New-AzActivityLogAlertAlertRuleAnyOfOrLeafConditionObject

Module:

Az.Monitor

Create an in-memory object for AlertRuleAnyOfOrLeafCondition.

Syntax

New-AzActivityLogAlertAlertRuleAnyOfOrLeafConditionObject
   [-AnyOf <IAlertRuleLeafCondition[]>]
   [-ContainsAny <String[]>]
   [-Equal <String>]
   [-Field <String>]
   [<CommonParameters>]

Description

Create an in-memory object for AlertRuleAnyOfOrLeafCondition.

Examples

Example 1: Create alert rule condition

New-AzActivityLogAlertAlertRuleAnyOfOrLeafConditionObject -Equal Administrative -Field category

Create alert rule condition

Example 2: Create alert rule condition with leaf condition

$any=New-AzActivityLogAlertAlertRuleLeafConditionObject -Field properties.incidentType -Equal Maintenance
New-AzActivityLogAlertAlertRuleAnyOfOrLeafConditionObject -AnyOf $any

Create alert rule condition with leaf condition

Parameters

-AnyOf

An Activity Log Alert rule condition that is met when at least one of its member leaf conditions are met. To construct, see NOTES section for ANYOF properties and create a hash table.

Type:	IAlertRuleLeafCondition[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ContainsAny

The value of the event's field will be compared to the values in this array (case-insensitive) to determine if the condition is met.

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Equal

The value of the event's field will be compared to this value (case-insensitive) to determine if the condition is met.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Field

The name of the Activity Log event's field that this condition will examine. The possible values for this field are (case-insensitive): 'resourceId', 'category', 'caller', 'level', 'operationName', 'resourceGroup', 'resourceProvider', 'status', 'subStatus', 'resourceType', or anything beginning with 'properties'.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

Outputs

AlertRuleAnyOfOrLeafCondition