How frequently Azure security center updates recommendations?

Question

I have workflow setup using Logic Apps in security center and wondering what is exact process/schedule when it's supposed to be triggered, also if it's triggered once for each violation or will be keep triggering on each run?

Answer 1

Hi artisticcheese,

I believe this article has got the answer to your query:
https://learn.microsoft.com/en-us/azure/security-center/security-center-using-recommendations

Security Center automatically runs continuous scans to analyze the security state of your Azure resources. When Security Center identifies potential security vulnerabilities, it creates recommendations that guide you through the process of configuring the needed security controls. Security Center updates its recommendations within 24 hours, with the following exceptions:

• Operating system security configuration recommendations are updated within 48 hours
• Endpoint Protection issues recommendations are updated within 8 hours

Answer 2

Does it mean workflow is triggered only once for failure or each run?