Azure Native v1.102.0, May 2 23

azure-native.securityinsights.Watchlist

Explore with Pulumi AI

Represents a Watchlist in Azure Security Insights. API Version: 2021-03-01-preview.

Example Usage

Creates or updates a watchlist and bulk creates watchlist items.

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var watchlist = new AzureNative.SecurityInsights.Watchlist("watchlist", new()
    {
        ContentType = "text/csv",
        Description = "Watchlist from CSV content",
        DisplayName = "High Value Assets Watchlist",
        ItemsSearchKey = "header1",
        NumberOfLinesToSkip = 1,
        OperationalInsightsResourceProvider = "Microsoft.OperationalInsights",
        Provider = "Microsoft",
        RawContent = @"This line will be skipped
header1,header2
value1,value2",
        ResourceGroupName = "myRg",
        Source = "Local file",
        WatchlistAlias = "highValueAsset",
        WorkspaceName = "myWorkspace",
    });

});

package main

import (
	securityinsights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/securityinsights"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securityinsights.NewWatchlist(ctx, "watchlist", &securityinsights.WatchlistArgs{
			ContentType:                         pulumi.String("text/csv"),
			Description:                         pulumi.String("Watchlist from CSV content"),
			DisplayName:                         pulumi.String("High Value Assets Watchlist"),
			ItemsSearchKey:                      pulumi.String("header1"),
			NumberOfLinesToSkip:                 pulumi.Int(1),
			OperationalInsightsResourceProvider: pulumi.String("Microsoft.OperationalInsights"),
			Provider:                            pulumi.String("Microsoft"),
			RawContent:                          pulumi.String("This line will be skipped\nheader1,header2\nvalue1,value2"),
			ResourceGroupName:                   pulumi.String("myRg"),
			Source:                              pulumi.String("Local file"),
			WatchlistAlias:                      pulumi.String("highValueAsset"),
			WorkspaceName:                       pulumi.String("myWorkspace"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.Watchlist;
import com.pulumi.azurenative.securityinsights.WatchlistArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var watchlist = new Watchlist("watchlist", WatchlistArgs.builder()        
            .contentType("text/csv")
            .description("Watchlist from CSV content")
            .displayName("High Value Assets Watchlist")
            .itemsSearchKey("header1")
            .numberOfLinesToSkip(1)
            .operationalInsightsResourceProvider("Microsoft.OperationalInsights")
            .provider("Microsoft")
            .rawContent("""
This line will be skipped
header1,header2
value1,value2            """)
            .resourceGroupName("myRg")
            .source("Local file")
            .watchlistAlias("highValueAsset")
            .workspaceName("myWorkspace")
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

watchlist = azure_native.securityinsights.Watchlist("watchlist",
    content_type="text/csv",
    description="Watchlist from CSV content",
    display_name="High Value Assets Watchlist",
    items_search_key="header1",
    number_of_lines_to_skip=1,
    operational_insights_resource_provider="Microsoft.OperationalInsights",
    provider="Microsoft",
    raw_content="""This line will be skipped
header1,header2
value1,value2""",
    resource_group_name="myRg",
    source="Local file",
    watchlist_alias="highValueAsset",
    workspace_name="myWorkspace")

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const watchlist = new azure_native.securityinsights.Watchlist("watchlist", {
    contentType: "text/csv",
    description: "Watchlist from CSV content",
    displayName: "High Value Assets Watchlist",
    itemsSearchKey: "header1",
    numberOfLinesToSkip: 1,
    operationalInsightsResourceProvider: "Microsoft.OperationalInsights",
    provider: "Microsoft",
    rawContent: `This line will be skipped
header1,header2
value1,value2`,
    resourceGroupName: "myRg",
    source: "Local file",
    watchlistAlias: "highValueAsset",
    workspaceName: "myWorkspace",
});

resources:
  watchlist:
    type: azure-native:securityinsights:Watchlist
    properties:
      contentType: text/csv
      description: Watchlist from CSV content
      displayName: High Value Assets Watchlist
      itemsSearchKey: header1
      numberOfLinesToSkip: 1
      operationalInsightsResourceProvider: Microsoft.OperationalInsights
      provider: Microsoft
      rawContent: |-
        This line will be skipped
        header1,header2
        value1,value2        
      resourceGroupName: myRg
      source: Local file
      watchlistAlias: highValueAsset
      workspaceName: myWorkspace

Creates or updates a watchlist.

