Azure Native
getIncident
Represents an incident in Azure Security Insights. API Version: 2020-01-01.
Using getIncident
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getIncident(args: GetIncidentArgs, opts?: InvokeOptions): Promise<GetIncidentResult>
function getIncidentOutput(args: GetIncidentOutputArgs, opts?: InvokeOptions): Output<GetIncidentResult>
def get_incident(incident_id: Optional[str] = None,
resource_group_name: Optional[str] = None,
workspace_name: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetIncidentResult
def get_incident_output(incident_id: Optional[pulumi.Input[str]] = None,
resource_group_name: Optional[pulumi.Input[str]] = None,
workspace_name: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetIncidentResult]
func LookupIncident(ctx *Context, args *LookupIncidentArgs, opts ...InvokeOption) (*LookupIncidentResult, error)
func LookupIncidentOutput(ctx *Context, args *LookupIncidentOutputArgs, opts ...InvokeOption) LookupIncidentResultOutput
> Note: This function is named LookupIncident
in the Go SDK.
public static class GetIncident
{
public static Task<GetIncidentResult> InvokeAsync(GetIncidentArgs args, InvokeOptions? opts = null)
public static Output<GetIncidentResult> Invoke(GetIncidentInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetIncidentResult> getIncident(GetIncidentArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
Fn::Invoke:
Function: azure-native:securityinsights:getIncident
Arguments:
# Arguments dictionary
The following arguments are supported:
- Incident
Id string Incident ID
- Resource
Group stringName The name of the resource group within the user's subscription. The name is case insensitive.
- Workspace
Name string The name of the workspace.
- Incident
Id string Incident ID
- Resource
Group stringName The name of the resource group within the user's subscription. The name is case insensitive.
- Workspace
Name string The name of the workspace.
- incident
Id String Incident ID
- resource
Group StringName The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name String The name of the workspace.
- incident
Id string Incident ID
- resource
Group stringName The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name string The name of the workspace.
- incident_
id str Incident ID
- resource_
group_ strname The name of the resource group within the user's subscription. The name is case insensitive.
- workspace_
name str The name of the workspace.
- incident
Id String Incident ID
- resource
Group StringName The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name String The name of the workspace.
getIncident Result
The following output properties are available:
- Additional
Data Pulumi.Azure Native. Security Insights. Outputs. Incident Additional Data Response Additional data on the incident
- Created
Time stringUtc The time the incident was created
- Id string
Azure resource Id
- Incident
Number int A sequential number
- Incident
Url string The deep-link url to the incident in Azure portal
- Last
Modified stringTime Utc The last time the incident was updated
- Name string
Azure resource name
- List<string>
List of resource ids of Analytic rules related to the incident
- Severity string
The severity of the incident
- Status string
The status of the incident
- Title string
The title of the incident
- Type string
Azure resource type
- Classification string
The reason the incident was closed
- Classification
Comment string Describes the reason the incident was closed
- Classification
Reason string The classification reason the incident was closed with
- Description string
The description of the incident
- Etag string
Etag of the azure resource
- First
Activity stringTime Utc The time of the first activity in the incident
- Labels
List<Pulumi.
Azure Native. Security Insights. Outputs. Incident Label Response> List of labels relevant to this incident
- Last
Activity stringTime Utc The time of the last activity in the incident
- Owner
Pulumi.
