20it%20you%20can%20switch%20to%20code%20view%20from%20an%20existing%20Playbook%20that%20uses%20it%2C%20copy%20the%20JSON%2C%20and%20add%20it%20to%20a%20new%20Playbook%2C%20changing%20the%20needed%20fields%20mainly%20the%20%22runAfter%22%20and%20the%20actual%20value%20of%20the%20comment%3C%2FP%3E%3CDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello, 
I can't find "Add comment to incident V2" in Actions in Azure Sentinel in Playbooks, can someone check how it looks in your tenants?

gizapawel_0-1606119513461.png

 

 

 

2 Replies

@Pawel_Giza It is not showing in my environment either but luckily it still works. It looks like if you really need it you can switch to code view from an existing Playbook that uses it, copy the JSON, and add it to a new Playbook, changing the needed fields mainly the "runAfter" and the actual value of the comment