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var watchlist = new AzureNative.SecurityInsights.Watchlist("watchlist", new()
    {
        Description = "Watchlist from CSV content",
        DisplayName = "High Value Assets Watchlist",
        ItemsSearchKey = "header1",
        OperationalInsightsResourceProvider = "Microsoft.OperationalInsights",
        Provider = "Microsoft",
        ResourceGroupName = "myRg",
        Source = "Local file",
        WatchlistAlias = "highValueAsset",
        WorkspaceName = "myWorkspace",
    });

});

package main

import (
	securityinsights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/securityinsights"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securityinsights.NewWatchlist(ctx, "watchlist", &securityinsights.WatchlistArgs{
			Description:                         pulumi.String("Watchlist from CSV content"),
			DisplayName:                         pulumi.String("High Value Assets Watchlist"),
			ItemsSearchKey:                      pulumi.String("header1"),
			OperationalInsightsResourceProvider: pulumi.String("Microsoft.OperationalInsights"),
			Provider:                            pulumi.String("Microsoft"),
			ResourceGroupName:                   pulumi.String("myRg"),
			Source:                              pulumi.String("Local file"),
			WatchlistAlias:                      pulumi.String("highValueAsset"),
			WorkspaceName:                       pulumi.String("myWorkspace"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.Watchlist;
import com.pulumi.azurenative.securityinsights.WatchlistArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var watchlist = new Watchlist("watchlist", WatchlistArgs.builder()        
            .description("Watchlist from CSV content")
            .displayName("High Value Assets Watchlist")
            .itemsSearchKey("header1")
            .operationalInsightsResourceProvider("Microsoft.OperationalInsights")
            .provider("Microsoft")
            .resourceGroupName("myRg")
            .source("Local file")
            .watchlistAlias("highValueAsset")
            .workspaceName("myWorkspace")
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

watchlist = azure_native.securityinsights.Watchlist("watchlist",
    description="Watchlist from CSV content",
    display_name="High Value Assets Watchlist",
    items_search_key="header1",
    operational_insights_resource_provider="Microsoft.OperationalInsights",
    provider="Microsoft",
    resource_group_name="myRg",
    source="Local file",
    watchlist_alias="highValueAsset",
    workspace_name="myWorkspace")

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const watchlist = new azure_native.securityinsights.Watchlist("watchlist", {
    description: "Watchlist from CSV content",
    displayName: "High Value Assets Watchlist",
    itemsSearchKey: "header1",
    operationalInsightsResourceProvider: "Microsoft.OperationalInsights",
    provider: "Microsoft",
    resourceGroupName: "myRg",
    source: "Local file",
    watchlistAlias: "highValueAsset",
    workspaceName: "myWorkspace",
});

resources:
  watchlist:
    type: azure-native:securityinsights:Watchlist
    properties:
      description: Watchlist from CSV content
      displayName: High Value Assets Watchlist
      itemsSearchKey: header1
      operationalInsightsResourceProvider: Microsoft.OperationalInsights
      provider: Microsoft
      resourceGroupName: myRg
      source: Local file
      watchlistAlias: highValueAsset
      workspaceName: myWorkspace

Create Watchlist Resource

new Watchlist(name: string, args: WatchlistArgs, opts?: CustomResourceOptions);

