{
    "$schema": "http://adaptivecards.io/schemas/adaptive-card.json",
    "type": "AdaptiveCard",
    "version": "1.0",
    "msTeams": {
        "width": "full"
    },
    "fallbackText": "rul@{triggerBody()?['data']?['essentials']?['alertRule']} - @{triggerBody()?['data']?['essentials']?['description']}",
    "body": [
        {
            "type": "TextBlock",
            "text": "Azure Security Center Alert",
            "weight": "bolder",
            "size": "large",
            "id": "acTitle"
        },
        {
            "type": "TextBlock",
            "text": "@{triggerBody()?['data']?['essentials']?['alertRule']}",
            "weight": "Bolder",
            "wrap": true,
            "id": "acSubHeader"
        },
        {
            "type": "TextBlock",
            "text": "@{triggerBody()?['data']?['essentials']?['description']}",
            "wrap": true,
            "id": "acDescriptionArea"
        },
        {
            "type": "FactSet",
            "facts": [
                {
                    "title": "Severity:",
                    "value": "@{triggerBody()?['data']?['essentials']?['severity']}"
                },
                {
                    "title": "Detection time:",
                    "value": "@{triggerBody()?['data']?['essentials']?['firedDateTime']}"
                },
                {
                    "title": "Alert Id:",
                    "value": "@{triggerBody()?['data']?['essentials']?['alertId']}"
                }
            ],
            "id": "acFactSet"
        }
    ],
    "actions": [
      {
        "type": "Action.OpenUrl",
        "title": "See details in @{triggerBody()?['data']?['essentials']?['monitoringService']}",
        "url": "@{if(contains(createArray('Log Analytics', 'Application Insights', 'Log Alerts V2'), triggerBody()?['data']?['essentials']?['monitoringService']), triggerBody()?['data']?['alertContext']?['LinkToSearchResults'], 'https://portal.azure.com')}"
      }
    ]
}