Azure Native. Security Insights. Outputs. Incident Owner Info Response Describes a user that the incident is assigned to
- Additional
Data IncidentAdditional Data Response Additional data on the incident
- Created
Time stringUtc The time the incident was created
- Id string
Azure resource Id
- Incident
Number int A sequential number
- Incident
Url string The deep-link url to the incident in Azure portal
- Last
Modified stringTime Utc The last time the incident was updated
- Name string
Azure resource name
- []string
List of resource ids of Analytic rules related to the incident
- Severity string
The severity of the incident
- Status string
The status of the incident
- Title string
The title of the incident
- Type string
Azure resource type
- Classification string
The reason the incident was closed
- Classification
Comment string Describes the reason the incident was closed
- Classification
Reason string The classification reason the incident was closed with
- Description string
The description of the incident
- Etag string
Etag of the azure resource
- First
Activity stringTime Utc The time of the first activity in the incident
- Labels
[]Incident
Label Response List of labels relevant to this incident
- Last
Activity stringTime Utc The time of the last activity in the incident
- Owner
Incident
Owner Info Response Describes a user that the incident is assigned to
- additional
Data IncidentAdditional Data Response Additional data on the incident
- created
Time StringUtc The time the incident was created
- id String
Azure resource Id
- incident
Number Integer A sequential number
- incident
Url String The deep-link url to the incident in Azure portal
- last
Modified StringTime Utc The last time the incident was updated
- name String
Azure resource name
- List<String>
List of resource ids of Analytic rules related to the incident
- severity String
The severity of the incident
- status String
The status of the incident
- title String
The title of the incident
- type String
Azure resource type
- classification String
The reason the incident was closed
- classification
Comment String Describes the reason the incident was closed
- classification
Reason String The classification reason the incident was closed with
- description String
The description of the incident
- etag String
Etag of the azure resource
- first
Activity StringTime Utc The time of the first activity in the incident
- labels
List<Incident
Label Response> List of labels relevant to this incident
- last
Activity StringTime Utc The time of the last activity in the incident
- owner
Incident
Owner Info Response Describes a user that the incident is assigned to
- additional
Data IncidentAdditional Data Response Additional data on the incident
- created
Time stringUtc The time the incident was created
- id string
Azure resource Id
- incident
Number number A sequential number
- incident
Url string The deep-link url to the incident in Azure portal
- last
Modified stringTime Utc The last time the incident was updated
- name string
Azure resource name
- string[]
List of resource ids of Analytic rules related to the incident
- severity string
The severity of the incident
- status string
The status of the incident
- title string
The title of the incident
- type string
Azure resource type
- classification string
The reason the incident was closed
- classification
Comment string Describes the reason the incident was closed
- classification
Reason string The classification reason the incident was closed with
- description string
The description of the incident
- etag string
Etag of the azure resource
- first
Activity stringTime Utc The time of the first activity in the incident
- labels
Incident
Label Response[] List of labels relevant to this incident
- last
Activity stringTime Utc The time of the last activity in the incident
- owner
Incident
Owner Info Response Describes a user that the incident is assigned to
- additional_
data IncidentAdditional Data Response Additional data on the incident
- created_
time_ strutc The time the incident was created
- id str
Azure resource Id
- incident_
number int A sequential number
- incident_
url str The deep-link url to the incident in Azure portal
- last_
modified_ strtime_ utc The last time the incident was updated
- name str
Azure resource name
- Sequence[str]
List of resource ids of Analytic rules related to the incident
- severity str
The severity of the incident
- status str
The status of the incident
- title str
The title of the incident
- type str
Azure resource type
- classification str
The reason the incident was closed
- classification_
comment str Describes the reason the incident was closed
- classification_
reason str The classification reason the incident was closed with
- description str
The description of the incident
- etag str
Etag of the azure resource
- first_
activity_ strtime_ utc The time of the first activity in the incident
- labels
Sequence[Incident
Label Response] List of labels relevant to this incident
- last_
activity_ strtime_ utc The time of the last activity in the incident
- owner
Incident
Owner Info Response Describes a user that the incident is assigned to
- additional
Data Property Map Additional data on the incident
