vw_actions

Creates, updates, deletes, gets or lists a vw_actions resource.

Overview

Name	vw_actions
Type	View
Id	azure.sentinel.vw_actions

Fields

See the SQL Definition (view DDL) for fields returned by this view.

SQL Definition

Sqlite3

SELECT
id as id,
name as name,
type as type,
systemData as system_data,
etag as etag,
JSON_EXTRACT(properties, '$.logicAppResourceId') as "logic_app_resource_id",
JSON_EXTRACT(properties, '$.workflowId') as "workflow_id",
subscriptionId,
resourceGroupName,
workspaceName,
ruleId,
actionId
FROM azure.sentinel.actions
WHERE subscriptionId = 'replace-me' AND resourceGroupName = 'replace-me' AND workspaceName = 'replace-me' AND ruleId = 'replace-me';

Postgres

SELECT
id as id,
name as name,
type as type,
systemData as system_data,
etag as etag,
json_extract_path_text(properties, '$.logicAppResourceId') as "logic_app_resource_id",
json_extract_path_text(properties, '$.workflowId') as "workflow_id",
subscriptionId,
resourceGroupName,
workspaceName,
ruleId,
actionId
FROM azure.sentinel.actions
WHERE subscriptionId = 'replace-me' AND resourceGroupName = 'replace-me' AND workspaceName = 'replace-me' AND ruleId = 'replace-me';