Edit

Share via

alertHistoryState resource type

  • Article

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Stores changes made to alerts.

Properties

Property Type Description
appId String The Application ID of the calling application that submitted an update (PATCH) to the alert. The appId should be extracted from the auth token and not entered manually by the calling application.
assignedTo String UPN of user the alert was assigned to (note: alert.assignedTo only stores the last value/UPN).
comments String collection Comment entered by signed-in user.
feedback String Analyst feedback on the alert in this update. Possible values are: unknown, truePositive, falsePositive, benignPositive.
status String Alert status value (if updated). Possible values are: unknown, newAlert, inProgress, resolved, dismissed.
updatedDateTime DateTimeOffset Date and time of the alert update. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
user String UPN of the signed-in user that updated the alert (taken from the bearer token - if in user/delegated auth mode).

JSON representation

The following JSON representation shows the resource type.

{
  "appId": "String",
  "assignedTo": "String",
  "comments": ["String"],
  "feedback": "String",
  "status": "String",
  "updatedDateTime": "String (timestamp)",
  "user": "String"
}