Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
869 questions
Cant see playbooks to the incident actions /Automation Rule (that is, I don't see any playbooks again in the list)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 41%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Ade Runsewe
0
Reputation points
I can't see playbooks to the incident actions /Automation Rule (that is, I don't see any playbooks again in the list).
I have ran playbooks by incident trigger or via automation rule.
But this morning can't see the playbooks anymore.
I have owner access to the subscription and other relevant Azure roles for logic apps and sentinel.
this just happened over night
{count} votes
-
James Hamil 19,111 Reputation points Microsoft Employee2023-11-16T23:01:53.94+00:00 Hi @Ade Runsewe , are you able to create a new playbook? Also, can you run through this document and verify you still have the same required permissions? Nobody changed your permissions? Also, can you verify you're in the right directory/subscription? Can you refresh the page? Other than that, I'm not sure we can diagnose this without opening a support ticket. If these steps don't help, please send me an email at "azcommunity@microsoft.com" with subject "ATTN: James Hamil" and your subscription ID. I can open a free support ticket for you.
Best,
James
-
James Hamil 19,111 Reputation points Microsoft Employee
2023-11-16T23:12:29.8433333+00:00 @Ade Runsewe Also, can you check the resource groups that they were created in? They should still be there even if there's a bug with Sentinel.
Sign in to comment