Schedule Alerts in Microsoft Sentinel

Copper Contributor

Hello all,

I have some Playbooks in azure that were created using the Logic App Designer to send me an email alert whenever the incident is created / triggered. I want to have these to go off or be active only during specific hours, for example 10am - 3pm.

Is this possible and how would I achieve this?

Thanks for any help in advance

Alerts

Playbooks

2 Replies

Hello @nrodriguez790 

I am not quite sure but I think you have to add the "Current time" before your Mail alert / sending:

 

KBraun94_0-1714122524449.png

Maybe here you can code / play with your time requierement. 

 

Best regards
Kevin

 

@nrodriguez790 try and explore "Recurrence" trigger under "Schedule", if it helps: 

gsingh__0-1714186427212.png