Auto Close Alert

Copper Contributor

Is it possible to auto close alerts using logic app? Update option is only available for incident not for alert.

2 Replies

@Bhavini you dont need too auto close alerts using logic apps per say

 

you can use "Automation rules" you can find them under Microsoft Sentinel > Automation > Automation Rules

 

From there click create and select Automation Rule

 

From there you can fill in the detail specific to what closed condition you want

In automation rule, if we close alert trigger. Unlike incident trigger, we only have an option to run playbook.