Sentinel Playbook - Logic App - Alert-Get Incident Fails with 404 error

Copper Contributor

I recently ran into an issue attempting to create a playbook to automatically update incidents that are generated based on certain criteria within the "Entities" field. Creation of the rule is validated and saved with no errors, but when attempting to trigger the playbook I receive the following:

 

{
    "method""get",
    "path""/Incidents/subscriptions//resourceGroups//workspaces//alerts/",
    "host": {
        "connection": {
            "name""/subscriptions/xxxxxxxxxxxxxxxxxxxxxxxxx/resourceGroups/xxxxxxxxxxx/providers/Microsoft.Web/connections/azuresentinel"
        }
    }
}
 
{
    "statusCode"404,
    "headers": {
        "Access-Control-Allow-Methods""GET, PUT, PATCH, DELETE, POST",
        "Access-Control-Allow-Origin""*",
        "Access-Control-Max-Age""3600",
        "Access-Control-Expose-Headers""*",
        "Date""Mon, 15 Mar 2021 13:24:06 GMT",
        "Content-Length""54",
        "Content-Type""application/json"
    },
    "body": {
        "statusCode"404,
        "message""Resource not found"
    }
}
 
I have full rights to the resource group and global admin privileges within the tenant/subscription. I am also fairly new to logic apps and any assistance would be appreciated greatly.
 
Thanks in adavnce.
0 Replies