SecurityInsightsWatchlistData Class

Definition

A class representing the SecurityInsightsWatchlist data model. Represents a Watchlist in Azure Security Insights.

public class SecurityInsightsWatchlistData : Azure.ResourceManager.Models.ResourceData
type SecurityInsightsWatchlistData = class
    inherit ResourceData
Public Class SecurityInsightsWatchlistData
Inherits ResourceData
Inheritance
SecurityInsightsWatchlistData

Constructors

SecurityInsightsWatchlistData()

Initializes a new instance of SecurityInsightsWatchlistData.

Properties

ContentType

The content type of the raw content. For now, only text/csv is valid.

CreatedBy

Describes a user that created the watchlist.

CreatedOn

The time the watchlist was created.

DefaultDuration

The default duration of a watchlist (in ISO 8601 duration format).

Description

A description of the watchlist.

DisplayName

The display name of the watchlist.

ETag

Etag of the azure resource.

Id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.

(Inherited from ResourceData)
IsDeleted

A flag that indicates if the watchlist is deleted or not.

ItemsSearchKey

The search key is used to optimize query performance when using watchlists for joins with other data. For example, enable a column with IP addresses to be the designated SearchKey field, then use this field as the key field when joining to other event data by IP address.

Labels

List of labels relevant to this watchlist.

Name

The name of the resource.

(Inherited from ResourceData)
NumberOfLinesToSkip

The number of lines in a csv content to skip before the header.

Provider

The provider of the watchlist.

RawContent

The raw content that represents to watchlist items to create. Example : This line will be skipped header1,header2 value1,value2

ResourceType

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

(Inherited from ResourceData)
Source

The source of the watchlist.

SystemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

(Inherited from ResourceData)
TenantId

The tenantId where the watchlist belongs to.

UpdatedBy

Describes a user that updated the watchlist.

UpdatedOn

The last time the watchlist was updated.

UploadStatus

The status of the Watchlist upload : New, InProgress or Complete. Note : When a Watchlist upload status is InProgress, the Watchlist cannot be deleted.

WatchlistAlias

The alias of the watchlist.

WatchlistId

The id (a Guid) of the watchlist.

WatchlistType

The type of the watchlist.

Applies to