azure-native.securityinsights.FusionAlertRule
Explore with Pulumi AI
Represents Fusion alert rule. API Version: 2020-01-01.
Example Usage
Creates or updates a Fusion alert rule.
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var fusionAlertRule = new AzureNative.SecurityInsights.FusionAlertRule("fusionAlertRule", new()
{
AlertRuleTemplateName = "f71aba3d-28fb-450b-b192-4e76a83015c8",
Enabled = true,
Kind = "Fusion",
ResourceGroupName = "myRg",
RuleId = "myFirstFusionRule",
WorkspaceName = "myWorkspace",
});
});
package main
import (
securityinsights "github.com/pulumi/pulumi-azure-native-sdk/securityinsights"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := securityinsights.NewFusionAlertRule(ctx, "fusionAlertRule", &securityinsights.FusionAlertRuleArgs{
AlertRuleTemplateName: pulumi.String("f71aba3d-28fb-450b-b192-4e76a83015c8"),
Enabled: pulumi.Bool(true),
Kind: pulumi.String("Fusion"),
ResourceGroupName: pulumi.String("myRg"),
RuleId: pulumi.String("myFirstFusionRule"),
WorkspaceName: pulumi.String("myWorkspace"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.FusionAlertRule;
import com.pulumi.azurenative.securityinsights.FusionAlertRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var fusionAlertRule = new FusionAlertRule("fusionAlertRule", FusionAlertRuleArgs.builder()
.alertRuleTemplateName("f71aba3d-28fb-450b-b192-4e76a83015c8")
.enabled(true)
.kind("Fusion")
.resourceGroupName("myRg")
.ruleId("myFirstFusionRule")
.workspaceName("myWorkspace")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
fusion_alert_rule = azure_native.securityinsights.FusionAlertRule("fusionAlertRule",
alert_rule_template_name="f71aba3d-28fb-450b-b192-4e76a83015c8",
enabled=True,
kind="Fusion",
resource_group_name="myRg",
rule_id="myFirstFusionRule",
workspace_name="myWorkspace")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const fusionAlertRule = new azure_native.securityinsights.FusionAlertRule("fusionAlertRule", {
alertRuleTemplateName: "f71aba3d-28fb-450b-b192-4e76a83015c8",
enabled: true,
kind: "Fusion",
resourceGroupName: "myRg",
ruleId: "myFirstFusionRule",
workspaceName: "myWorkspace",
});
resources:
fusionAlertRule:
type: azure-native:securityinsights:FusionAlertRule
properties:
alertRuleTemplateName: f71aba3d-28fb-450b-b192-4e76a83015c8
enabled: true
kind: Fusion
resourceGroupName: myRg
ruleId: myFirstFusionRule
workspaceName: myWorkspace
Creates or updates a MicrosoftSecurityIncidentCreation rule.
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var fusionAlertRule = new AzureNative.SecurityInsights.FusionAlertRule("fusionAlertRule", new()
{
ResourceGroupName = "myRg",
RuleId = "microsoftSecurityIncidentCreationRuleExample",
WorkspaceName = "myWorkspace",
});
});
package main
import (
securityinsights "github.com/pulumi/pulumi-azure-native-sdk/securityinsights"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := securityinsights.NewFusionAlertRule(ctx, "fusionAlertRule", &securityinsights.FusionAlertRuleArgs{
ResourceGroupName: pulumi.String("myRg"),
RuleId: pulumi.String("microsoftSecurityIncidentCreationRuleExample"),
WorkspaceName: pulumi.String("myWorkspace"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.FusionAlertRule;
import com.pulumi.azurenative.securityinsights.FusionAlertRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var fusionAlertRule = new FusionAlertRule("fusionAlertRule", FusionAlertRuleArgs.builder()
.resourceGroupName("myRg")
.ruleId("microsoftSecurityIncidentCreationRuleExample")
.workspaceName("myWorkspace")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
fusion_alert_rule = azure_native.securityinsights.FusionAlertRule("fusionAlertRule",
resource_group_name="myRg",
rule_id="microsoftSecurityIncidentCreationRuleExample",
workspace_name="myWorkspace")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const fusionAlertRule = new azure_native.securityinsights.FusionAlertRule("fusionAlertRule", {
resourceGroupName: "myRg",
ruleId: "microsoftSecurityIncidentCreationRuleExample",
workspaceName: "myWorkspace",
});
resources:
fusionAlertRule:
type: azure-native:securityinsights:FusionAlertRule
properties:
resourceGroupName: myRg
ruleId: microsoftSecurityIncidentCreationRuleExample
workspaceName: myWorkspace
Creates or updates a Scheduled alert rule.
