SecurityInsightsThreatIntelligenceIndicatorCollection.CreateOrUpdateAsync Method

Definition

Namespace:

Azure.ResourceManager.SecurityInsights

Assembly:

Azure.ResourceManager.SecurityInsights.dll

Package:

Azure.ResourceManager.SecurityInsights v1.1.0

Source:

SecurityInsightsThreatIntelligenceIndicatorCollection.cs

Update a threat Intelligence indicator.

• Request Path. : /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}.
• Operation Id. : ThreatIntelligenceInformationOperations_Create.
• Default Api Version. : 2025-07-01-preview.

public virtual System.Threading.Tasks.Task<Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>> CreateOrUpdateAsync(Azure.WaitUntil waitUntil, string name, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData data, System.Threading.CancellationToken cancellationToken = default);

abstract member CreateOrUpdateAsync : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData * System.Threading.CancellationToken -> System.Threading.Tasks.Task<Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>>
override this.CreateOrUpdateAsync : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData * System.Threading.CancellationToken -> System.Threading.Tasks.Task<Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>>

Public Overridable Function CreateOrUpdateAsync (waitUntil As WaitUntil, name As String, data As SecurityInsightsThreatIntelligenceIndicatorData, Optional cancellationToken As CancellationToken = Nothing) As Task(Of ArmOperation(Of SecurityInsightsThreatIntelligenceIndicatorResource))

Parameters

waitUntil

WaitUntil

Completed if the method should wait to return until the long-running operation has completed on the service; Started if it should return after starting the operation. For more information on long-running operations, please see Azure.Core Long-Running Operation samples.

name

String

Threat intelligence indicator name field.

data

SecurityInsightsThreatIntelligenceIndicatorData

Properties of threat intelligence indicators to create and update.

cancellationToken

CancellationToken

The cancellation token to use.

Returns

Task<ArmOperation<SecurityInsightsThreatIntelligenceIndicatorResource>>

Exceptions

ArgumentNullException

name or data is null.

ArgumentException

name is an empty string, and was expected to be non-empty.