threat_intelligence_indicator_metrics

Creates, updates, deletes, gets or lists a threat_intelligence_indicator_metrics resource.

Overview

Name	threat_intelligence_indicator_metrics
Type	Resource
Id	azure.security_insight.threat_intelligence_indicator_metrics

Fields

The following fields are returned by SELECT queries:

list

Name	Datatype	Description
lastUpdatedTimeUtc	string	Last updated indicator metric.
patternTypeMetrics	array	Pattern type metrics.
sourceMetrics	array	Source metrics.
threatTypeMetrics	array	Threat type metrics.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list	select	resource_group_name, workspace_name, subscription_id		Get threat intelligence indicators metrics (Indicators counts by Type, Threat Type, Source).

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
resource_group_name	string	The name of the resource group. The name is case insensitive. Required.
subscription_id	string
workspace_name	string	The name of the monitor workspace. Required.

SELECT examples

list

Get threat intelligence indicators metrics (Indicators counts by Type, Threat Type, Source).

SELECT
lastUpdatedTimeUtc,
patternTypeMetrics,
sourceMetrics,
threatTypeMetrics
FROM azure.security_insight.threat_intelligence_indicator_metrics
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND workspace_name = '{{ workspace_name }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;