You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When you work with Azure Logic Apps in the Azure portal, you can edit your [*workflows*](logic-apps-overview.md#workflow) visually or programmatically. After you open a [*logic app* resource](logic-apps-overview.md#logic-app) in the portal, on the resource menu under **Developer**, you can select between [**Code** view](#code-view) and **Designer** view. When you want to visually develop, edit, and run your workflow, select the designer view. You can switch between the designer view and code view at any time.
15
+
When you work with Azure Logic Apps in the Azure portal, you can edit your [*workflows*](logic-apps-overview.md#logic-app-concepts) visually or programmatically. After you open a [*logic app* resource](logic-apps-overview.md#logic-app-concepts) in the portal, on the resource menu under **Developer**, you can select between [**Code** view](#code-view) and **Designer** view. When you want to visually develop, edit, and run your workflow, select the designer view. You can switch between the designer view and code view at any time.
16
16
17
17
> [!IMPORTANT]
18
18
> Currently, the latest version of the designer is available only for *Standard* logic app resources, which run in the
@@ -35,7 +35,7 @@ When you select the **Designer** view, your workflow opens in the workflow desig
35
35
36
36
The latest workflow designer offers a new experience with noteworthy features and benefits, for example:
37
37
38
-
- A new layout engine that supports more complicated workflows.
38
+
- A new layout engine that supports more complicated workflows.
39
39
- You can create and view complicated workflows cleanly and easily, thanks to the new layout engine, a more compact canvas, and updates to the card-based layout.
40
40
- Add and edit steps using panels separate from the workflow layout. This change gives you a cleaner and clearer canvas to view your workflow layout. For more information, review [Add steps to workflows](#add-steps-to-workflows).
41
41
- Move between steps in your workflow on the designer using keyboard navigation.
@@ -44,25 +44,39 @@ The latest workflow designer offers a new experience with noteworthy features an
44
44
45
45
## Add steps to workflows
46
46
47
-
The workflow designer provides a visual way to add, edit, and delete steps in your workflow. As the first step in your workflow, always add a [*trigger*](logic-apps-overview.md#trigger). Then, complete your workflow by adding one or more [*actions*](logic-apps-overview.md#action).
47
+
The workflow designer provides a visual way to add, edit, and delete steps in your workflow. As the first step in your workflow, always add a [*trigger*](logic-apps-overview.md#logic-app-concepts). Then, complete your workflow by adding one or more [*actions*](logic-apps-overview.md#action).
48
48
49
49
To add either the trigger or an action your workflow, follow these steps:
50
50
51
51
1. Open your workflow in the designer.
52
-
1. On the designer, select **Choose an operation**, which opens a pane named either **Add a trigger** or **Add an action**.
52
+
53
+
1. On the designer, select **Choose an operation**, which opens a pane named either **Add a trigger** or **Add an action**.
54
+
53
55
1. In the opened pane, find an operation by filtering the list in the following ways:
54
-
1. Enter a service, connector, or category in the search bar to show related operations. For example, `Azure Cosmos DB` or `Data Operations`.
55
-
1. If you know the specific operation you want to use, enter the name in the search bar. For example, `Call an Azure function` or `When an HTTP request is received`.
56
-
1. Select the **Built-in** tab to only show categories of [*built-in operations*](logic-apps-overview.md#built-in-operations). Or, select the **Azure** tab to show other categories of operations available through Azure.
57
-
1. You can view only triggers or actions by selecting the **Triggers** or **Actions** tab. However, you can only add a trigger as the first step and an action as a following step. Based on the operation category, only triggers or actions might be available.
58
-
:::image type="content" source="./media/designer-overview/designer-add-operation.png" alt-text="Screenshot of the Logic Apps designer in the Azure portal, showing a workflow being edited to add a new operation." lightbox="./media/designer-overview/designer-add-operation.png":::
59
-
1. Select the operation you want to use.
60
-
:::image type="content" source="./media/designer-overview/designer-filter-operations.png" alt-text="Screenshot of the Logic Apps designer, showing a pane of possible operations that can be filtered by service or name." lightbox="./media/designer-overview/designer-filter-operations.png":::
56
+
57
+
1. Enter a service, connector, or category in the search bar to show related operations. For example, `Azure Cosmos DB` or `Data Operations`.
