Policy Events - List Query Results For Subscription

Layanan:

Policy

Versi API:

2024-10-01

Mengkueri peristiwa kebijakan untuk sumber daya di bawah langganan.

POST https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01

Dengan parameter opsional:

POST https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01&$top={$top}&$orderby={$orderby}&$select={$select}&$from={$from}&$to={$to}&$filter={$filter}&$apply={$apply}&$skiptoken={$skiptoken}

Parameter URI

Nama	Dalam	Diperlukan	Jenis	Deskripsi
policyEventsResource	path	True	PolicyEventsResourceType	Nama sumber daya virtual di bawah jenis sumber daya PolicyEvents; hanya "default" yang diizinkan.
subscriptionId	path	True	string minLength: 1	ID langganan target.
api-version	query	True	string minLength: 1	Versi API yang akan digunakan untuk operasi ini.
$apply	query		string	OData menerapkan ekspresi untuk agregasi.
$filter	query		string	Ekspresi filter OData.
$from	query		string (date-time)	Tanda waktu berformat ISO 8601 yang menentukan waktu mulai interval untuk kueri. Ketika tidak ditentukan, layanan menggunakan ($to - 1 hari).
$orderby	query		string	Mengurutkan ekspresi menggunakan notasi OData. Satu atau beberapa nama kolom yang dipisahkan koma dengan "desc" opsional (default) atau "asc", misalnya "$orderby=PolicyAssignmentId, ResourceId asc".
$select	query		string	Pilih ekspresi menggunakan notasi OData. Membatasi kolom pada setiap rekaman hanya untuk yang diminta, misalnya "$select=PolicyAssignmentId, ResourceId".
$skiptoken	query		string	Skiptoken hanya disediakan jika respons sebelumnya mengembalikan hasil parsial sebagai bagian dari elemen nextLink.
$to	query		string (date-time)	Tanda waktu berformat ISO 8601 yang menentukan waktu akhir interval untuk kueri. Ketika tidak ditentukan, layanan menggunakan waktu permintaan.
$top	query		integer (int32) minimum: 0	Jumlah maksimum rekaman yang akan dikembalikan.

Respons

Nama	Jenis	Deskripsi
200 OK	PolicyEventsQueryResults	Permintaan telah berhasil.
Other Status Codes	PolicyInsightsCommon.QueryFailure	Respons kesalahan tak terduga.

Keamanan

azure_auth

Alur OAuth2 Azure Active Directory.

Jenis: oauth2
Alur: implicit
URL Otorisasi: https://login.microsoftonline.com/common/oauth2/authorize

Cakupan

Nama	Deskripsi
user_impersonation	meniru akun pengguna Anda

Contoh

Filter and aggregate only

Filter and group with aggregate

Filter and group without aggregate

Filter and multiple groups

Query at subscription scope

Query at subscription scope with next link

Time range; sort, select and limit

Filter and aggregate only

Permintaan sampel

HTTP

POST https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01&$from=2018-02-05T18:00:00Z&$filter=PolicyDefinitionAction eq 'deny'&$apply=aggregate($count as NumDenyEvents)

Respon sampel

Kode status:

200

{
  "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default",
  "@odata.count": 1,
  "value": [
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumDenyEvents": 40
    }
  ]
}

Filter and group with aggregate

Permintaan sampel

HTTP

POST https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01&$top=2&$from=2018-02-05T18:00:00Z&$filter=PolicyDefinitionAction eq 'audit' or PolicyDefinitionAction eq 'deny'&$apply=groupby((PolicyAssignmentId, PolicyDefinitionId, PolicyDefinitionAction, ResourceId), aggregate($count as NumEvents))

Respon sampel

Kode status:

