SecurityInsightsWatchlistCollection.CreateOrUpdate Method

Reference

Definition

Namespace:: Azure.ResourceManager.SecurityInsights

Assembly:: Azure.ResourceManager.SecurityInsights.dll

Package:: Azure.ResourceManager.SecurityInsights v1.1.0

Package:: Azure.ResourceManager.SecurityInsights v1.2.0-beta.1

Source:: SecurityInsightsWatchlistCollection.cs

Source:: SecurityInsightsWatchlistCollection.cs

Important

Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Create or update a Watchlist and its Watchlist Items (bulk creation, e.g. through text/csv content type). To create a Watchlist and its Items, we should call this endpoint with either rawContent or a valid SAR URI and contentType properties. The rawContent is mainly used for small watchlist (content size below 3.8 MB). The SAS URI enables the creation of large watchlist, where the content size can go up to 500 MB. The status of processing such large file can be polled through the URL returned in Azure-AsyncOperation header.

Request Path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}
Operation Id: Watchlists_CreateOrUpdate
Default Api Version: 2024-01-01-preview
Resource: SecurityInsightsWatchlistResource

public virtual Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistResource> CreateOrUpdate (Azure.WaitUntil waitUntil, string watchlistAlias, Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistData data, System.Threading.CancellationToken cancellationToken = default);

abstract member CreateOrUpdate : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistData * System.Threading.CancellationToken -> Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistResource>
override this.CreateOrUpdate : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistData * System.Threading.CancellationToken -> Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistResource>

Public Overridable Function CreateOrUpdate (waitUntil As WaitUntil, watchlistAlias As String, data As SecurityInsightsWatchlistData, Optional cancellationToken As CancellationToken = Nothing) As ArmOperation(Of SecurityInsightsWatchlistResource)

Parameters

waitUntil: WaitUntil

Completed if the method should wait to return until the long-running operation has completed on the service; Started if it should return after starting the operation. For more information on long-running operations, please see Azure.Core Long-Running Operation samples.