Skip to main content

vw_iot_security_solutions_analytics_aggregated_alerts

Creates, updates, deletes, gets or lists a vw_iot_security_solutions_analytics_aggregated_alerts resource.

Overview

Namevw_iot_security_solutions_analytics_aggregated_alerts
TypeView
Idazure.security.vw_iot_security_solutions_analytics_aggregated_alerts

Fields

See the SQL Definition (view DDL) for fields returned by this view.

SQL Definition

SELECT
id as id,
name as name,
type as type,
systemData as system_data,
tags as tags,
JSON_EXTRACT(properties, '$.alertType') as "alert_type",
JSON_EXTRACT(properties, '$.alertDisplayName') as "alert_display_name",
JSON_EXTRACT(properties, '$.aggregatedDateUtc') as "aggregated_date_utc",
JSON_EXTRACT(properties, '$.vendorName') as "vendor_name",
JSON_EXTRACT(properties, '$.reportedSeverity') as "reported_severity",
JSON_EXTRACT(properties, '$.remediationSteps') as "remediation_steps",
JSON_EXTRACT(properties, '$.description') as "description",
JSON_EXTRACT(properties, '$.count') as "count",
JSON_EXTRACT(properties, '$.effectedResourceType') as "effected_resource_type",
JSON_EXTRACT(properties, '$.systemSource') as "system_source",
JSON_EXTRACT(properties, '$.actionTaken') as "action_taken",
JSON_EXTRACT(properties, '$.logAnalyticsQuery') as "log_analytics_query",
JSON_EXTRACT(properties, '$.topDevicesList') as "top_devices_list",
subscriptionId,
resourceGroupName,
solutionName,
aggregatedAlertName
FROM azure.security.iot_security_solutions_analytics_aggregated_alerts
WHERE subscriptionId = 'replace-me' AND resourceGroupName = 'replace-me' AND solutionName = 'replace-me';