200

{
  "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default",
  "@odata.count": 2,
  "value": [
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumEvents": 1,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policyassignments/3f3c4330183b4e218fe6fd29",
      "policyDefinitionAction": "audit",
      "policyDefinitionId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policydefinitions/24813039-7534-408a-9842-eb99f45721b1",
      "resourceId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup/providers/microsoft.servicefabric/clusters/myCluster/applications/resourcescachemonitor/services/myService"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumEvents": 1,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policyassignments/d6be6bb37e5f4333baa95c2a",
      "policyDefinitionAction": "audit",
      "policyDefinitionId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policydefinitions/5948d091-78b7-4d3b-a404-cc6a0329b0c6",
      "resourceId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup/providers/microsoft.servicefabric/clusters/myCluster/applications/resourcescachemonitor/services/myService"
    }
  ]
}

Filter and group without aggregate

Permintaan sampel

HTTP

POST https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01&$top=2&$from=2018-01-05T18:00:00Z&$filter=PolicyDefinitionAction ne 'audit' and PolicyDefinitionAction ne 'append'&$apply=groupby((PolicyAssignmentId, PolicyDefinitionId, PolicyDefinitionAction, ResourceId))

Respon sampel

Kode status:

200

{
  "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default",
  "@odata.count": 2,
  "value": [
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/5bc427ca-0089-4d0d-85bd-e98d1e40b3bf/providers/microsoft.authorization/policyassignments/storageaccountsku",
      "policyDefinitionAction": "deny",
      "policyDefinitionId": "/providers/microsoft.authorization/policydefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1",
      "resourceId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/5bc427ca-0089-4d0d-85bd-e98d1e40b3bf/providers/microsoft.storage/storageaccounts/7d528d3a"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup/providers/microsoft.authorization/policyassignments/da43b50031bf4bce84584faa",
      "policyDefinitionAction": "deny",
      "policyDefinitionId": "/providers/microsoft.authorization/policydefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62",
      "resourceId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup/providers/microsoft.storage/storageaccounts/mysa1"
    }
  ]
}

Filter and multiple groups

Permintaan sampel

HTTP

POST https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01&$top=10&$orderby=NumDeniedResources desc&$from=2018-01-01T00:00:00Z&$filter=PolicyDefinitionAction eq 'deny'&$apply=groupby((PolicyAssignmentId, PolicyDefinitionId, ResourceId))/groupby((PolicyAssignmentId, PolicyDefinitionId), aggregate($count as NumDeniedResources))

Respon sampel

Kode status:

200

{
  "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default",
  "@odata.count": 6,
  "value": [
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumDeniedResources": 3,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup1/providers/microsoft.authorization/policyassignments/0591f497c35344fcbaf7a393",
      "policyDefinitionId": "/providers/microsoft.authorization/policydefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumDeniedResources": 2,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup1/providers/microsoft.authorization/policyassignments/myassignment1",
      "policyDefinitionId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policydefinitions/mydefinition1"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumDeniedResources": 2,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup1/providers/microsoft.authorization/policyassignments/myassignment1",
      "policyDefinitionId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policydefinitions/mydefinition2"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumDeniedResources": 1,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/5bc427ca-0089-4d0d-85bd-e98d1e40b3bf/providers/microsoft.authorization/policyassignments/storageaccountsku",
      "policyDefinitionId": "/providers/microsoft.authorization/policydefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumDeniedResources": 1,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup2/providers/microsoft.authorization/policyassignments/da43b50031bf4bce84584faa",
      "policyDefinitionId": "/providers/microsoft.authorization/policydefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "NumDeniedResources": 1,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup2/providers/microsoft.authorization/policyassignments/myassignment2",
      "policyDefinitionId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policydefinitions/mydefinition3"
    }
  ]
}

Query at subscription scope

Permintaan sampel

HTTP

POST https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01

Respon sampel

Kode status:

