azure-native.securityinsights.FusionAlertRule
Represents Fusion alert rule. API Version: 2020-01-01.
Example Usage
Creates or updates a Fusion alert rule.
using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var fusionAlertRule = new AzureNative.SecurityInsights.FusionAlertRule("fusionAlertRule", new()
{
AlertRuleTemplateName = "f71aba3d-28fb-450b-b192-4e76a83015c8",
Enabled = true,
Kind = "Fusion",
ResourceGroupName = "myRg",
RuleId = "myFirstFusionRule",
WorkspaceName = "myWorkspace",
});
});
package main
import (
securityinsights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/securityinsights"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := securityinsights.NewFusionAlertRule(ctx, "fusionAlertRule", &securityinsights.FusionAlertRuleArgs{
AlertRuleTemplateName: pulumi.String("f71aba3d-28fb-450b-b192-4e76a83015c8"),
Enabled: pulumi.Bool(true),
Kind: pulumi.String("Fusion"),
ResourceGroupName: pulumi.String("myRg"),
RuleId: pulumi.String("myFirstFusionRule"),
WorkspaceName: pulumi.String("myWorkspace"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.FusionAlertRule;
import com.pulumi.azurenative.securityinsights.FusionAlertRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var fusionAlertRule = new FusionAlertRule("fusionAlertRule", FusionAlertRuleArgs.builder()
.alertRuleTemplateName("f71aba3d-28fb-450b-b192-4e76a83015c8")
.enabled(true)
.kind("Fusion")
.resourceGroupName("myRg")
.ruleId("myFirstFusionRule")
.workspaceName("myWorkspace")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
fusion_alert_rule = azure_native.securityinsights.FusionAlertRule("fusionAlertRule",
alert_rule_template_name="f71aba3d-28fb-450b-b192-4e76a83015c8",
enabled=True,
kind="Fusion",
resource_group_name="myRg",
rule_id="myFirstFusionRule",
workspace_name="myWorkspace")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const fusionAlertRule = new azure_native.securityinsights.FusionAlertRule("fusionAlertRule", {
alertRuleTemplateName: "f71aba3d-28fb-450b-b192-4e76a83015c8",
enabled: true,
kind: "Fusion",
resourceGroupName: "myRg",
ruleId: "myFirstFusionRule",
workspaceName: "myWorkspace",
});
resources:
fusionAlertRule:
type: azure-native:securityinsights:FusionAlertRule
properties:
alertRuleTemplateName: f71aba3d-28fb-450b-b192-4e76a83015c8
enabled: true
kind: Fusion
resourceGroupName: myRg
ruleId: myFirstFusionRule
workspaceName: myWorkspace
Creates or updates a MicrosoftSecurityIncidentCreation rule.
using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var fusionAlertRule = new AzureNative.SecurityInsights.FusionAlertRule("fusionAlertRule", new()
{
ResourceGroupName = "myRg",
RuleId = "microsoftSecurityIncidentCreationRuleExample",
WorkspaceName = "myWorkspace",
});
});
package main
import (
securityinsights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/securityinsights"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := securityinsights.NewFusionAlertRule(ctx, "fusionAlertRule", &securityinsights.FusionAlertRuleArgs{
ResourceGroupName: pulumi.String("myRg"),
RuleId: pulumi.String("microsoftSecurityIncidentCreationRuleExample"),
WorkspaceName: pulumi.String("myWorkspace"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.FusionAlertRule;
import com.pulumi.azurenative.securityinsights.FusionAlertRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var fusionAlertRule = new FusionAlertRule("fusionAlertRule", FusionAlertRuleArgs.builder()
.resourceGroupName("myRg")
.ruleId("microsoftSecurityIncidentCreationRuleExample")
.workspaceName("myWorkspace")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
fusion_alert_rule = azure_native.securityinsights.FusionAlertRule("fusionAlertRule",
resource_group_name="myRg",
rule_id="microsoftSecurityIncidentCreationRuleExample",
workspace_name="myWorkspace")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const fusionAlertRule = new azure_native.securityinsights.FusionAlertRule("fusionAlertRule", {
resourceGroupName: "myRg",
ruleId: "microsoftSecurityIncidentCreationRuleExample",
workspaceName: "myWorkspace",
});
resources:
fusionAlertRule:
type: azure-native:securityinsights:FusionAlertRule
properties:
resourceGroupName: myRg
ruleId: microsoftSecurityIncidentCreationRuleExample
workspaceName: myWorkspace
Creates or updates a Scheduled alert rule.