@overload
def Watchlist(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              content_type: Optional[str] = None,
              created: Optional[str] = None,
              created_by: Optional[WatchlistUserInfoArgs] = None,
              default_duration: Optional[str] = None,
              description: Optional[str] = None,
              display_name: Optional[str] = None,
              is_deleted: Optional[bool] = None,
              items_search_key: Optional[str] = None,
              labels: Optional[Sequence[str]] = None,
              number_of_lines_to_skip: Optional[int] = None,
              operational_insights_resource_provider: Optional[str] = None,
              provider: Optional[str] = None,
              raw_content: Optional[str] = None,
              resource_group_name: Optional[str] = None,
              source: Optional[Union[str, Source]] = None,
              tenant_id: Optional[str] = None,
              updated: Optional[str] = None,
              updated_by: Optional[WatchlistUserInfoArgs] = None,
              upload_status: Optional[str] = None,
              watchlist_alias: Optional[str] = None,
              watchlist_id: Optional[str] = None,
              watchlist_items_count: Optional[int] = None,
              watchlist_type: Optional[str] = None,
              workspace_name: Optional[str] = None)
@overload
def Watchlist(resource_name: str,
              args: WatchlistArgs,
              opts: Optional[ResourceOptions] = None)

func NewWatchlist(ctx *Context, name string, args WatchlistArgs, opts ...ResourceOption) (*Watchlist, error)

public Watchlist(string name, WatchlistArgs args, CustomResourceOptions? opts = null)

public Watchlist(String name, WatchlistArgs args)
public Watchlist(String name, WatchlistArgs args, CustomResourceOptions options)

type: azure-native:securityinsights:Watchlist
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args WatchlistArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args WatchlistArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args WatchlistArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args WatchlistArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args WatchlistArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Watchlist Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Watchlist resource accepts the following input properties:

DisplayName string: The display name of the watchlist
ItemsSearchKey string: The search key is used to optimize query performance when using watchlists for joins with other data. For example, enable a column with IP addresses to be the designated SearchKey field, then use this field as the key field when joining to other event data by IP address.
OperationalInsightsResourceProvider string: The namespace of workspaces resource provider- Microsoft.OperationalInsights.
Provider string: The provider of the watchlist
ResourceGroupName string: The name of the resource group. The name is case insensitive.
Source string | Pulumi.AzureNative.SecurityInsights.Source: The source of the watchlist
WorkspaceName string: The name of the workspace.
ContentType string: The content type of the raw content. Example : text/csv or text/tsv
Created string: The time the watchlist was created
CreatedBy Pulumi.AzureNative.SecurityInsights.Inputs.WatchlistUserInfoArgs: Describes a user that created the watchlist
DefaultDuration string: The default duration of a watchlist (in ISO 8601 duration format)
Description string: A description of the watchlist
IsDeleted bool: A flag that indicates if the watchlist is deleted or not
Labels List<string>: List of labels relevant to this watchlist
NumberOfLinesToSkip int: The number of lines in a csv/tsv content to skip before the header
RawContent string: The raw content that represents to watchlist items to create. In case of csv/tsv content type, it's the content of the file that will parsed by the endpoint
TenantId string: The tenantId where the watchlist belongs to
Updated string: The last time the watchlist was updated
UpdatedBy Pulumi.AzureNative.SecurityInsights.Inputs.WatchlistUserInfoArgs: Describes a user that updated the watchlist
UploadStatus string: The status of the Watchlist upload : New, InProgress or Complete. Pls note : When a Watchlist upload status is equal to InProgress, the Watchlist cannot be deleted
WatchlistAlias string: The alias of the watchlist
WatchlistId string: The id (a Guid) of the watchlist
WatchlistItemsCount int: The number of Watchlist Items in the Watchlist
WatchlistType string: The type of the watchlist

DisplayName string: The display name of the watchlist
ItemsSearchKey string: The search key is used to optimize query performance when using watchlists for joins with other data. For example, enable a column with IP addresses to be the designated SearchKey field, then use this field as the key field when joining to other event data by IP address.
OperationalInsightsResourceProvider string: The namespace of workspaces resource provider- Microsoft.OperationalInsights.
Provider string: The provider of the watchlist
ResourceGroupName string: The name of the resource group. The name is case insensitive.
Source string | Source: The source of the watchlist
WorkspaceName string: The name of the workspace.
ContentType string: The content type of the raw content. Example : text/csv or text/tsv
Created string: The time the watchlist was created
CreatedBy WatchlistUserInfoArgs: Describes a user that created the watchlist
DefaultDuration string: The default duration of a watchlist (in ISO 8601 duration format)
Description string: A description of the watchlist
IsDeleted bool: A flag that indicates if the watchlist is deleted or not
Labels []string: List of labels relevant to this watchlist
NumberOfLinesToSkip int: The number of lines in a csv/tsv content to skip before the header
RawContent string: The raw content that represents to watchlist items to create. In case of csv/tsv content type, it's the content of the file that will parsed by the endpoint
TenantId string: The tenantId where the watchlist belongs to
Updated string: The last time the watchlist was updated
UpdatedBy WatchlistUserInfoArgs: Describes a user that updated the watchlist
UploadStatus string: The status of the Watchlist upload : New, InProgress or Complete. Pls note : When a Watchlist upload status is equal to InProgress, the Watchlist cannot be deleted
WatchlistAlias string: The alias of the watchlist
WatchlistId string: The id (a Guid) of the watchlist
WatchlistItemsCount int: The number of Watchlist Items in the Watchlist
WatchlistType string: The type of the watchlist