58
+
59
+
1. If you know the specific operation you want to use, enter the name in the search bar. For example, `Call an Azure function` or `When an HTTP request is received`.
60
+
61
+
1. Select the **Built-in** tab to only show categories of [*built-in operations*](logic-apps-overview.md#logic-app-concepts). Or, select the **Azure** tab to show other categories of operations available through Azure.
62
+
63
+
1. You can view only triggers or actions by selecting the **Triggers** or **Actions** tab. However, you can only add a trigger as the first step and an action as a following step. Based on the operation category, only triggers or actions might be available.
64
+
65
+
:::image type="content" source="./media/designer-overview/designer-add-operation.png" alt-text="Screenshot of the Logic Apps designer in the Azure portal, showing a workflow being edited to add a new operation." lightbox="./media/designer-overview/designer-add-operation.png":::
66
+
67
+
1. Select the operation you want to use.
68
+
69
+
:::image type="content" source="./media/designer-overview/designer-filter-operations.png" alt-text="Screenshot of the Logic Apps designer, showing a pane of possible operations that can be filtered by service or name." lightbox="./media/designer-overview/designer-filter-operations.png":::
70
+
61
71
1. Configure your trigger or action as needed.
62
-
1. Mandatory fields have a red asterisk (*) in front of the name.
63
-
1. Some triggers and actions might require you to create a connection to another service. You might need to sign into an account, or enter credentials for a service. For example, if you want to use the Office 365 Outlook connector to send an email, you need to authorize your Outlook email account.
64
-
1. Some triggers and actions use dynamic content, where you can select variables instead of entering information or expressions.
65
-
1. Select **Save** in the toolbar to save your changes. This step also verifies that your workflow is valid.
72
+
73
+
1. Mandatory fields have a red asterisk (*) in front of the name.
74
+
75
+
1. Some triggers and actions might require you to create a connection to another service. You might need to sign into an account, or enter credentials for a service. For example, if you want to use the Office 365 Outlook connector to send an email, you need to authorize your Outlook email account.
76
+
77
+
1. Some triggers and actions use dynamic content, where you can select variables instead of entering information or expressions.
78
+
79
+
1. Select **Save** in the toolbar to save your changes. This step also verifies that your workflow is valid.
66
80
67
81
## Code view
68
82
@@ -73,7 +87,6 @@ The **Code** view allows you to directly edit the workflow definition file in JS
73
87
74
88
:::image type="content" source="./media/designer-overview/code-view.png" alt-text="Screenshot of a Logic Apps workflow in Code view, showing the JSON workflow definition being edited in the Azure portal.":::
Copy file name to clipboardExpand all lines: articles/sentinel/automate-incident-handling-with-automation-rules.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -150,7 +150,7 @@ Actions can be defined to run when the conditions (see above) are met. You can d
150
150
151
151
Also, you can define an action to [**run a playbook**](tutorial-respond-threats-playbook.md), in order to take more complex response actions, including any that involve external systems. The playbooks available to be used in an automation rule depend on the [**trigger**](automate-responses-with-playbooks.md#azure-logic-apps-basic-concepts) on which the playbooks *and* the automation rule are based: Only incident-trigger playbooks can be run from incident-trigger automation rules, and only alert-trigger playbooks can be run from alert-trigger automation rules. You can define multiple actions that call playbooks, or combinations of playbooks and other actions. Actions will run in the order in which they are listed in the rule.
152
152
153
-
Playbooks using [either version of Logic Apps (Standard or Consumption)](automate-responses-with-playbooks.md#two-types-of-logic-apps) will be available to run from automation rules.
153
+
Playbooks using [either version of Azure Logic Apps (Standard or Consumption)](automate-responses-with-playbooks.md#logic-app-types) will be available to run from automation rules.
