Skip to main content

New Monitor Event

Triggers a workflow on a new monitor event.

info

Automations based on this trigger will search for new events every 5 minutes.

Parameters​

ParameterDescription
Subscription IDThe Azure subscription Id.

Sample Event​

{
    "authorization": {
        "action": "Microsoft.Logic/workflows/triggers/listCallbackUrl/action",
        "scope": "/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident"
    },
    "caller": "02e0f85b-50e9-4007-88eb-7a792809d706",
    "channels": "Operation",
    "claims": {
        "aud": "https://management.azure.com",
        "iss": "https://sts.windows.net/b903ec40-8a55-469a-81bf-2f6a26736618/",
        "iat": "1687768110",
        "nbf": "1687768110",
        "exp": "1687854810",
        "aio": "E2ZgYPgXIdZ29ZB2k+BOg0Ov7wW9AQA=",
        "appid": "98785600-1bb7-4fb9-b9fa-19afe2c8a360",
        "appidacr": "2",
        "http://schemas.microsoft.com/identity/claims/identityprovider": "https://sts.windows.net/b903ec40-8a55-469a-81bf-2f6a26736618/",
        "idtyp": "app",
        "http://schemas.microsoft.com/identity/claims/objectidentifier": "02e0f85b-50e9-4007-88eb-7a792809d706",
        "rh": "0.AYIAQOwDuVWKmkaBvy9qJnNmGEZIf3kAutdPukPawfj2MBOCAAA.",
        "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "02e0f85b-50e9-4007-88eb-7a792809d706",
        "http://schemas.microsoft.com/identity/claims/tenantid": "b903ec40-8a55-469a-81bf-2f6a26736618",
        "uti": "JfAHPSDhnUyInlZxxAAwAA",
        "ver": "1.0",
        "xms_tcdt": "1625399756"
    },
    "correlationId": "b9c6a507-02b2-46cc-b10e-0e3c074fd7a8",
    "description": "",
    "eventDataId": "b8b923eb-72af-4d23-8269-b464f686d3e1",
    "eventName": {
        "value": "EndRequest",
        "localizedValue": "End request"
    },
    "category": {
        "value": "Administrative",
        "localizedValue": "Administrative"
    },
    "httpRequest": {
        "clientRequestId": "",
        "clientIpAddress": "52.224.188.169",
        "method": "POST",
        "uri": "https://management.azure.com/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident/listCallbackUrl?api-version=2019-05-01"
    },
    "id": "/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident/events/b8b923eb-72af-4d23-8269-b464f686d3e1/ticks/638233673110499914",
    "level": "Informational",
    "resourceGroupName": "SentinelGroup",
    "resourceProviderName": {
        "value": "Microsoft.Logic",
        "localizedValue": "Microsoft.Logic"
    },
    "resourceId": "/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident",
    "resourceType": {
        "value": "Microsoft.Logic/workflows/triggers",
        "localizedValue": "Microsoft.Logic/workflows/triggers"
    },
    "operationId": "b9c6a507-02b2-46cc-b10e-0e3c074fd7a8",
    "operationName": {
        "value": "Microsoft.Logic/workflows/triggers/listCallbackUrl/action",
        "localizedValue": "List Trigger Callback URL"
    },
    "properties": {
        "statusCode": "OK",
        "serviceRequestId": null,
        "eventCategory": "Administrative",
        "entity": "/subscriptions/a303ce4e-302e-471a-8188-4dab418ce9ea/resourceGroups/SentinelGroup/providers/Microsoft.Logic/workflows/sentinel-webhook/triggers/Microsoft_Sentinel_incident",
        "message": "Microsoft.Logic/workflows/triggers/listCallbackUrl/action",
        "hierarchy": "a303ce4e-302e-471a-8188-4dab418ce9ea"
    },
    "status": {
        "value": "Succeeded",
        "localizedValue": "Succeeded"
    },
    "subStatus": {
        "value": "OK",
        "localizedValue": "OK (HTTP Status Code: 200)"
    },
    "eventTimestamp": "2023-06-26T09:08:31.0499914Z",
    "submissionTimestamp": "2023-06-26T09:12:56Z",
    "subscriptionId": "a303ce4e-302e-471a-8188-4dab418ce9ea",
    "tenantId": "b903ec40-8a55-469a-81bf-2f6a26736618"
}