MockableSecurityInsightsArmClient.CreateIndicator Method

Definition

Create a new threat intelligence indicator.

  • Request Path. : /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/createIndicator.
  • Operation Id. : ThreatIntelligenceIndicatorOperationGroup_CreateIndicator.
  • Default Api Version. : 2025-07-01-preview.
public virtual Azure.Response<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource> CreateIndicator(Azure.Core.ResourceIdentifier scope, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData data, System.Threading.CancellationToken cancellationToken = default);
abstract member CreateIndicator : Azure.Core.ResourceIdentifier * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData * System.Threading.CancellationToken -> Azure.Response<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>
override this.CreateIndicator : Azure.Core.ResourceIdentifier * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData * System.Threading.CancellationToken -> Azure.Response<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>
Public Overridable Function CreateIndicator (scope As ResourceIdentifier, data As SecurityInsightsThreatIntelligenceIndicatorData, Optional cancellationToken As CancellationToken = Nothing) As Response(Of SecurityInsightsThreatIntelligenceIndicatorResource)

Parameters

scope
ResourceIdentifier

The scope that the resource will apply against.

data
SecurityInsightsThreatIntelligenceIndicatorData

The content of the action request.

cancellationToken
CancellationToken

The cancellation token to use.

Returns

Exceptions

scope or data is null.

Applies to