Copy file name to clipboardExpand all lines: articles/sentinel/automate-responses-with-playbooks.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -57,7 +57,7 @@ Playbooks in Microsoft Sentinel are based on workflows built in [Azure Logic App
57
57
58
58
Azure Logic Apps communicates with other systems and services using connectors. The following is a brief explanation of connectors and some of their important attributes:
59
59
60
-
-**Managed connector:** A set of actions and triggers that wrap around API calls to a particular product or service. Azure Logic Apps offers hundreds of connectors to communicate with both Microsoft and non-Microsoft services. For more information, see [List of all Logic Apps connectors and their documentation](/connectors/connector-reference/connector-reference-logicapps-connectors)
60
+
-**Managed connector:** A set of actions and triggers that wrap around API calls to a particular product or service. Azure Logic Apps offers hundreds of connectors to communicate with both Microsoft and non-Microsoft services. For more information, see [Azure Logic Apps connectors and their documentation](/connectors/connector-reference/connector-reference-logicapps-connectors)
61
61
62
62
-**Custom connector:** You might want to communicate with services that aren't available as prebuilt connectors. Custom connectors address this need by allowing you to create (and even share) a connector and define its own triggers and actions. For more information, see [Create your own custom Azure Logic Apps connectors](/connectors/custom-connectors/create-logic-apps-connector).
63
63
@@ -81,7 +81,7 @@ Microsoft Sentinel now supports the following logic app resource types:
81
81
82
82
This logic app type offers higher performance, fixed pricing, multiple workflow capability, easier API connections management, native network capabilities such as support for virtual networks and private endpoints, built-in CI/CD features, better Visual Studio Code integration, an updated workflow designer, and more.
83
83
84
-
To use this logic app version, create new Standard logic app playbooks in Microsoft Sentinel. You can use these playbooks in the same ways that you use Consumption logic app playbooks:
84
+
To use this logic app version, create new Standard playbooks in Microsoft Sentinel. You can use these playbooks in the same ways that you use Consumption playbooks:
85
85
86
86
- Attach them to automation rules and/or analytics rules.
87
87
- Run them on demand, from both incidents and alerts.
@@ -97,7 +97,7 @@ There are many differences between these two resource types, some of which affec
97
97
98
98
### Permissions required
99
99
100
-
To give your SecOps team the ability to use Logic Apps to create and run playbooks in Microsoft Sentinel, assign Azure roles to your security operations team or to specific users on the team. The following describes the different available roles, and the tasks for which they should be assigned:
100
+
To give your SecOps team the ability to use Azure Logic Apps to create and run playbooks in Microsoft Sentinel, assign Azure roles to your security operations team or to specific users on the team. The following describes the different available roles, and the tasks for which they should be assigned:
101
101
102
102
#### Roles for Azure Logic Apps
103
103
@@ -269,17 +269,17 @@ In either of these panels, you'll see two tabs: **Playbooks** and **Runs**.
269
269
- In the **Playbooks** tab, you'll see a list of all the playbooks that you have access to and that use the appropriate trigger - the **Microsoft Sentinel Incident** trigger for incident playbooks and the **Microsoft Sentinel Alert** trigger for alert playbooks. Each playbook in the list has a **Run** button which you select to run the playbook immediately.
270
270
If you want to run an incident-trigger playbook that you don't see in the list, [see the note about Microsoft Sentinel permissions above](#incident-creation-automated-response).
271
271
272
-
- In the **Runs** tab, you'll see a list of all the times any playbook has been run on the incident or alert you selected. It might take a few seconds for any just-completed run to appear in this list. Selecting a specific run will open the full run log in Logic Apps.
272
+
- In the **Runs** tab, you'll see a list of all the times any playbook has been run on the incident or alert you selected. It might take a few seconds for any just-completed run to appear in this list. Selecting a specific run will open the full run log in Azure Logic Apps.