200

{
  "@odata.context": "https://management.azure.com/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default",
  "@odata.count": 2,
  "@odata.nextLink": null,
  "value": [
    {
      "@odata.context": "https://management.azure.com/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "complianceState": "NonCompliant",
      "effectiveParameters": null,
      "isCompliant": false,
      "managementGroupIds": "myManagementGroup,fff988bf-fff1-ffff-fffb-fffcd011db47",
      "policyAssignmentId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policyAssignments/ec62f9b2a454487296f2ccd4",
      "policyAssignmentName": "ec62f9b2a454487296f2ccd4",
      "policyAssignmentOwner": "tbd",
      "policyAssignmentParameters": "{\"ALLOWEDRESOURCEGROUPS_1\":{\"value\":[\"rg1\",\"rg2\"]},\"ALLOWEDRESOURCEGROUPS_2\":{\"value\":[\"myrg3\",\"myrg4\"]}}",
      "policyAssignmentScope": "/providers/Microsoft.Management/managementGroups/myManagementGroup",
      "policyDefinitionAction": "audit",
      "policyDefinitionCategory": "tbd",
      "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policyDefinitions/72c0c41a-c752-4bc0-9c61-0d6adc567066",
      "policyDefinitionName": "72c0c41a-c752-4bc0-9c61-0d6adc567066",
      "policyDefinitionReferenceId": "181565554491747128",
      "policySetDefinitionCategory": null,
      "policySetDefinitionId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policySetDefinitions/00b36c66-612b-44e2-9f8e-b758296d40fe",
      "policySetDefinitionName": "00b36c66-612b-44e2-9f8e-b758296d40fe",
      "policySetDefinitionOwner": null,
      "policySetDefinitionParameters": null,
      "principalOid": "fffdfc0f-fff5-fff0-fff3-fff1a968dcc6",
      "resourceGroup": "myResourceGroup",
      "resourceId": "/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/resourcegroups/myResourceGroup/providers/Microsoft.ServiceFabric/clusters/myCluster/applications/myApplication",
      "resourceLocation": "eastus",
      "resourceTags": "tbd",
      "resourceType": "/Microsoft.ServiceFabric/clusters/applications",
      "subscriptionId": "fff10b27-fff3-fff5-fff8-fffbe01e86a5",
      "tenantId": "fff988bf-fff1-ffff-fffb-fffcd011db47",
      "timestamp": "2018-02-07T20:43:04.6971328Z"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "complianceState": "NonCompliant",
      "effectiveParameters": null,
      "isCompliant": false,
      "managementGroupIds": "myManagementGroup,fff988bf-fff1-ffff-fffb-fffcd011db47",
      "policyAssignmentId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policyAssignments/ec62f9b2a454487296f2ccd4",
      "policyAssignmentName": "ec62f9b2a454487296f2ccd4",
      "policyAssignmentOwner": "tbd",
      "policyAssignmentParameters": "{\"ALLOWEDRESOURCEGROUPS_1\":{\"value\":[\"rg1\",\"rg2\"]},\"ALLOWEDRESOURCEGROUPS_2\":{\"value\":[\"myrg3\",\"myrg4\"]}}",
      "policyAssignmentScope": "/providers/Microsoft.Management/managementGroups/myManagementGroup",
      "policyDefinitionAction": "audit",
      "policyDefinitionCategory": "tbd",
      "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policyDefinitions/72c0c41a-c752-4bc0-9c61-0d6adc567066",
      "policyDefinitionName": "72c0c41a-c752-4bc0-9c61-0d6adc567066",
      "policyDefinitionReferenceId": "624540685646900425",
      "policySetDefinitionCategory": null,
      "policySetDefinitionId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policySetDefinitions/00b36c66-612b-44e2-9f8e-b758296d40fe",
      "policySetDefinitionName": "00b36c66-612b-44e2-9f8e-b758296d40fe",
      "policySetDefinitionOwner": null,
      "policySetDefinitionParameters": null,
      "principalOid": "fffdfc0f-fff5-fff0-fff3-fff1a968dcc6",
      "resourceGroup": "myResourceGroup",
      "resourceId": "/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/resourcegroups/myResourceGroup/providers/Microsoft.ServiceFabric/clusters/myCluster/applications/myApplication",
      "resourceLocation": "eastus",
      "resourceTags": "tbd",
      "resourceType": "/Microsoft.ServiceFabric/clusters/applications",
      "subscriptionId": "fff10b27-fff3-fff5-fff8-fffbe01e86a5",
      "tenantId": "fff988bf-fff1-ffff-fffb-fffcd011db47",
      "timestamp": "2018-02-07T20:43:04.6971328Z"
    }
  ]
}