displayName String: The display name of the watchlist
itemsSearchKey String: The search key is used to optimize query performance when using watchlists for joins with other data. For example, enable a column with IP addresses to be the designated SearchKey field, then use this field as the key field when joining to other event data by IP address.
operationalInsightsResourceProvider String: The namespace of workspaces resource provider- Microsoft.OperationalInsights.
provider String: The provider of the watchlist
resourceGroupName String: The name of the resource group. The name is case insensitive.
source String | Source: The source of the watchlist
workspaceName String: The name of the workspace.
contentType String: The content type of the raw content. Example : text/csv or text/tsv
created String: The time the watchlist was created
createdBy WatchlistUserInfoArgs: Describes a user that created the watchlist
defaultDuration String: The default duration of a watchlist (in ISO 8601 duration format)
description String: A description of the watchlist
isDeleted Boolean: A flag that indicates if the watchlist is deleted or not
labels List<String>: List of labels relevant to this watchlist
numberOfLinesToSkip Integer: The number of lines in a csv/tsv content to skip before the header
rawContent String: The raw content that represents to watchlist items to create. In case of csv/tsv content type, it's the content of the file that will parsed by the endpoint
tenantId String: The tenantId where the watchlist belongs to
updated String: The last time the watchlist was updated
updatedBy WatchlistUserInfoArgs: Describes a user that updated the watchlist
uploadStatus String: The status of the Watchlist upload : New, InProgress or Complete. Pls note : When a Watchlist upload status is equal to InProgress, the Watchlist cannot be deleted
watchlistAlias String: The alias of the watchlist
watchlistId String: The id (a Guid) of the watchlist
watchlistItemsCount Integer: The number of Watchlist Items in the Watchlist
watchlistType String: The type of the watchlist

displayName string: The display name of the watchlist
itemsSearchKey string: The search key is used to optimize query performance when using watchlists for joins with other data. For example, enable a column with IP addresses to be the designated SearchKey field, then use this field as the key field when joining to other event data by IP address.
operationalInsightsResourceProvider string: The namespace of workspaces resource provider- Microsoft.OperationalInsights.
provider string: The provider of the watchlist
resourceGroupName string: The name of the resource group. The name is case insensitive.
source string | Source: The source of the watchlist
workspaceName string: The name of the workspace.
contentType string: The content type of the raw content. Example : text/csv or text/tsv
created string: The time the watchlist was created
createdBy WatchlistUserInfoArgs: Describes a user that created the watchlist
defaultDuration string: The default duration of a watchlist (in ISO 8601 duration format)
description string: A description of the watchlist
isDeleted boolean: A flag that indicates if the watchlist is deleted or not
labels string[]: List of labels relevant to this watchlist
numberOfLinesToSkip number: The number of lines in a csv/tsv content to skip before the header
rawContent string: The raw content that represents to watchlist items to create. In case of csv/tsv content type, it's the content of the file that will parsed by the endpoint
tenantId string: The tenantId where the watchlist belongs to
updated string: The last time the watchlist was updated
updatedBy WatchlistUserInfoArgs: Describes a user that updated the watchlist
uploadStatus string: The status of the Watchlist upload : New, InProgress or Complete. Pls note : When a Watchlist upload status is equal to InProgress, the Watchlist cannot be deleted
watchlistAlias string: The alias of the watchlist
watchlistId string: The id (a Guid) of the watchlist
watchlistItemsCount number: The number of Watchlist Items in the Watchlist
watchlistType string: The type of the watchlist

