How can I trigger Defender for cloud sample alerts through Azure CLI or with Logic apps , NO GUI .

Question

I'm trying to set the sample alerts for defender for cloud , I know it's easy with GUI.

Just to click the sample alerts and select the sub and resources.

But i wanted to do that hands-off , for every 8 hours what're my options ..i want only Defender for cloud sample alerts as it is ..any work around? any inputs are appreciated.

Answer 1

@PrasadN

Thank you for posting this in Microsoft Q&A.

There are some CLI commands that are used for security alerts. However, there is no specific command for creating security alert as per below article,

https://learn.microsoft.com/en-us/cli/azure/security/alert?view=azure-cli-latest#commands

But you can try this through logic apps,

1. Open the Azure portal and create a new Logic App.
2. Add a new trigger to the Logic App by selecting the "When a HTTP request is received" trigger.
3. Add a new action to the Logic App by selecting the "Create an alert" action.
4. Configure the "Create an alert" action to create a sample alert with the specified details.
5. Save and run the Logic App.

This will trigger a sample alert in Defender for Cloud.

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.