Microsoft Graph API Application Not Pulling Alerts for Microsoft SentinelIssue A Customer has an integration with Security Incident Response (SIR) and Microsoft Graph Security API - Alert Ingestion. They are receiving Alerts from Microsoft Defender which are creating Security Incidents in ServiceNow, but Alerts are not being received from Microsoft Azure Sentinel, so Security Incidents are not created for Sentinel. ReleaseAllCauseA different plugin is used for the Microsoft Azure Sentinel integration.Resolution1. In ServiceNow, we track Microsoft Azure Sentinel integrations via a different plugin other than the 'Microsoft Graph Security API Alert Ingestion Integration For Security Operations' plugin. Issues from Microsoft Sentinel are tracked via plugin 'Microsoft Azure Sentinel Incident Ingestion Integration For Security Operations'.2. Review the following documentation to understand the difference between Microsoft Azure Sentinel and Microsoft Graph Security API integrations with SIR:Comparing Microsoft Azure Sentinel and Microsoft Graph Security API integrations with SIR2. Install and configure the Microsoft Azure Sentinel Incident Ingestion Integration For Security Operations plugin:Microsoft Azure Sentinel Incident Ingestion Integration For Security OperationsApp id: sn_sec_sentinel3. After installation, automation for Microsoft Azure Sentinel incident creates updates for Security Incident Response so that you can create and close security incidents for Microsoft Azure Sentinel integration.