Azure / Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.
https://azure.microsoft.com/en-us/services/azure-sentinel/
MIT License
4.37k stars 2.89k forks source link

Unable to add single honeypot monitoring - LogicApp issue HoneyTokensAdd2WLKV #10694

Open Ryk-Send opened 1 week ago

Ryk-Send commented 1 week ago

Describe the bug Clicking on the ling to monitor a honeypot item I get the following response: { "error": { "code": "NoResponse", "message": "The server did not receive a response from an upstream server. Request tracking id '0858482304889453597723302548xxxxx." } }

When I dig deeper I can see in the following LogicApp: "HoneyTokensAdd2WLKV" there is an error in the "Watchlists - Add a new watchlist item" step and the error is: "Unable to initialize operation details for swagger based operation - Watchlists_-_Add_a_new_watchlist_item. Error details - The API 'azuresentinel-honeytokens' could not be found."

image

v-rusraut commented 5 days ago

Hi @Ryk-Send, Thanks for flagging this issue, we will investigate this issue and get back to you with some updates by 05 July 2024. Thanks!