Edit

Share via

New-AzSecurityAutomationRuleObject

  • Reference
Module:
Az.Security

Creates security automation rule object

Syntax

New-AzSecurityAutomationRuleObject
   -PropertyJPath <String>
   -Operator <String>
   -ExpectedValue <String>
   -PropertyType <String>
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

Description

Creates security automation rule object

Examples

Example 1

New-AzSecurityAutomationRuleObject -PropertyJPath 'properties.metadata.severity'  -PropertyType 'String' -Operator 'Equals'  -ExpectedValue 'High'

Creates security automation rule object that filters messages that with "High" severity

Parameters

-DefaultProfile

The credentials, account, tenant, and subscription used for communication with Azure.

Type:IAzureContextContainer
Aliases:AzContext, AzureRmContext, AzureCredential
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ExpectedValue

The expected value

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-Operator

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-PropertyJPath

The JPath of the entity model property that should be checked

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-PropertyType

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

Inputs

None

Outputs

PSSecurityAutomationTriggeringRule