你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站,请访问 https://docs.azure.cn

Update-AzSentinelDataConnector

汇报数据连接器。

语法

Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -AzureADorAATP
      [-SubscriptionId <String>]
      [-Alerts <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -AWSCloudTrail
      [-SubscriptionId <String>]
      [-AWSRoleArn <String>]
      [-Log <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -AWSS3
      [-SubscriptionId <String>]
      [-AWSRoleArn <String>]
      [-DetinationTable <String>]
      [-Log <String>]
      [-SQSURL <String[]>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -AzureSecurityCenter
      [-SubscriptionId <String>]
      [-Alerts <String>]
      [-ASCSubscriptionId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -Dynamics365
      [-SubscriptionId <String>]
      [-CommonDataServiceActivity <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      [-AvailabilityIsPreview <Boolean>]
      [-AvailabilityStatus <Int32>]
      [-PermissionCustom <PermissionsCustomsItem[]>]
      [-PermissionResourceProvider <PermissionsResourceProviderItem[]>]
      [-UiConfigConnectivityCriterion <ConnectivityCriteria[]>]
      [-UiConfigCustomImage <String>]
      [-UiConfigDataType <LastDataReceivedDataType[]>]
      [-UiConfigDescriptionMarkdown <String>]
      [-UiConfigGraphQueriesTableName <String>]
      [-UiConfigGraphQuery <GraphQueries[]>]
      [-UiConfigInstructionStep <InstructionSteps[]>]
      [-UiConfigPublisher <String>]
      [-UiConfigSampleQuery <SampleQueries[]>]
      [-UiConfigTitle <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -CloudAppSecurity
      [-SubscriptionId <String>]
      [-Alerts <String>]
      [-DiscoveryLog <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -DefenderATP
      [-SubscriptionId <String>]
      [-Alerts <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -MicrosoftTI
      [-SubscriptionId <String>]
      [-BingSafetyPhishingUrlLookbackPeriod <String>]
      [-BingSafetyPhishinURL <String>]
      [-MicrosoftEmergingThreatFeed <String>]
      [-MicrosoftEmergingThreatFeedLookbackPeriod <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -MicrosoftThreatProtection
      [-SubscriptionId <String>]
      [-Incident <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -Office365
      [-SubscriptionId <String>]
      [-Exchange <String>]
      [-SharePoint <String>]
      [-Teams <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -OfficeATP
      [-SubscriptionId <String>]
      [-Alerts <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -OfficeIRM
      [-SubscriptionId <String>]
      [-Alerts <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -ThreatIntelligence
      [-SubscriptionId <String>]
      [-Indicator <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -Id <String>
      -ResourceGroupName <String>
      -WorkspaceName <String>
      -APIRootURL <String>
      -ThreatIntelligenceTaxii
      [-SubscriptionId <String>]
      [-CollectionId <String>]
      [-FriendlyName <String>]
      [-Password <String>]
      [-PollingFrequency <PollingFrequency>]
      [-TaxiiLookbackPeriod <String>]
      [-TenantId <String>]
      [-UserName <String>]
      [-WorkspaceId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -AzureADorAATP
      [-Alerts <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -AWSCloudTrail
      [-AWSRoleArn <String>]
      [-Log <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -AWSS3
      [-AWSRoleArn <String>]
      [-DetinationTable <String>]
      [-Log <String>]
      [-SQSURL <String[]>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -AzureSecurityCenter
      [-Alerts <String>]
      [-ASCSubscriptionId <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -Dynamics365
      [-CommonDataServiceActivity <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      [-AvailabilityIsPreview <Boolean>]
      [-AvailabilityStatus <Int32>]
      [-PermissionCustom <PermissionsCustomsItem[]>]
      [-PermissionResourceProvider <PermissionsResourceProviderItem[]>]
      [-UiConfigConnectivityCriterion <ConnectivityCriteria[]>]
      [-UiConfigCustomImage <String>]
      [-UiConfigDataType <LastDataReceivedDataType[]>]
      [-UiConfigDescriptionMarkdown <String>]
      [-UiConfigGraphQueriesTableName <String>]
      [-UiConfigGraphQuery <GraphQueries[]>]
      [-UiConfigInstructionStep <InstructionSteps[]>]
      [-UiConfigPublisher <String>]
      [-UiConfigSampleQuery <SampleQueries[]>]
      [-UiConfigTitle <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -CloudAppSecurity
      [-Alerts <String>]
      [-DiscoveryLog <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -DefenderATP
      [-Alerts <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -MicrosoftTI
      [-BingSafetyPhishingUrlLookbackPeriod <String>]
      [-BingSafetyPhishinURL <String>]
      [-MicrosoftEmergingThreatFeed <String>]
      [-MicrosoftEmergingThreatFeedLookbackPeriod <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -MicrosoftThreatProtection
      [-Incident <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -Office365
      [-Exchange <String>]
      [-SharePoint <String>]
      [-Teams <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -OfficeATP
      [-Alerts <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -OfficeIRM
      [-Alerts <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -ThreatIntelligence
      [-Indicator <String>]
      [-TenantId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]
Update-AzSentinelDataConnector
      -InputObject <ISecurityInsightsIdentity>
      -ThreatIntelligenceTaxii
      [-CollectionId <String>]
      [-FriendlyName <String>]
      [-Password <String>]
      [-PollingFrequency <PollingFrequency>]
      [-TaxiiLookbackPeriod <String>]
      [-TenantId <String>]
      [-UserName <String>]
      [-WorkspaceId <String>]
      [-DefaultProfile <PSObject>]
      [-AsJob]
      [-NoWait]
      [-Confirm]
      [-WhatIf]
      [<CommonParameters>]

