content_packages

Creates, updates, deletes, gets or lists a content_packages resource.

Overview

Name	content_packages
Type	Resource
Id	azure.security_insight.content_packages

Fields

The following fields are returned by SELECT queries:

get

Name	Datatype	Description
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
name	string	The name of the resource.
author	object	The author of the package.
categories	object	The categories of the package.
contentId	string	The content id of the package.
contentKind	string	The package kind. Known values are: "Solution" and "Standalone". (Solution, Standalone)
contentProductId	string	Unique ID for the content. It should be generated based on the contentId, contentKind and the contentVersion of the package.
contentSchemaVersion	string	The version of the content schema.
dependencies	object	The support tier of the package.
description	string	The description of the package.
displayName	string	The display name of the package.
etag	string	Etag of the azure resource.
firstPublishDate	string (date)	first publish date package item.
icon	string	the icon identifier. this id can later be fetched from the content metadata.
isDeprecated	string	Flag indicates if this template is deprecated. Known values are: "true" and "false". (true, false)
isFeatured	string	Flag indicates if this package is among the featured list. Known values are: "true" and "false". (true, false)
isNew	string	Flag indicates if this is a newly published package. Known values are: "true" and "false". (true, false)
isPreview	string	Flag indicates if this package is in preview. Known values are: "true" and "false". (true, false)
lastPublishDate	string (date)	last publish date for the package item.
providers	array	Providers for the package item.
publisherDisplayName	string	The publisher display name of the package.
source	object	The source of the package.
support	object	The support tier of the package.
systemData	object	Azure Resource Manager metadata containing createdBy and modifiedBy information.
threatAnalysisTactics	array	the tactics the resource covers.
threatAnalysisTechniques	array	the techniques the resource covers, these have to be aligned with the tactics being used.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".
version	string	the latest version number of the package.

list

Name	Datatype	Description
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
name	string	The name of the resource.
author	object	The author of the package.
categories	object	The categories of the package.
contentId	string	The content id of the package.
contentKind	string	The package kind. Known values are: "Solution" and "Standalone". (Solution, Standalone)
contentProductId	string	Unique ID for the content. It should be generated based on the contentId, contentKind and the contentVersion of the package.
contentSchemaVersion	string	The version of the content schema.
dependencies	object	The support tier of the package.
description	string	The description of the package.
displayName	string	The display name of the package.
etag	string	Etag of the azure resource.
firstPublishDate	string (date)	first publish date package item.
icon	string	the icon identifier. this id can later be fetched from the content metadata.
isDeprecated	string	Flag indicates if this template is deprecated. Known values are: "true" and "false". (true, false)
isFeatured	string	Flag indicates if this package is among the featured list. Known values are: "true" and "false". (true, false)
isNew	string	Flag indicates if this is a newly published package. Known values are: "true" and "false". (true, false)
isPreview	string	Flag indicates if this package is in preview. Known values are: "true" and "false". (true, false)
lastPublishDate	string (date)	last publish date for the package item.
providers	array	Providers for the package item.
publisherDisplayName	string	The publisher display name of the package.
source	object	The source of the package.
support	object	The support tier of the package.
systemData	object	Azure Resource Manager metadata containing createdBy and modifiedBy information.
threatAnalysisTactics	array	the tactics the resource covers.
threatAnalysisTechniques	array	the techniques the resource covers, these have to be aligned with the tactics being used.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".
version	string	the latest version number of the package.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	resource_group_name, workspace_name, package_id, subscription_id		Gets an installed packages by its id.
list	select	resource_group_name, workspace_name, subscription_id	$filter, $orderby, $search, $count, $top, $skip, $skipToken	Gets all installed packages.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
package_id	string	package Id. Required.
resource_group_name	string	The name of the resource group. The name is case insensitive. Required.
subscription_id	string
workspace_name	string	The name of the monitor workspace. Required.
$count	boolean	Instructs the server to return only object count without actual body. Optional. Default value is None.
$filter	string	Filters the results, based on a Boolean condition. Optional. Default value is None.
$orderby	string	Sorts the results. Optional. Default value is None.
$search	string	Searches for a substring in the response. Optional. Default value is None.
$skip	integer	Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left. Default value is None.
$skipToken	string	Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional. Default value is None.
$top	integer	Returns only the first n results. Optional. Default value is None.

SELECT examples

get

Gets an installed packages by its id.

SELECT
id,
name,
author,
categories,
contentId,
contentKind,
contentProductId,
contentSchemaVersion,
dependencies,
description,
displayName,
etag,
firstPublishDate,
icon,
isDeprecated,
isFeatured,
isNew,
isPreview,
lastPublishDate,
providers,
publisherDisplayName,
source,
support,
systemData,
threatAnalysisTactics,
threatAnalysisTechniques,
type,
version
FROM azure.security_insight.content_packages
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND workspace_name = '{{ workspace_name }}' -- required
AND package_id = '{{ package_id }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;

list

Gets all installed packages.

SELECT
id,
name,
author,
categories,
contentId,
contentKind,
contentProductId,
contentSchemaVersion,
dependencies,
description,
displayName,
etag,
firstPublishDate,
icon,
isDeprecated,
isFeatured,
isNew,
isPreview,
lastPublishDate,
providers,
publisherDisplayName,
source,
support,
systemData,
threatAnalysisTactics,
threatAnalysisTechniques,
type,
version
FROM azure.security_insight.content_packages
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND workspace_name = '{{ workspace_name }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
AND $filter = '{{ $filter }}'
AND $orderby = '{{ $orderby }}'
AND $search = '{{ $search }}'
AND $count = '{{ $count }}'
AND $top = '{{ $top }}'
AND $skip = '{{ $skip }}'
AND $skipToken = '{{ $skipToken }}'
;