Skip to main content

alert_rule_templates

Creates, updates, deletes, gets or lists an alert_rule_templates resource.

Overview

Namealert_rule_templates
TypeResource
Idazure.sentinel.alert_rule_templates

Fields

The following fields are returned by SELECT queries:

OK, Operation successfully completed

NameDatatypeDescription
idstringFully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
namestringThe name of the resource
kindstringThe alert rule kind
systemDataobjectAzure Resource Manager metadata containing createdBy and modifiedBy information.
typestringThe type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectsubscriptionId, resourceGroupName, workspaceName, alertRuleTemplateIdGets the alert rule template.
listselectsubscriptionId, resourceGroupName, workspaceNameGets all alert rule templates.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
alertRuleTemplateIdstringAlert rule template ID
resourceGroupNamestringThe name of the resource group. The name is case insensitive.
subscriptionIdstringThe ID of the target subscription.
workspaceNamestringThe name of the workspace.

SELECT examples

Gets the alert rule template.

SELECT
id,
name,
kind,
systemData,
type
FROM azure.sentinel.alert_rule_templates
WHERE subscriptionId = '{{ subscriptionId }}' -- required
AND resourceGroupName = '{{ resourceGroupName }}' -- required
AND workspaceName = '{{ workspaceName }}' -- required
AND alertRuleTemplateId = '{{ alertRuleTemplateId }}' -- required
;