- Get started
- Build
- HTTP Request
- How connector nodes work
- Create a connection
- Sales and customer relationships
- Customer support and help desk
- Messaging and meetings
- Email
- Marketing
- Social media
- Files, documents, and e-signature
- Projects, collaboration, and code
- People and recruiting
- Finance and commerce
- AI models and agents
- Speech, vision, and language
- Data and location
- Cloud, identity, and security
- Deploy and run
- Examples
- Reference
Microsoft Azure Sentinel
Look up the Microsoft Azure Sentinel connector: its actions in alphabetical order, and the sign-in methods of a Microsoft Azure Sentinel connection.
The Microsoft Azure Sentinel connector lets a workflow create, update, close, and comment on security incidents. In the Add node panel, it's in the Connector category, under Microsoft Azure Sentinel. How connector nodes work describes how a connector node is set up.
This page lists what the connector can do in Maestro Automate. Select an action to see how to configure it.
Actions
Each action is a node that does one thing in Microsoft Azure Sentinel.
| Action | What it does |
|---|---|
| Add Comment to Incident | Add a new Comment To an Incident. |
| Close Incident | Close an Incident with Closing Details. |
| Create New Incident | Create New Incident. |
| Get Incident Comments | Get all comments from an Incident. |
| Get Incident Data | Get Incident Data. |
| List Alerts | List Alerts. |
| List Entities | List Entities. |
| List Incidents | List Incidents. |
| Update Incident | Update an incident. |
Connection
A Microsoft Azure Sentinel node signs in through a connection. Create a connection describes how to create one from the node. On the Connect to page, you sign in with this method:
| Sign-in method | What you need |
|---|---|
| OAuth 2.0 | Client ID - The client ID of the registered application in AAD. You can find it in the Overview section of your Microsoft Azure application registration; Client secret - The client secret of the registered application in AAD. You can create a new client secret in the Certificates & secrets section of your Microsoft Azure application registration; Workspace name - The name of your Azure Sentinel workspace. You can find it in the Azure portal under Azure Sentinel > Settings > Workspaces; Resource group name - The name of the resource group that contains your Azure Sentinel workspace. You can find it in the Azure portal under Azure Sentinel > Settings > Workspaces; Subscription ID - The subscription ID associated with your Azure Sentinel workspace. You can find it in the Azure portal under Azure Sentinel > Settings > Workspaces; Tenant ID - The tenant ID of your Azure Active Directory. You can find it in the Azure portal under Azure Active Directory > Overview. |
Microsoft Azure Sentinel authentication in the Integration Service guide describes the full connection setup, including prerequisites and advanced settings.
Next steps
- Connector: every connector, grouped by area.
- Create a connection: sign a workflow in to an app.
- Community: ask questions and share workflows with other builders on the UiPath Forum.