Send mail following the creation of an incident

Question

In Sentinel, I created an alert about the data of a create table in my workspace. So I subsequently create an incident but I can not send an email following this alert. I would like to know where and how to set the email if I can do it from Sentinel or if I need to return to my workspace ?

Answer 1

Hello, You can add an Automation Rule to your Incident, that calls a Playbook, the Playbook will send the email - there are "send email" templates

Example (very simple) Automation Rule - you just have to add the "send email" Playbook you add from the Content Hub - yours wont say "unknown playbook".