Triggers a workflow on a new monitor event.

Workflows based on this trigger will search for new events every 5 minutes.

​
Parameters

ParameterDescription
Subscription IDThe Azure subscription Id.

​
Sample Event

{
	"authorization": {
		"action": "Microsoft.Logic/workflows/triggers/listCallbackUrl/action",
		"scope": "/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident"
	},
	"caller": "02e0f85b-50e9-4007-88eb-7a792809d706",
	"channels": "Operation",
	"claims": {
		"aud": "https://management.azure.com",
		"iss": "https://sts.windows.net/b903ec40-8a55-469a-81bf-2f6a26736618/",
		"iat": "1687768110",
		"nbf": "1687768110",
		"exp": "1687854810",
		"aio": "E2ZgYPgXIdZ29ZB2k+BOg0Ov7wW9AQA=",
		"appid": "98785600-1bb7-4fb9-b9fa-19afe2c8a360",
		"appidacr": "2",
		"http://schemas.microsoft.com/identity/claims/identityprovider": "https://sts.windows.net/b903ec40-8a55-469a-81bf-2f6a26736618/",
		"idtyp": "app",
		"http://schemas.microsoft.com/identity/claims/objectidentifier": "02e0f85b-50e9-4007-88eb-7a792809d706",
		"rh": "0.AYIAQOwDuVWKmkaBvy9qJnNmGEZIf3kAutdPukPawfj2MBOCAAA.",
		"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "02e0f85b-50e9-4007-88eb-7a792809d706",
		"http://schemas.microsoft.com/identity/claims/tenantid": "b903ec40-8a55-469a-81bf-2f6a26736618",
		"uti": "JfAHPSDhnUyInlZxxAAwAA",
		"ver": "1.0",
		"xms_tcdt": "1625399756"
	},
	"correlationId": "b9c6a507-02b2-46cc-b10e-0e3c074fd7a8",
	"description": "",
	"eventDataId": "b8b923eb-72af-4d23-8269-b464f686d3e1",
	"eventName": {
		"value": "EndRequest",
		"localizedValue": "End request"
	},
	"category": {
		"value": "Administrative",
		"localizedValue": "Administrative"
	},
	"httpRequest": {
		"clientRequestId": "",
		"clientIpAddress": "52.224.188.169",
		"method": "POST",
		"uri": "https://management.azure.com/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident/listCallbackUrl?api-version=2019-05-01"
	},
	"id": "/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident/events/b8b923eb-72af-4d23-8269-b464f686d3e1/ticks/638233673110499914",
	"level": "Informational",
	"resourceGroupName": "SentinelGroup",
	"resourceProviderName": {
		"value": "Microsoft.Logic",
		"localizedValue": "Microsoft.Logic"
	},
	"resourceId": "/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident",
	"resourceType": {
		"value": "Microsoft.Logic/workflows/triggers",
		"localizedValue": "Microsoft.Logic/workflows/triggers"
	},
	"operationId": "b9c6a507-02b2-46cc-b10e-0e3c074fd7a8",
	"operationName": {
		"value": "Microsoft.Logic/workflows/triggers/listCallbackUrl/action",
		"localizedValue": "List Trigger Callback URL"
	},
	"properties": {
		"statusCode": "OK",
		"serviceRequestId": null,
		"eventCategory": "Administrative",
		"entity": "/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident",
		"message": "Microsoft.Logic/workflows/triggers/listCallbackUrl/action",
		"hierarchy": "a303ce4e-302e-471a-8188-4dab418ce9ea"
	},
	"status": {
		"value": "Succeeded",
		"localizedValue": "Succeeded"
	},
	"subStatus": {
		"value": "OK",
		"localizedValue": "OK (HTTP Status Code: 200)"
	},
	"eventTimestamp": "2023-06-26T09:08:31.0499914Z",
	"submissionTimestamp": "2023-06-26T09:12:56Z",
	"subscriptionId": "a303ce4e-302e-471a-8188-4dab418ce9ea",
	"tenantId": "b903ec40-8a55-469a-81bf-2f6a26736618"
}

Was this page helpful?