Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

[Playbook] Disappear "Add comment to incident V2"

Copper Contributor

Hello, 
I can't find "Add comment to incident V2" in Actions in Azure Sentinel in Playbooks, can someone check how it looks in your tenants?

gizapawel_0-1606119513461.png

 

 

 

2 Replies

@Pawel_Giza It is not showing in my environment either but luckily it still works. It looks like if you really need it you can switch to code view from an existing Playbook that uses it, copy the JSON, and add it to a new Playbook, changing the needed fields mainly the "runAfter" and the actual value of the comment