Actions31
- Instance Actions
- Alert Rule Actions
- Automation Rule Actions
- Incident Actions
- Incident Comment Actions
- Query Actions
Automation Rule → Get Many
AI-generatedOverview
This node interacts with the Microsoft Sentinel API to retrieve multiple automation rules from a specified Sentinel instance. It is useful for scenarios where users need to list or manage automation rules within their Azure Sentinel workspace, such as auditing, monitoring, or integrating automation rules into workflows.
Use Case Examples
- Retrieve all automation rules from a specific Sentinel workspace to display or process them in an automation pipeline.
- Fetch automation rules to analyze or modify them programmatically within an n8n workflow.
Properties
| Name | Meaning |
|---|---|
| Sentinel Instance | The specific Microsoft Sentinel instance to use, identified by subscription ID, resource group, and workspace name. It can be selected from a list, entered as a path, or provided as a URL. |
| Options | Additional options for the operation, including whether to simplify the response. |
| Debug | Enable debug mode to log request and response details for troubleshooting. |
| Request Options | Settings for request behavior such as batching, SSL certificate validation, proxy, and timeout. |
Output
JSON
id- Unique identifier of the automation rule.name- Name of the automation rule.type- Type of the resource, typically indicating it is an automation rule.properties- Detailed properties of the automation rule, including conditions, actions, and metadata.
Dependencies
- Requires an OAuth2 API credential for Microsoft Sentinel to authenticate requests.
Troubleshooting
- Ensure the Sentinel instance identifier is correctly formatted as per the selected mode (Path, URL, or List).
- If the API returns authentication errors, verify that the OAuth2 credentials are valid and have necessary permissions.
- Timeouts can occur if the requestOptions timeout is set too low; increase it if needed.
- If SSL certificate validation fails and you trust the endpoint, enable 'Ignore SSL Issues' option.