Skip to main content

alerts_suppression_rules

Creates, updates, deletes, gets or lists an alerts_suppression_rules resource.

Overview

Namealerts_suppression_rules
TypeResource
Idazure.security.alerts_suppression_rules

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstring (arm-id)Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
namestringThe name of the resource
propertiesobjectdescribes AlertsSuppressionRule properties
systemDataobjectMetadata pertaining to creation and last modification of the resource.
typestringThe type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectsubscriptionId, alertsSuppressionRuleNameapi-versionGet dismiss rule, with name: {alertsSuppressionRuleName}, for the given subscription
listselectsubscriptionIdapi-version, AlertTypeList of all the dismiss rules for the given subscription
updatereplacesubscriptionId, alertsSuppressionRuleNameapi-versionUpdate existing rule or create new rule if it doesn't exist
deletedeletesubscriptionId, alertsSuppressionRuleNameapi-versionDelete dismiss alert rule for this subscription.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
alertsSuppressionRuleNamestringThe unique name of the suppression alert rule
subscriptionIdstringAzure subscription ID
AlertTypestringType of the alert to get rules for
api-versionstringAPI version for the operation

SELECT examples

Get dismiss rule, with name: {alertsSuppressionRuleName}, for the given subscription

SELECT
id,
name,
properties,
systemData,
type
FROM azure.security.alerts_suppression_rules
WHERE subscriptionId = '{{ subscriptionId }}' -- required
AND alertsSuppressionRuleName = '{{ alertsSuppressionRuleName }}' -- required
AND api-version = '{{ api-version }}'
;

REPLACE examples

Update existing rule or create new rule if it doesn't exist

REPLACE azure.security.alerts_suppression_rules
SET
data__properties = '{{ properties }}'
WHERE
subscriptionId = '{{ subscriptionId }}' --required
AND alertsSuppressionRuleName = '{{ alertsSuppressionRuleName }}' --required
AND api-version = '{{ api-version}}'
RETURNING
id,
name,
properties,
systemData,
type;

DELETE examples

Delete dismiss alert rule for this subscription.

DELETE FROM azure.security.alerts_suppression_rules
WHERE subscriptionId = '{{ subscriptionId }}' --required
AND alertsSuppressionRuleName = '{{ alertsSuppressionRuleName }}' --required
AND api-version = '{{ api-version }}'
;