Skip to main content

vw_metadata

Creates, updates, deletes, gets or lists a vw_metadata resource.

Overview​

Namevw_metadata
TypeView
Idazure.sentinel.vw_metadata

Fields​

See the SQL Definition (view DDL) for fields returned by this view.

SQL Definition​

SELECT
etag as etag,
JSON_EXTRACT(properties, '$.contentId') as "content_id",
JSON_EXTRACT(properties, '$.parentId') as "parent_id",
JSON_EXTRACT(properties, '$.version') as "version",
JSON_EXTRACT(properties, '$.kind') as "kind",
JSON_EXTRACT(properties, '$.source') as "source",
JSON_EXTRACT(properties, '$.author') as "author",
JSON_EXTRACT(properties, '$.support') as "support",
JSON_EXTRACT(properties, '$.dependencies') as "dependencies",
JSON_EXTRACT(properties, '$.categories') as "categories",
JSON_EXTRACT(properties, '$.providers') as "providers",
JSON_EXTRACT(properties, '$.firstPublishDate') as "first_publish_date",
JSON_EXTRACT(properties, '$.lastPublishDate') as "last_publish_date",
JSON_EXTRACT(properties, '$.customVersion') as "custom_version",
JSON_EXTRACT(properties, '$.contentSchemaVersion') as "content_schema_version",
JSON_EXTRACT(properties, '$.icon') as "icon",
JSON_EXTRACT(properties, '$.threatAnalysisTactics') as "threat_analysis_tactics",
JSON_EXTRACT(properties, '$.threatAnalysisTechniques') as "threat_analysis_techniques",
JSON_EXTRACT(properties, '$.previewImages') as "preview_images",
JSON_EXTRACT(properties, '$.previewImagesDark') as "preview_images_dark",
subscriptionId,
resourceGroupName,
workspaceName,
metadataName
FROM azure.sentinel.metadata
WHERE subscriptionId = 'replace-me' AND resourceGroupName = 'replace-me' AND workspaceName = 'replace-me';