Query at subscription scope with next link

Permintaan sampel

HTTP

POST https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01&$skiptoken=WpmWfBSvPhkAK6QD

Respon sampel

Kode status:

200

{
  "@odata.context": "https://management.azure.com/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default",
  "@odata.count": 2,
  "@odata.nextLink": null,
  "value": [
    {
      "@odata.context": "https://management.azure.com/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "complianceState": "NonCompliant",
      "effectiveParameters": null,
      "isCompliant": false,
      "managementGroupIds": "myManagementGroup,fff988bf-fff1-ffff-fffb-fffcd011db47",
      "policyAssignmentId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policyAssignments/ec62f9b2a454487296f2ccd4",
      "policyAssignmentName": "ec62f9b2a454487296f2ccd4",
      "policyAssignmentOwner": "tbd",
      "policyAssignmentParameters": "{\"ALLOWEDRESOURCEGROUPS_1\":{\"value\":[\"rg1\",\"rg2\"]},\"ALLOWEDRESOURCEGROUPS_2\":{\"value\":[\"myrg3\",\"myrg4\"]}}",
      "policyAssignmentScope": "/providers/Microsoft.Management/managementGroups/myManagementGroup",
      "policyDefinitionAction": "audit",
      "policyDefinitionCategory": "tbd",
      "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policyDefinitions/72c0c41a-c752-4bc0-9c61-0d6adc567066",
      "policyDefinitionName": "72c0c41a-c752-4bc0-9c61-0d6adc567066",
      "policyDefinitionReferenceId": "181565554491747128",
      "policySetDefinitionCategory": null,
      "policySetDefinitionId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policySetDefinitions/00b36c66-612b-44e2-9f8e-b758296d40fe",
      "policySetDefinitionName": "00b36c66-612b-44e2-9f8e-b758296d40fe",
      "policySetDefinitionOwner": null,
      "policySetDefinitionParameters": null,
      "principalOid": "fffdfc0f-fff5-fff0-fff3-fff1a968dcc6",
      "resourceGroup": "myResourceGroup",
      "resourceId": "/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/resourcegroups/myResourceGroup/providers/Microsoft.ServiceFabric/clusters/myCluster/applications/myApplication",
      "resourceLocation": "eastus",
      "resourceTags": "tbd",
      "resourceType": "/Microsoft.ServiceFabric/clusters/applications",
      "subscriptionId": "fff10b27-fff3-fff5-fff8-fffbe01e86a5",
      "tenantId": "fff988bf-fff1-ffff-fffb-fffcd011db47",
      "timestamp": "2018-02-07T20:43:04.6971328Z"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "complianceState": "NonCompliant",
      "effectiveParameters": null,
      "isCompliant": false,
      "managementGroupIds": "myManagementGroup,fff988bf-fff1-ffff-fffb-fffcd011db47",
      "policyAssignmentId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policyAssignments/ec62f9b2a454487296f2ccd4",
      "policyAssignmentName": "ec62f9b2a454487296f2ccd4",
      "policyAssignmentOwner": "tbd",
      "policyAssignmentParameters": "{\"ALLOWEDRESOURCEGROUPS_1\":{\"value\":[\"rg1\",\"rg2\"]},\"ALLOWEDRESOURCEGROUPS_2\":{\"value\":[\"myrg3\",\"myrg4\"]}}",
      "policyAssignmentScope": "/providers/Microsoft.Management/managementGroups/myManagementGroup",
      "policyDefinitionAction": "audit",
      "policyDefinitionCategory": "tbd",
      "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policyDefinitions/72c0c41a-c752-4bc0-9c61-0d6adc567066",
      "policyDefinitionName": "72c0c41a-c752-4bc0-9c61-0d6adc567066",
      "policyDefinitionReferenceId": "624540685646900425",
      "policySetDefinitionCategory": null,
      "policySetDefinitionId": "/providers/Microsoft.Management/managementGroups/myManagementGroup/providers/Microsoft.Authorization/policySetDefinitions/00b36c66-612b-44e2-9f8e-b758296d40fe",
      "policySetDefinitionName": "00b36c66-612b-44e2-9f8e-b758296d40fe",
      "policySetDefinitionOwner": null,
      "policySetDefinitionParameters": null,
      "principalOid": "fffdfc0f-fff5-fff0-fff3-fff1a968dcc6",
      "resourceGroup": "myResourceGroup",
      "resourceId": "/subscriptions/fff10b27-fff3-fff5-fff8-fffbe01e86a5/resourcegroups/myResourceGroup/providers/Microsoft.ServiceFabric/clusters/myCluster/applications/myApplication",
      "resourceLocation": "eastus",
      "resourceTags": "tbd",
      "resourceType": "/Microsoft.ServiceFabric/clusters/applications",
      "subscriptionId": "fff10b27-fff3-fff5-fff8-fffbe01e86a5",
      "tenantId": "fff988bf-fff1-ffff-fffb-fffcd011db47",
      "timestamp": "2018-02-07T20:43:04.6971328Z"
    }
  ]
}