using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var fusionAlertRule = new AzureNative.SecurityInsights.FusionAlertRule("fusionAlertRule", new()
{
ResourceGroupName = "myRg",
RuleId = "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
WorkspaceName = "myWorkspace",
});
});
package main
import (
securityinsights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/securityinsights"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := securityinsights.NewFusionAlertRule(ctx, "fusionAlertRule", &securityinsights.FusionAlertRuleArgs{
ResourceGroupName: pulumi.String("myRg"),
RuleId: pulumi.String("73e01a99-5cd7-4139-a149-9f2736ff2ab5"),
WorkspaceName: pulumi.String("myWorkspace"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.FusionAlertRule;
import com.pulumi.azurenative.securityinsights.FusionAlertRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var fusionAlertRule = new FusionAlertRule("fusionAlertRule", FusionAlertRuleArgs.builder()
.resourceGroupName("myRg")
.ruleId("73e01a99-5cd7-4139-a149-9f2736ff2ab5")
.workspaceName("myWorkspace")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
fusion_alert_rule = azure_native.securityinsights.FusionAlertRule("fusionAlertRule",
resource_group_name="myRg",
rule_id="73e01a99-5cd7-4139-a149-9f2736ff2ab5",
workspace_name="myWorkspace")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const fusionAlertRule = new azure_native.securityinsights.FusionAlertRule("fusionAlertRule", {
resourceGroupName: "myRg",
ruleId: "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
workspaceName: "myWorkspace",
});
resources:
fusionAlertRule:
type: azure-native:securityinsights:FusionAlertRule
properties:
resourceGroupName: myRg
ruleId: 73e01a99-5cd7-4139-a149-9f2736ff2ab5
workspaceName: myWorkspace
Create FusionAlertRule Resource
new FusionAlertRule(name: string, args: FusionAlertRuleArgs, opts?: CustomResourceOptions);
@overload
def FusionAlertRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
alert_rule_template_name: Optional[str] = None,
enabled: Optional[bool] = None,
resource_group_name: Optional[str] = None,
rule_id: Optional[str] = None,
workspace_name: Optional[str] = None)
@overload
def FusionAlertRule(resource_name: str,
args: FusionAlertRuleArgs,
opts: Optional[ResourceOptions] = None)
func NewFusionAlertRule(ctx *Context, name string, args FusionAlertRuleArgs, opts ...ResourceOption) (*FusionAlertRule, error)
public FusionAlertRule(string name, FusionAlertRuleArgs args, CustomResourceOptions? opts = null)
public FusionAlertRule(String name, FusionAlertRuleArgs args)
public FusionAlertRule(String name, FusionAlertRuleArgs args, CustomResourceOptions options)
type: azure-native:securityinsights:FusionAlertRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
FusionAlertRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The FusionAlertRule resource accepts the following input properties:
- Alert
Rule stringTemplate Name The Name of the alert rule template used to create this rule.
- Enabled bool
Determines whether this alert rule is enabled or disabled.
- Resource
Group stringName The name of the resource group within the user's subscription. The name is case insensitive.
- Workspace
Name string The name of the workspace.
- Rule
Id string Alert rule ID
- Alert
Rule stringTemplate Name The Name of the alert rule template used to create this rule.
- Enabled bool
Determines whether this alert rule is enabled or disabled.
- Resource
Group stringName The name of the resource group within the user's subscription. The name is case insensitive.
- Workspace
Name string The name of the workspace.
