vw_automation_rules

Creates, updates, deletes, gets or lists a vw_automation_rules resource.

Overview

Name	vw_automation_rules
Type	View
Id	azure.sentinel.vw_automation_rules

Fields

See the SQL Definition (view DDL) for fields returned by this view.

SQL Definition

Sqlite3

SELECT
etag as etag,
JSON_EXTRACT(properties, '$.displayName') as "display_name",
JSON_EXTRACT(properties, '$.order') as "order",
JSON_EXTRACT(properties, '$.triggeringLogic') as "triggering_logic",
JSON_EXTRACT(properties, '$.actions') as "actions",
JSON_EXTRACT(properties, '$.lastModifiedTimeUtc') as "last_modified_time_utc",
JSON_EXTRACT(properties, '$.createdTimeUtc') as "created_time_utc",
JSON_EXTRACT(properties, '$.lastModifiedBy') as "last_modified_by",
JSON_EXTRACT(properties, '$.createdBy') as "created_by",
subscriptionId,
resourceGroupName,
workspaceName,
automationRuleId
FROM azure.sentinel.automation_rules
WHERE subscriptionId = 'replace-me' AND resourceGroupName = 'replace-me' AND workspaceName = 'replace-me';

Postgres

SELECT
etag as etag,
json_extract_path_text(properties, '$.displayName') as "display_name",
json_extract_path_text(properties, '$.order') as "order",
json_extract_path_text(properties, '$.triggeringLogic') as "triggering_logic",
json_extract_path_text(properties, '$.actions') as "actions",
json_extract_path_text(properties, '$.lastModifiedTimeUtc') as "last_modified_time_utc",
json_extract_path_text(properties, '$.createdTimeUtc') as "created_time_utc",
json_extract_path_text(properties, '$.lastModifiedBy') as "last_modified_by",
json_extract_path_text(properties, '$.createdBy') as "created_by",
subscriptionId,
resourceGroupName,
workspaceName,
automationRuleId
FROM azure.sentinel.automation_rules
WHERE subscriptionId = 'replace-me' AND resourceGroupName = 'replace-me' AND workspaceName = 'replace-me';