Time range; sort, select and limit

Permintaan sampel

HTTP

POST https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/default/queryResults?api-version=2024-10-01&$top=2&$orderby=Timestamp desc, PolicyAssignmentId asc, SubscriptionId asc, ResourceGroup asc, ResourceId&$select=Timestamp, PolicyAssignmentId, PolicyDefinitionId, SubscriptionId, ResourceGroup, ResourceId&$from=2018-02-05T18:00:00Z&$to=2018-02-06T18:00:00Z

Respon sampel

Kode status:

200

{
  "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default",
  "@odata.count": 2,
  "value": [
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.Authorization/policyAssignments/89b27f38-e9e4-4468-ab81-801c84b8c017",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6",
      "resourceGroup": "myResourceGroup",
      "resourceId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup/providers/Microsoft.ClassicCompute/domainNames/myDomain",
      "subscriptionId": "fffedd8f-ffff-fffd-fffd-fffed2f84852",
      "timestamp": "2018-02-05T22:34:02.3475017Z"
    },
    {
      "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity",
      "@odata.id": null,
      "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.Authorization/policyAssignments/Enable Monitoring in Azure Security Center",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6",
      "resourceGroup": "myResourceGroup",
      "resourceId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup/providers/Microsoft.ClassicCompute/domainNames/myDomain",
      "subscriptionId": "fffedd8f-ffff-fffd-fffd-fffed2f84852",
      "timestamp": "2018-02-05T22:34:01.6135357Z"
    }
  ]
}

Definisi

Nama	Deskripsi
ComponentEventDetails	Detail peristiwa komponen.
PolicyEvent	Rekaman peristiwa kebijakan.
PolicyEventsQueryResults	Hasil kueri.
PolicyEventsResourceType	Nama sumber daya virtual di bawah jenis sumber daya PolicyEvents; hanya "default" yang diizinkan.
PolicyInsightsCommon.QueryFailure	Respons kesalahan.
PolicyInsightsCommon.QueryFailureError	Definisi kesalahan.

ComponentEventDetails

Objek

Detail peristiwa komponen.

Nama	Jenis	Deskripsi
id	string	Id Komponen.
name	string	Nama komponen.
policyDefinitionAction	string	Tindakan definisi kebijakan, yaitu efek.
principalOid	string	ID objek utama untuk pengguna yang memulai operasi komponen sumber daya yang memicu peristiwa kebijakan.
tenantId	string	ID Penyewa untuk rekaman peristiwa kebijakan.
timestamp	string (date-time)	Tanda waktu untuk rekaman peristiwa kebijakan komponen.
type	string	Jenis komponen.

PolicyEvent

Objek

Rekaman peristiwa kebijakan.