display_name str: The display name of the watchlist
items_search_key str: The search key is used to optimize query performance when using watchlists for joins with other data. For example, enable a column with IP addresses to be the designated SearchKey field, then use this field as the key field when joining to other event data by IP address.
operational_insights_resource_provider str: The namespace of workspaces resource provider- Microsoft.OperationalInsights.
provider str: The provider of the watchlist
resource_group_name str: The name of the resource group. The name is case insensitive.
source str | Source: The source of the watchlist
workspace_name str: The name of the workspace.
content_type str: The content type of the raw content. Example : text/csv or text/tsv
created str: The time the watchlist was created
created_by WatchlistUserInfoArgs: Describes a user that created the watchlist
default_duration str: The default duration of a watchlist (in ISO 8601 duration format)
description str: A description of the watchlist
is_deleted bool: A flag that indicates if the watchlist is deleted or not
labels Sequence[str]: List of labels relevant to this watchlist
number_of_lines_to_skip int: The number of lines in a csv/tsv content to skip before the header
raw_content str: The raw content that represents to watchlist items to create. In case of csv/tsv content type, it's the content of the file that will parsed by the endpoint
tenant_id str: The tenantId where the watchlist belongs to
updated str: The last time the watchlist was updated
updated_by WatchlistUserInfoArgs: Describes a user that updated the watchlist
upload_status str: The status of the Watchlist upload : New, InProgress or Complete. Pls note : When a Watchlist upload status is equal to InProgress, the Watchlist cannot be deleted
watchlist_alias str: The alias of the watchlist
watchlist_id str: The id (a Guid) of the watchlist
watchlist_items_count int: The number of Watchlist Items in the Watchlist
watchlist_type str: The type of the watchlist

displayName String: The display name of the watchlist
itemsSearchKey String: The search key is used to optimize query performance when using watchlists for joins with other data. For example, enable a column with IP addresses to be the designated SearchKey field, then use this field as the key field when joining to other event data by IP address.
operationalInsightsResourceProvider String: The namespace of workspaces resource provider- Microsoft.OperationalInsights.
provider String: The provider of the watchlist
resourceGroupName String: The name of the resource group. The name is case insensitive.
source String | "Local file" | "Remote storage": The source of the watchlist
workspaceName String: The name of the workspace.
contentType String: The content type of the raw content. Example : text/csv or text/tsv
created String: The time the watchlist was created
createdBy Property Map: Describes a user that created the watchlist
defaultDuration String: The default duration of a watchlist (in ISO 8601 duration format)
description String: A description of the watchlist
isDeleted Boolean: A flag that indicates if the watchlist is deleted or not
labels List<String>: List of labels relevant to this watchlist
numberOfLinesToSkip Number: The number of lines in a csv/tsv content to skip before the header
rawContent String: The raw content that represents to watchlist items to create. In case of csv/tsv content type, it's the content of the file that will parsed by the endpoint
tenantId String: The tenantId where the watchlist belongs to
updated String: The last time the watchlist was updated
updatedBy Property Map: Describes a user that updated the watchlist
uploadStatus String: The status of the Watchlist upload : New, InProgress or Complete. Pls note : When a Watchlist upload status is equal to InProgress, the Watchlist cannot be deleted
watchlistAlias String: The alias of the watchlist
watchlistId String: The id (a Guid) of the watchlist
watchlistItemsCount Number: The number of Watchlist Items in the Watchlist
watchlistType String: The type of the watchlist

Outputs

All input properties are implicitly available as output properties. Additionally, the Watchlist resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
Name string: Azure resource name
SystemData Pulumi.AzureNative.SecurityInsights.Outputs.SystemDataResponse: Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string: Azure resource type
Etag string: Etag of the azure resource

