Azure Sentinel REST API to Create Comment

[PHancke]

Hi,

We are trying to create comments using the REST API. The Incident comments / Create comment docs (Incident Comments - Create Comment - REST API (Azure Sentinel) | Microsoft Docs) states that incidentCommentID is required. How do I create a new incident comment instead of adding to an existing comment?

Regards

Pieter 

[#2]

@PHancke The IncidentCommentID is just a GUID so you can make your own when creating a new comment.

BTW, if you go to https://github.com/Azure/azure-rest-api-specs/tree/main/specification/securityinsights/resource-mana... you will see that there are examples on how to use most, if not all, of the REST API calls.