Skip to main content

alerts_resource_group_levels

Creates, updates, deletes, gets or lists an alerts_resource_group_levels resource.

Overview

Namealerts_resource_group_levels
TypeResource
Idazure.security.alerts_resource_group_levels

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstring (arm-id)Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
namestringThe name of the resource
propertiesobjectdescribes security alert properties.
systemDataobjectAzure Resource Manager metadata containing createdBy and modifiedBy information.
typestringThe type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectsubscriptionId, resourceGroupName, ascLocation, alertNameapi-versionGet an alert that is associated a resource group or a resource in a resource group

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
alertNamestringName of the alert object
ascLocationstringThe location where ASC stores the data of the subscription. can be retrieved from Get locations
resourceGroupNamestringThe name of the resource group within the user's subscription. The name is case insensitive.
subscriptionIdstringAzure subscription ID
api-versionstringAPI version for the operation

SELECT examples

Get an alert that is associated a resource group or a resource in a resource group

SELECT
id,
name,
properties,
systemData,
type
FROM azure.security.alerts_resource_group_levels
WHERE subscriptionId = '{{ subscriptionId }}' -- required
AND resourceGroupName = '{{ resourceGroupName }}' -- required
AND ascLocation = '{{ ascLocation }}' -- required
AND alertName = '{{ alertName }}' -- required
AND api-version = '{{ api-version }}'
;