- created
Time StringUtc The time the incident was created
- id String
Azure resource Id
- incident
Number Number A sequential number
- incident
Url String The deep-link url to the incident in Azure portal
- last
Modified StringTime Utc The last time the incident was updated
- name String
Azure resource name
- List<String>
List of resource ids of Analytic rules related to the incident
- severity String
The severity of the incident
- status String
The status of the incident
- title String
The title of the incident
- type String
Azure resource type
- classification String
The reason the incident was closed
- classification
Comment String Describes the reason the incident was closed
- classification
Reason String The classification reason the incident was closed with
- description String
The description of the incident
- etag String
Etag of the azure resource
- first
Activity StringTime Utc The time of the first activity in the incident
- labels List<Property Map>
List of labels relevant to this incident
- last
Activity StringTime Utc The time of the last activity in the incident
- owner Property Map
Describes a user that the incident is assigned to
Supporting Types
IncidentAdditionalDataResponse
- Alert
Product List<string>Names List of product names of alerts in the incident
- Alerts
Count int The number of alerts in the incident
- Bookmarks
Count int The number of bookmarks in the incident
- Comments
Count int The number of comments in the incident
- Tactics List<string>
The tactics associated with incident
- Alert
Product []stringNames List of product names of alerts in the incident
- Alerts
Count int The number of alerts in the incident
- Bookmarks
Count int The number of bookmarks in the incident
- Comments
Count int The number of comments in the incident
- Tactics []string
The tactics associated with incident
- alert
Product List<String>Names List of product names of alerts in the incident
- alerts
Count Integer The number of alerts in the incident
- bookmarks
Count Integer The number of bookmarks in the incident
- comments
Count Integer The number of comments in the incident
- tactics List<String>
The tactics associated with incident
- alert
Product string[]Names List of product names of alerts in the incident
- alerts
Count number The number of alerts in the incident
- bookmarks
Count number The number of bookmarks in the incident
- comments
Count number The number of comments in the incident
- tactics string[]
The tactics associated with incident
- alert_
product_ Sequence[str]names List of product names of alerts in the incident
- alerts_
count int The number of alerts in the incident
- bookmarks_
count int The number of bookmarks in the incident
- comments_
count int The number of comments in the incident
- tactics Sequence[str]
The tactics associated with incident
- alert
Product List<String>Names List of product names of alerts in the incident
- alerts
Count Number The number of alerts in the incident
- bookmarks
Count Number The number of bookmarks in the incident
- comments
Count Number The number of comments in the incident
- tactics List<String>
The tactics associated with incident
IncidentLabelResponse
- label_
name str The name of the label
- label_
type str The type of the label
IncidentOwnerInfoResponse
- Assigned
To string The name of the user the incident is assigned to.
- Email string
The email of the user the incident is assigned to.
- Object
Id string The object id of the user the incident is assigned to.
- User
Principal stringName The user principal name of the user the incident is assigned to.
- Assigned
To string The name of the user the incident is assigned to.
- Email string
The email of the user the incident is assigned to.
- Object
Id string The object id of the user the incident is assigned to.
- User
Principal stringName The user principal name of the user the incident is assigned to.
- assigned
To String The name of the user the incident is assigned to.
- email String
The email of the user the incident is assigned to.
- object
Id String The object id of the user the incident is assigned to.
- user
Principal StringName The user principal name of the user the incident is assigned to.
- assigned
To string The name of the user the incident is assigned to.
- email string
The email of the user the incident is assigned to.
- object
Id string The object id of the user the incident is assigned to.
- user
Principal stringName The user principal name of the user the incident is assigned to.
- assigned_
to str The name of the user the incident is assigned to.
- email str
The email of the user the incident is assigned to.
- object_
id str The object id of the user the incident is assigned to.
- user_
principal_ strname The user principal name of the user the incident is assigned to.
- assigned
To String The name of the user the incident is assigned to.
- email String
The email of the user the incident is assigned to.
- object
Id String The object id of the user the incident is assigned to.
- user
Principal StringName The user principal name of the user the incident is assigned to.
Package Details
- Repository
- https://github.com/pulumi/pulumi-azure-native
- License
- Apache-2.0