Comment length should not exceed 1000 characters - error msg on in Sentinel Incident comment section

%3CLINGO-SUB%20id%3D%22lingo-sub-1385994%22%20slang%3D%22en-US%22%3EComment%20length%20should%20not%20exceed%201000%20characters%20-%20error%20msg%20on%20in%20Sentinel%20Incident%20comment%20section%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1385994%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3BWhile%20working%20on%20Azure%20Sentinel%20incident%20there%20is%20a%20comment%20box%20in%20the%20right%20side%20near%20entities%2C%20when%20opening%20a%20incident%20in%20view%20full%20details.%20And%20this%20comment%20box%20allow%20up%20to%201000%20character%20only.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20it%20be%20possible%20to%20increase%20the%201000%20character%20limit%20to%20unlimited%20or%20more%20than%20that.%20And%20if%20it%20is%20possible%20how%20it%20will%20be%20done.%20Any%20additional%20costing%20required%20to%20increase%20this.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1386066%22%20slang%3D%22en-US%22%3ERe%3A%20Comment%20length%20should%20not%20exceed%201000%20characters%20-%20error%20msg%20on%20in%20Sentinel%20Incident%20comment%20sec%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1386066%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F394938%22%20target%3D%22_blank%22%3E%40Pinku1725%3C%2FA%3E%26nbsp%3BCould%20you%20just%20enter%20multiple%20comments%20to%20fulfill%20the%20character%20count%20you%20have%20for%20the%20entry%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMake%20a%20product%20suggestion%20here%3A%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F920458-azure-sentinel%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ffeedback.azure.com%2Fforums%2F920458-azure-sentinel%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1386123%22%20slang%3D%22en-US%22%3ERe%3A%20Comment%20length%20should%20not%20exceed%201000%20characters%20-%20error%20msg%20on%20in%20Sentinel%20Incident%20comment%20sec%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1386123%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20Rod%2C%20currently%20doing%20that%20only.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F324945%22%20target%3D%22_blank%22%3E%40rodtrent%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1531258%22%20slang%3D%22en-US%22%3ERe%3A%20Comment%20length%20should%20not%20exceed%201000%20characters%20-%20error%20msg%20on%20in%20Sentinel%20Incident%20comment%20sec%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1531258%22%20slang%3D%22en-US%22%3E%3CP%3ERan%20into%20the%20same%20issue%20while%20setting%20up%20the%20Azure%20Sentinel%20Playbook%3C%2FP%3E%0A%3CP%3E%3CSTRONG%20class%3D%22final-path%22%3EEnrich-SentinelIncident-MDATPTVM%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Sentinel%2Ftree%2Fmaster%2FPlaybooks%2FEnrich-SentinelIncident-MDATPTVM%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FAzure%2FAzure-Sentinel%2Ftree%2Fmaster%2FPlaybooks%2FEnrich-SentinelIncident-MDATPTVM%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOn%20a%20device%20with%20many%20CVE's%20the%20list%20is%20quickly%20getting%20to%20long%20and%20will%20exceed%20the%20message%20limit%20as%20well.%20Will%20register%20an%20issue%20in%20Github%20for%20that%20and%20see%20if%20I%20can%20provide%20a%20workaround%20using%20multiple%20comments%2C%20but%20it%20would%20definitely%20be%20nice%20if%20the%20message%20character%20limit%20could%20be%20increased%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1531262%22%20slang%3D%22en-US%22%3ERe%3A%20Comment%20length%20should%20not%20exceed%201000%20characters%20-%20error%20msg%20on%20in%20Sentinel%20Incident%20comment%20sec%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1531262%22%20slang%3D%22en-US%22%3E%3CP%3EAzure%20Sentinel%20-%20Product%20feedback%20-%20request%20to%20increase%20comment%20size%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F920458-azure-sentinel%2Fsuggestions%2F40941286-increase-comment-character-limit%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ffeedback.azure.com%2Fforums%2F920458-azure-sentinel%2Fsuggestions%2F40941286-increase-comment-character-limit%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

 While working on Azure Sentinel incident there is a comment box in the right side near entities, when opening a incident in view full details. And this comment box allow up to 1000 character only. 

 

Can it be possible to increase the 1000 character limit to unlimited or more than that. And if it is possible how it will be done. Any additional costing required to increase this. 

4 Replies

@Pinku1725 Could you just enter multiple comments to fulfill the character count you have for the entry?

 

Make a product suggestion here:  https://feedback.azure.com/forums/920458-azure-sentinel

Ran into the same issue while setting up the Azure Sentinel Playbook

Enrich-SentinelIncident-MDATPTVM

https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Enrich-SentinelIncident-MDATPTVM

 

On a device with many CVE's the list is quickly getting to long and will exceed the message limit as well. Will register an issue in Github for that and see if I can provide a workaround using multiple comments, but it would definitely be nice if the message character limit could be increased