briandelmsft / SentinelAutomationModules

The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel
MIT License
212 stars 58 forks source link

STAT Coordinator - Retry Policy and Invalid Module Error #332

Closed briandelmsft closed 1 year ago

briandelmsft commented 1 year ago

The Scoring Module Path in the Coordinator does not have the retry policy disabled. Since by default the custom connector enables retries having a retry policy here is redundant and leads to many additional retries in a failure case

Also, the default return error for an invalid module is 500, this will also lead to unnecessary retries as an invalid module will still be invalid on retry. Change this to a 400