Id string: The provider-assigned unique ID for this managed resource.
Name string: Azure resource name
SystemData SystemDataResponse: Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string: Azure resource type
Etag string: Etag of the azure resource

id String: The provider-assigned unique ID for this managed resource.
name String: Azure resource name
systemData SystemDataResponse: Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String: Azure resource type
etag String: Etag of the azure resource

id string: The provider-assigned unique ID for this managed resource.
name string: Azure resource name
systemData SystemDataResponse: Azure Resource Manager metadata containing createdBy and modifiedBy information.
type string: Azure resource type
etag string: Etag of the azure resource

id str: The provider-assigned unique ID for this managed resource.
name str: Azure resource name
system_data SystemDataResponse: Azure Resource Manager metadata containing createdBy and modifiedBy information.
type str: Azure resource type
etag str: Etag of the azure resource

id String: The provider-assigned unique ID for this managed resource.
name String: Azure resource name
systemData Property Map: Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String: Azure resource type
etag String: Etag of the azure resource

Supporting Types

Source

Local_file: Local file
Remote_storage: Remote storage

Source_Local_file: Local file
Source_Remote_storage: Remote storage

Local_file: Local file
Remote_storage: Remote storage

Local_file: Local file
Remote_storage: Remote storage

LOCAL_FILE: Local file
REMOTE_STORAGE: Remote storage

"Local file": Local file
"Remote storage": Remote storage

SystemDataResponse

CreatedAt string: The timestamp of resource creation (UTC).
CreatedBy string: The identity that created the resource.
CreatedByType string: The type of identity that created the resource.
LastModifiedAt string: The timestamp of resource last modification (UTC)
LastModifiedBy string: The identity that last modified the resource.
LastModifiedByType string: The type of identity that last modified the resource.

CreatedAt string: The timestamp of resource creation (UTC).
CreatedBy string: The identity that created the resource.
CreatedByType string: The type of identity that created the resource.
LastModifiedAt string: The timestamp of resource last modification (UTC)
LastModifiedBy string: The identity that last modified the resource.
LastModifiedByType string: The type of identity that last modified the resource.

createdAt String: The timestamp of resource creation (UTC).
createdBy String: The identity that created the resource.
createdByType String: The type of identity that created the resource.
lastModifiedAt String: The timestamp of resource last modification (UTC)
lastModifiedBy String: The identity that last modified the resource.
lastModifiedByType String: The type of identity that last modified the resource.

createdAt string: The timestamp of resource creation (UTC).
createdBy string: The identity that created the resource.
createdByType string: The type of identity that created the resource.
lastModifiedAt string: The timestamp of resource last modification (UTC)
lastModifiedBy string: The identity that last modified the resource.
lastModifiedByType string: The type of identity that last modified the resource.

created_at str: The timestamp of resource creation (UTC).
created_by str: The identity that created the resource.
created_by_type str: The type of identity that created the resource.
last_modified_at str: The timestamp of resource last modification (UTC)
last_modified_by str: The identity that last modified the resource.
last_modified_by_type str: The type of identity that last modified the resource.

createdAt String: The timestamp of resource creation (UTC).
createdBy String: The identity that created the resource.
createdByType String: The type of identity that created the resource.
lastModifiedAt String: The timestamp of resource last modification (UTC)
lastModifiedBy String: The identity that last modified the resource.
lastModifiedByType String: The type of identity that last modified the resource.

WatchlistUserInfo

ObjectId string: The object id of the user.

ObjectId string: The object id of the user.

objectId String: The object id of the user.

objectId string: The object id of the user.

object_id str: The object id of the user.

objectId String: The object id of the user.

WatchlistUserInfoResponse

Email string: The email of the user.
Name string: The name of the user.
ObjectId string: The object id of the user.

Email string: The email of the user.
Name string: The name of the user.
ObjectId string: The object id of the user.

email String: The email of the user.
name String: The name of the user.
objectId String: The object id of the user.

email string: The email of the user.
name string: The name of the user.
objectId string: The object id of the user.

email str: The email of the user.
name str: The name of the user.
object_id str: The object id of the user.

email String: The email of the user.
name String: The name of the user.
objectId String: The object id of the user.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:securityinsights:Watchlist highValueAsset /subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/watchlists/highValueAsset

Package Details

Repository: Azure Native pulumi/pulumi-azure-native
License: Apache-2.0