Azure Sentinel REST API to Create Comment

Occasional Contributor


We are trying to create comments using the REST API. The Incident comments / Create comment docs (Incident Comments - Create Comment - REST API (Azure Sentinel) | Microsoft Docs) states that incidentCommentID is required. How do I create a new incident comment instead of adding to an existing comment?



1 Reply

@PHancke The IncidentCommentID is just a GUID so you can make your own when creating a new comment.


BTW, if you go to you will see that there are examples on how to use most, if not all, of the REST API calls.