Nama	Jenis	Deskripsi
@odata.context	string	String konteks OData; digunakan oleh klien OData untuk mengatasi informasi jenis berdasarkan metadata.
@odata.id	string	ID entitas OData; selalu diatur ke null karena rekaman peristiwa kebijakan tidak memiliki ID entitas.
complianceState	string	Status kepatuhan sumber daya.
components	ComponentEventDetails[]	Peristiwa komponen hanya diisi saat URL berisi klausa $expand=components.
effectiveParameters	string	Parameter efektif untuk penetapan kebijakan.
isCompliant	boolean	Bendera yang menyatakan apakah sumber daya mematuhi penetapan kebijakan yang dievaluasi.
managementGroupIds	string	Daftar ID grup manajemen yang dipisahkan koma, yang mewakili hierarki grup manajemen tempat sumber daya berada.
policyAssignmentId	string	ID penetapan kebijakan.
policyAssignmentName	string	Nama penetapan kebijakan.
policyAssignmentOwner	string	Pemilik penetapan kebijakan.
policyAssignmentParameters	string	Parameter penetapan kebijakan.
policyAssignmentScope	string	Cakupan penetapan kebijakan.
policyDefinitionAction	string	Tindakan definisi kebijakan, yaitu efek.
policyDefinitionCategory	string	Kategori definisi kebijakan.
policyDefinitionId	string	ID definisi kebijakan.
policyDefinitionName	string	Nama definisi kebijakan.
policyDefinitionReferenceId	string	ID referensi untuk definisi kebijakan di dalam kumpulan kebijakan, jika penetapan kebijakan adalah untuk kumpulan kebijakan.
policySetDefinitionCategory	string	Kategori definisi kumpulan kebijakan, jika penetapan kebijakan adalah untuk kumpulan kebijakan.
policySetDefinitionId	string	ID definisi kumpulan kebijakan, jika penetapan kebijakan adalah untuk kumpulan kebijakan.
policySetDefinitionName	string	Nama definisi kumpulan kebijakan, jika penetapan kebijakan adalah untuk kumpulan kebijakan.
policySetDefinitionOwner	string	Pemilik definisi set kebijakan, jika penetapan kebijakan adalah untuk kumpulan kebijakan.
policySetDefinitionParameters	string	Parameter definisi kumpulan kebijakan, jika penetapan kebijakan adalah untuk kumpulan kebijakan.
principalOid	string	ID objek utama untuk pengguna yang memulai operasi sumber daya yang memicu peristiwa kebijakan.
resourceGroup	string	Nama grup sumber daya.
resourceId	string	ID Sumber Daya.
resourceLocation	string	Lokasi sumber daya.
resourceTags	string	Daftar tag sumber daya.
resourceType	string	Jenis sumber daya.
subscriptionId	string	ID Langganan.
tenantId	string	ID Penyewa untuk rekaman peristiwa kebijakan.
timestamp	string (date-time)	Tanda waktu untuk rekaman peristiwa kebijakan.

PolicyEventsQueryResults

Objek

Hasil kueri.

Nama	Jenis	Deskripsi
@odata.context	string	String konteks OData; digunakan oleh klien OData untuk mengatasi informasi jenis berdasarkan metadata.
@odata.count	integer (int32) minimum: 0	Jumlah entitas OData; menunjukkan jumlah rekaman peristiwa kebijakan yang dikembalikan.
@odata.nextLink	string	Tautan odata berikutnya; URL untuk mendapatkan serangkaian hasil berikutnya.
value	PolicyEvent[]	Hasil kueri.

PolicyEventsResourceType

Enumerasi

Nama sumber daya virtual di bawah jenis sumber daya PolicyEvents; hanya "default" yang diizinkan.

Nilai	Deskripsi
default	asali

PolicyInsightsCommon.QueryFailure

Objek

Respons kesalahan.

Nama	Jenis	Deskripsi
error	PolicyInsightsCommon.QueryFailureError	Definisi kesalahan.

PolicyInsightsCommon.QueryFailureError

Objek

Definisi kesalahan.

Nama	Jenis	Deskripsi
code	string	Kode kesalahan khusus layanan yang berfungsi sebagai substatus untuk kode kesalahan HTTP.
message	string	Deskripsi kesalahan.