说明

汇报数据连接器。

示例

示例 1:更新 Sentinel 数据连接器

Update-AzSentinelDataConnector -ResourceGroupName "myResourceGroupName" -workspaceName "myWorkspaceName" -Id  3bd6c555-1412-4103-9b9d-2b0b40cda6b6 -SharePoint "Enabled"

此命令更新 Sentinel 数据连接器

参数

-Alerts

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-APIRootURL

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-ASCSubscriptionId

ASC 订阅 ID。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AsJob

以作业身份运行命令

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AvailabilityIsPreview

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AvailabilityStatus

Type:Int32
Position:Named
Default value:1
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AWSCloudTrail

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-AWSRoleArn

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-AWSS3

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-AzureADorAATP

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-AzureSecurityCenter

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-BingSafetyPhishingUrlLookbackPeriod

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-BingSafetyPhishinURL

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CloudAppSecurity

[Parameter(ParameterSetName = 'UpdateGenericUI', Mandatory)][Parameter(ParameterSetName = 'UpdateViaIdentityGenericUI', Mandatory)][Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Category('Runtime')][System.Management.Automation.SwitchParameter] ${GenericUI},

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-CollectionId

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CommonDataServiceActivity

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Confirm

提示你在运行 cmdlet 之前进行确认。

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DefaultProfile

用于与 Azure 通信的凭据、帐户、租户和订阅。

Type:PSObject
Aliases:AzureRMContext, AzureCredential
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DefenderATP

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-DetinationTable

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DiscoveryLog

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Dynamics365

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-Exchange

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-FriendlyName

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Id

[Parameter(ParameterSetName = 'UpdateGenericUI', Mandatory)]数据连接or 的 ID。

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-Incident

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Indicator

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-InputObject

[Parameter(ParameterSetName = 'UpdateViaIdentityGenericUI', Mandatory, ValueFromPipeline)]标识参数

若要构造,请参阅 INPUTOBJECT 属性的 NOTES 部分并创建哈希表。

Type:ISecurityInsightsIdentity
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-Log

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MicrosoftEmergingThreatFeed

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MicrosoftEmergingThreatFeedLookbackPeriod

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MicrosoftThreatProtection

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-MicrosoftTI

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-NoWait

异步运行命令

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Office365

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-OfficeATP

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-OfficeIRM

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-Password

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PermissionCustom

若要构造,请参阅 PERMISSIONCUSTOM 属性的 NOTES 部分并创建哈希表。

Type:PermissionsCustomsItem[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PermissionResourceProvider

若要构造,请参阅 PERMISSIONRESOURCEPROVIDER 属性的 NOTES 部分并创建哈希表。

Type:PermissionsResourceProviderItem[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PollingFrequency

Type:PollingFrequency
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ResourceGroupName

[Parameter(ParameterSetName = 'UpdateGenericUI', Mandatory)]资源组名称。

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-SharePoint

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-SQSURL

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-SubscriptionId

[Parameter(ParameterSetName = 'UpdateGenericUI')]获取唯一标识 Microsoft Azure 订阅的订阅凭据。 此订阅 ID 是每个服务调用的 URI 的一部分。

Type:String
Position:Named
Default value:(Get-AzContext).Subscription.Id
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-TaxiiLookbackPeriod

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Teams

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-TenantId

[Parameter(ParameterSetName = 'UpdateViaIdentityGenericUI')]TenantId。

Type:String
Position:Named
Default value:(Get-AzContext).Tenant.Id
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ThreatIntelligence

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-ThreatIntelligenceTaxii

Type:SwitchParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigConnectivityCriterion

若要构造,请参阅 UICONFIGCONNECTIVITYCRITERION 属性的 NOTES 部分,并创建哈希表。

Type:ConnectivityCriteria[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigCustomImage

