Documentation

{{docApp.title}}

{{docApp.description}}

How can we help?

{{docApp.searchError}}
{{product.name}}

Searching in {{docApp.searchFilterBySpecificBookTitle}}

{{docApp.searchResultFilteredItems.length}} results for: {{docApp.currentResultsSearchText}} in {{docApp.searchFilterBySpecificBookTitle}}
Search results have been limited. There are a total of {{docApp.searchResponse.totalResultsAvailable}} matches.

You have an odd number of " characters in your search terms - each one needs closing with a matching " character!

{{docApp.libraryHomeViewProduct.title || docApp.libraryHomeViewProduct.id}}

{{docApp.libraryHomeViewProduct.description}}

  1. {{book.title}}

{{group.title || group.id}}

{{group.description}}

  1. {{book.title}}

{{group.title}}

Incident Comments / Create

Operation Information

Hornbill iBridge integration to create a new Incident Comment in Microsoft Sentinel.

This is a Premium Integration.

Authentication

This operation requires authentication, the details of which can be securely stored on your instance in a KeySafe Key of type Azure Automation.

To create a key of this type:

  • In the Configuration area of your Hornbill instance, navigate to Platform Configuration > Security > KeySafe;
  • Click on the + Create New Key button;
  • On the resulting Create New Key form, choose Azure Automation in the Type pick list;
  • Give the Azure Automation KeySafe key a Title (this is the name / identifier for the Azure Automation account as you will see it when using the cloud automation node in your workflows);
  • Optionally populate the Description field;
  • Click the Create Key button to create your new key;
  • Once the Key is created, you will need to connect to the target service, and your account, in order to authorize the connector app access to the listed operations. Click the Connect button and you will be redirected to the service provider in a popup window;
  • Log in to your account, and then you will be prompted to review the options you are authorizing the Hornbill connector to be allowed to perform using the chosen account;
  • Accept the review and you will be returned to your KeySafe key.

Revoking Access

If at any point you wish to revoke access to any of the above accounts from your Hornbill instance, just hit the Revoke button in the relevant KeySafe key(s).

Warning

This will revoke the rights of any existing Cloud Automation Node in your Hornbill Workflows that are using the revoked Azure Automation account, so you will need to manage these workflows accordingly.

Input Parameters

Display Name ID Type Description Required Supported Values
Subscription Id subscriptionId string The subscription ID of the instance targeted Yes None provided
Rescource Group Name resourceGroupName string The Resource Group Name of the target instance Yes None provided
Workspace Name workspaceName string The target workspace name Yes None provided
Incident ID incidentId string The ID of the incident Yes None provided
Incident Comment ID incidentCommentId string The ID of the Incident Comment Yes None provided
Comment Message message string The description of the comment you would like to leave Yes None provided

Output Parameters

Display Name ID Type Description
Status status string Return Status
Error error string Any returned errors
ID id string The ID of the new User
Title title string The title of the incident
Description description string The Incident Task Description
Incident Status incidentTaskStatus string The status of the created incident
In This Document