- Rule
Id string Alert rule ID
- alert
Rule StringTemplate Name The Name of the alert rule template used to create this rule.
- enabled Boolean
Determines whether this alert rule is enabled or disabled.
- resource
Group StringName The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name String The name of the workspace.
- rule
Id String Alert rule ID
- alert
Rule stringTemplate Name The Name of the alert rule template used to create this rule.
- enabled boolean
Determines whether this alert rule is enabled or disabled.
- resource
Group stringName The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name string The name of the workspace.
- rule
Id string Alert rule ID
- alert_
rule_ strtemplate_ name The Name of the alert rule template used to create this rule.
- enabled bool
Determines whether this alert rule is enabled or disabled.
- resource_
group_ strname The name of the resource group within the user's subscription. The name is case insensitive.
- workspace_
name str The name of the workspace.
- rule_
id str Alert rule ID
- alert
Rule StringTemplate Name The Name of the alert rule template used to create this rule.
- enabled Boolean
Determines whether this alert rule is enabled or disabled.
- resource
Group StringName The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name String The name of the workspace.
- rule
Id String Alert rule ID
Outputs
All input properties are implicitly available as output properties. Additionally, the FusionAlertRule resource produces the following output properties:
- Description string
The description of the alert rule.
- Display
Name string The display name for alerts created by this alert rule.
- Id string
The provider-assigned unique ID for this managed resource.
- Last
Modified stringUtc The last time that this alert has been modified.
- Name string
Azure resource name
- Severity string
The severity for alerts created by this alert rule.
- Tactics List<string>
The tactics of the alert rule
- Type string
Azure resource type
- Etag string
Etag of the azure resource
- Description string
The description of the alert rule.
- Display
Name string The display name for alerts created by this alert rule.
- Id string
The provider-assigned unique ID for this managed resource.
- Last
Modified stringUtc The last time that this alert has been modified.
- Name string
Azure resource name
- Severity string
The severity for alerts created by this alert rule.
- Tactics []string
The tactics of the alert rule
- Type string
Azure resource type
- Etag string
Etag of the azure resource
- description String
The description of the alert rule.
- display
Name String The display name for alerts created by this alert rule.
- id String
The provider-assigned unique ID for this managed resource.
- last
Modified StringUtc The last time that this alert has been modified.
- name String
Azure resource name
- severity String
The severity for alerts created by this alert rule.
- tactics List<String>
The tactics of the alert rule
- type String
Azure resource type
- etag String
Etag of the azure resource
- description string
The description of the alert rule.
- display
Name string The display name for alerts created by this alert rule.
- id string
The provider-assigned unique ID for this managed resource.
- last
Modified stringUtc The last time that this alert has been modified.
- name string
Azure resource name
- severity string
The severity for alerts created by this alert rule.
- tactics string[]
The tactics of the alert rule
- type string
Azure resource type
- etag string
Etag of the azure resource
- description str
The description of the alert rule.
- display_
name str The display name for alerts created by this alert rule.
- id str
The provider-assigned unique ID for this managed resource.
- last_
modified_ strutc The last time that this alert has been modified.
- name str
Azure resource name
- severity str
The severity for alerts created by this alert rule.
- tactics Sequence[str]
The tactics of the alert rule
- type str
Azure resource type
- etag str
Etag of the azure resource
- description String
The description of the alert rule.
- display
Name String The display name for alerts created by this alert rule.
- id String
The provider-assigned unique ID for this managed resource.
- last
Modified StringUtc The last time that this alert has been modified.
- name String
Azure resource name
- severity String
The severity for alerts created by this alert rule.
- tactics List<String>
The tactics of the alert rule
- type String
Azure resource type
- etag String
Etag of the azure resource
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:securityinsights:FusionAlertRule 73e01a99-5cd7-4139-a149-9f2736ff2ab5 /subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/73e01a99-5cd7-4139-a149-9f2736ff2ab5
Package Details
- Repository
- Azure Native pulumi/pulumi-azure-native
- License
- Apache-2.0