273
273
274
274
## Manage your playbooks
275
275
276
276
In the **Active playbooks** tab, there appears a list of all the playbooks which you have access to, filtered by the subscriptions which are currently displayed in Azure. The subscriptions filter is available from the **Directory + subscription** menu in the global page header.
277
277
278
-
Clicking on a playbook name directs you to the playbook's main page in Logic Apps. The **Status** column indicates if it is enabled or disabled.
278
+
Clicking on a playbook name directs you to the playbook's main page in Azure Logic Apps. The **Status** column indicates if it is enabled or disabled.
279
279
280
280
The **Plan** column indicates whether the playbook uses the **Standard** or **Consumption** resource type in Azure Logic Apps. You can filter the list by plan type to see only one type of playbook. You'll notice that playbooks of the Standard type use the `LogicApp/Workflow` naming convention. This convention reflects the fact that a Standard playbook represents a workflow that exists *alongside other workflows* in a single Logic App.
281
281
282
-
**Trigger kind** represents the Logic Apps trigger that starts this playbook.
282
+
**Trigger kind** represents the Azure Logic Apps trigger that starts this playbook.
283
283
284
284
| Trigger kind | Indicates component types in playbook |
285
285
|-|-|
@@ -289,17 +289,17 @@ The **Plan** column indicates whether the playbook uses the **Standard** or **Co
289
289
|**Not initialized**| The playbook has been created, but contains no components (triggers or actions). |
290
290
|
291
291
292
-
In the playbook's Logic App page, you can see more information about the playbook, including a log of all the times it has run, and the result (success or failure, and other details). You can also enter the Logic Apps Designer and edit the playbook directly, if you have the appropriate permissions.
292
+
In the playbook's Azure Logic Apps page, you can see more information about the playbook, including a log of all the times it has run, and the result (success or failure, and other details). You can also open the workflow designer in Azure Logic Apps, and edit the playbook directly, if you have the appropriate permissions.
293
293
294
294
### API connections
295
295
296
-
API connections are used to connect Logic Apps to other services. Every time a new authentication to a Logic Apps connector is made, a new resource of type **API connection** is created, and contains the information provided when configuring access to the service.
296
+
API connections are used to connect Azure Logic Apps to other services. Every time a new authentication is made for a connector in Azure Logic Apps, a new resource of type **API connection** is created, and contains the information provided when configuring access to the service.
297
297
298
298
To see all the API connections, enter *API connections* in the header search box of the Azure portal. Note the columns of interest:
299
299
300
300
- Display name - the "friendly" name you give to the connection every time you create one.
301
301
- Status - indicates the connection status: error, connected.
302
-
- Resource group - API connections are created in the resource group of the playbook (Logic Apps) resource.
302
+
- Resource group - API connections are created in the resource group of the playbook (Azure Logic Apps) resource.
303
303
304
304
Another way to view API connections would be to go to the **All Resources** blade and filter it by type *API connection*. This way allows the selection, tagging, and deletion of multiple connections at once.
Copy file name to clipboardExpand all lines: articles/sentinel/tutorial-respond-threats-playbook.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -78,7 +78,7 @@ Follow these steps to create a new playbook in Microsoft Sentinel:
78
78
79
79
1. The drop-down menu that appears under **Create** gives you three choices for creating playbooks:
80
80
81
-
1. If you're creating a **Standard** playbook (the new kind - see [Two types of Logic Apps](automate-responses-with-playbooks.md#two-types-of-logic-apps)), select **Blank playbook** and then follow the steps in the **Logic Apps Standard** tab below.
81
+
1. If you're creating a **Standard** playbook (the new kind - see [Logic app types](automate-responses-with-playbooks.md#logic-app-types)), select **Blank playbook** and then follow the steps in the **Logic Apps Standard** tab below.
82
82
83
83
1. If you're creating a **Consumption** playbook (the original, classic kind), then, depending on which trigger you want to use, select either **Playbook with incident trigger** or **Playbook with alert trigger**. Then, continue following the steps in the **Logic Apps Consumption** tab below.
0 commit comments