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigDataType

若要构造,请参阅 UICONFIGDATATYPE 属性的 NOTES 部分并创建哈希表。

Type:LastDataReceivedDataType[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigDescriptionMarkdown

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigGraphQueriesTableName

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigGraphQuery

若要构造,请参阅 UICONFIGGRAPHQUERY 属性的 NOTES 部分,并创建哈希表。

Type:GraphQueries[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigInstructionStep

若要构造,请参阅 UICONFIGINSTRUCTIONSTEP 属性的 NOTES 部分并创建哈希表。

Type:InstructionSteps[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigPublisher

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigSampleQuery

若要构造,请参阅 UICONFIGSAMPLEQUERY 属性的 NOTES 部分并创建哈希表。

Type:SampleQueries[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UiConfigTitle

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-UserName

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-WhatIf

显示运行该 cmdlet 时会发生什么情况。 cmdlet 未运行。

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-WorkspaceId

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-WorkspaceName

[Parameter(ParameterSetName = 'UpdateGenericUI', Mandatory)]工作区的名称。

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

输入

ISecurityInsightsIdentity

输出

DataConnector

备注

别名

复杂参数属性

若要创建下面所述的参数,请构造一个包含相应属性的哈希表。 有关哈希表的信息,请运行 Get-Help about_Hash_Tables。

INPUTOBJECT <ISecurityInsightsIdentity>:[Parameter(ParameterSetName = 'UpdateViaIdentityGenericUI', Mandatory, ValueFromPipeline)] Identity Parameter

  • [ActionId <String>]:操作 ID
  • [AlertRuleTemplateId <String>]:警报规则模板 ID
  • [AutomationRuleId <String>]:自动化规则 ID
  • [BookmarkId <String>]:书签 ID
  • [ConsentId <String>]:同意 ID
  • [DataConnectorId <String>]:连接or ID
  • [EntityId <String>]:实体 ID
  • [EntityQueryId <String>]:实体查询 ID
  • [EntityQueryTemplateId <String>]:实体查询模板 ID
  • [Id <String>]:资源标识路径
  • [IncidentCommentId <String>]:事件注释 ID
  • [IncidentId <String>]:事件 ID
  • [MetadataName <String>]:元数据名称。
  • [Name <String>]:威胁情报指示器名称字段。
  • [RelationName <String>]:关系名称
  • [ResourceGroupName <String>]:资源组的名称。 此名称不区分大小写。
  • [RuleId <String>]:警报规则 ID
  • [SentinelOnboardingStateName <String>]:Sentinel 载入状态名称。 支持 - 默认值
  • [SettingsName <String>]:设置名称。 支持 - 异常、EyesOn、EntityAnalytics、Ueba
  • [SourceControlId <String>]:源代码管理 ID
  • [SubscriptionId <String>]:目标订阅的 ID。
  • [WorkspaceName <String>]:工作区的名称。

PERMISSIONCUSTOM <PermissionsCustomsItem[]>:

  • [Description <String>]:海关权限说明
  • [Name <String>]:海关权限名称

PERMISSIONRESOURCEPROVIDER <PermissionsResourceProviderItem[]>:

  • [PermissionsDisplayText <String>]:权限说明文本
  • [Provider <ProviderName?>]:提供程序名称
  • [ProviderDisplayName <String>]:权限提供程序显示名称
  • [RequiredPermissionAction <Boolean?>]:操作权限
  • [RequiredPermissionDelete <Boolean?>]:删除权限
  • [RequiredPermissionRead <Boolean?>]:读取权限
  • [RequiredPermissionWrite <Boolean?>]:写入权限
  • [Scope <PermissionProviderScope?>]:权限提供程序范围

UICONFIGCONNECTIVITYCRITERION <ConnectivityCriteria[]>:

  • [Type <ConnectivityType?>]:连接类型
  • [Value <String[]>]:用于检查连接的查询

UICONFIGDATATYPE <LastDataReceivedDataType[]>:

  • [LastDataReceivedQuery <String>]:查询指示收到的最后一个数据
  • [Name <String>]:要显示在图形中的数据类型的名称。 可与 {{graphQueriesTableName}} 占位符一起使用

UICONFIGGRAPHQUERY <GraphQueries[]>:

  • [BaseQuery <String>]:图形的基本查询
  • [Legend <String>]:图形的图例
  • [MetricName <String>]:查询检查的指标

UICONFIGINSTRUCTIONSTEP <InstructionSteps[]>:

  • [Description <String>]:说明步骤说明
  • [Instruction <IConnectorInstructionModelBase[]>]:说明步骤详细信息
    • Type <SettingType>:设置的类型
    • [Parameter <IAny>]:设置的参数
  • [Title <String>]:说明步骤标题

UICONFIGSAMPLEQUERY <SampleQueries[]>:

  • [Description <String>]:示例查询说明
  • [Query <String>]:示例查询