Forum Discussion
abubakr786
Sep 15, 2021Copper Contributor
Unable to utilize logics apps to feed data in a watchlist
Hey, I am unable to add an item in my choice of watchlists using entities like an account, computer, hostname, or IP address, the step where the watchlist condition will take an input is being skipp...
stianhoydal
Sep 20, 2021Brass Contributor
abubakr786 GaryBushey correct me if I'm wrong, but i believe you will never get any entities/other useful information in your logic app/watchlist unless you run the logic app on an actual alert. Just pressing "run trigger" will end up returning blanks regardless since there is no information in the initial trigger "When a response to an Azure Sentinel alert is triggered"
GaryBushey
Sep 20, 2021Bronze Contributor
That is correct.