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var fusionAlertRule = new AzureNative.SecurityInsights.FusionAlertRule("fusionAlertRule", new()
{
ResourceGroupName = "myRg",
RuleId = "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
WorkspaceName = "myWorkspace",
});
});
package main
import (
securityinsights "github.com/pulumi/pulumi-azure-native-sdk/securityinsights"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := securityinsights.NewFusionAlertRule(ctx, "fusionAlertRule", &securityinsights.FusionAlertRuleArgs{
ResourceGroupName: pulumi.String("myRg"),
RuleId: pulumi.String("73e01a99-5cd7-4139-a149-9f2736ff2ab5"),
WorkspaceName: pulumi.String("myWorkspace"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.FusionAlertRule;
import com.pulumi.azurenative.securityinsights.FusionAlertRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var fusionAlertRule = new FusionAlertRule("fusionAlertRule", FusionAlertRuleArgs.builder()
.resourceGroupName("myRg")
.ruleId("73e01a99-5cd7-4139-a149-9f2736ff2ab5")
.workspaceName("myWorkspace")
.build());
}
}
import pulumi
import pulumi_azure_native as azure_native
fusion_alert_rule = azure_native.securityinsights.FusionAlertRule("fusionAlertRule",
resource_group_name="myRg",
rule_id="73e01a99-5cd7-4139-a149-9f2736ff2ab5",
workspace_name="myWorkspace")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const fusionAlertRule = new azure_native.securityinsights.FusionAlertRule("fusionAlertRule", {
resourceGroupName: "myRg",
ruleId: "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
workspaceName: "myWorkspace",
});
resources:
fusionAlertRule:
type: azure-native:securityinsights:FusionAlertRule
properties:
resourceGroupName: myRg
ruleId: 73e01a99-5cd7-4139-a149-9f2736ff2ab5
workspaceName: myWorkspace
Create FusionAlertRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new FusionAlertRule(name: string, args: FusionAlertRuleArgs, opts?: CustomResourceOptions);
@overload
def FusionAlertRule(resource_name: str,
args: FusionAlertRuleArgs,
opts: Optional[ResourceOptions] = None)
@overload
def FusionAlertRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
alert_rule_template_name: Optional[str] = None,
enabled: Optional[bool] = None,
resource_group_name: Optional[str] = None,
workspace_name: Optional[str] = None,
rule_id: Optional[str] = None)
func NewFusionAlertRule(ctx *Context, name string, args FusionAlertRuleArgs, opts ...ResourceOption) (*FusionAlertRule, error)
public FusionAlertRule(string name, FusionAlertRuleArgs args, CustomResourceOptions? opts = null)
public FusionAlertRule(String name, FusionAlertRuleArgs args)
public FusionAlertRule(String name, FusionAlertRuleArgs args, CustomResourceOptions options)
type: azure-native:securityinsights:FusionAlertRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FusionAlertRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var fusionAlertRuleResource = new AzureNative.Securityinsights.FusionAlertRule("fusionAlertRuleResource", new()
{
AlertRuleTemplateName = "string",
Enabled = false,
Kind = "string",
ResourceGroupName = "string",
WorkspaceName = "string",
RuleId = "string",
});
example, err := securityinsights.NewFusionAlertRule(ctx, "fusionAlertRuleResource", &securityinsights.FusionAlertRuleArgs{
AlertRuleTemplateName: "string",
Enabled: false,
Kind: "string",
ResourceGroupName: "string",
WorkspaceName: "string",
RuleId: "string",
})
var fusionAlertRuleResource = new FusionAlertRule("fusionAlertRuleResource", FusionAlertRuleArgs.builder()
.alertRuleTemplateName("string")
.enabled(false)
.kind("string")
.resourceGroupName("string")
.workspaceName("string")
.ruleId("string")
.build());
fusion_alert_rule_resource = azure_native.securityinsights.FusionAlertRule("fusionAlertRuleResource",
alert_rule_template_name=string,
enabled=False,
kind=string,
resource_group_name=string,
workspace_name=string,
rule_id=string)
const fusionAlertRuleResource = new azure_native.securityinsights.FusionAlertRule("fusionAlertRuleResource", {
alertRuleTemplateName: "string",
enabled: false,
kind: "string",
resourceGroupName: "string",
workspaceName: "string",
ruleId: "string",
});
type: azure-native:securityinsights:FusionAlertRule
properties:
alertRuleTemplateName: string
enabled: false
kind: string
resourceGroupName: string
ruleId: string
workspaceName: string
FusionAlertRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The FusionAlertRule resource accepts the following input properties:
- Alert
Rule stringTemplate Name - The Name of the alert rule template used to create this rule.
- Enabled bool
- Determines whether this alert rule is enabled or disabled.
- Resource
Group stringName - The name of the resource group within the user's subscription. The name is case insensitive.
- Workspace
Name string - The name of the workspace.
- Rule
Id string - Alert rule ID
- Alert
Rule stringTemplate Name - The Name of the alert rule template used to create this rule.
- Enabled bool
- Determines whether this alert rule is enabled or disabled.
- Resource
Group stringName - The name of the resource group within the user's subscription. The name is case insensitive.
- Workspace
Name string - The name of the workspace.
- Rule
Id string - Alert rule ID
- alert
Rule StringTemplate Name - The Name of the alert rule template used to create this rule.
- enabled Boolean
- Determines whether this alert rule is enabled or disabled.
- resource
Group StringName - The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name String - The name of the workspace.
- rule
Id String - Alert rule ID
- alert
Rule stringTemplate Name - The Name of the alert rule template used to create this rule.
- enabled boolean
- Determines whether this alert rule is enabled or disabled.
- resource
Group stringName - The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name string - The name of the workspace.
- rule
Id string - Alert rule ID
- alert_
rule_ strtemplate_ name - The Name of the alert rule template used to create this rule.
- enabled bool
- Determines whether this alert rule is enabled or disabled.
- resource_
group_ strname - The name of the resource group within the user's subscription. The name is case insensitive.
- workspace_
name str - The name of the workspace.
- rule_
id str - Alert rule ID
- alert
Rule StringTemplate Name - The Name of the alert rule template used to create this rule.
- enabled Boolean
- Determines whether this alert rule is enabled or disabled.
- resource
Group StringName - The name of the resource group within the user's subscription. The name is case insensitive.
- workspace
Name String - The name of the workspace.
- rule
Id String - Alert rule ID
Outputs
All input properties are implicitly available as output properties. Additionally, the FusionAlertRule resource produces the following output properties:
- Description string
- The description of the alert rule.
- Display
Name string - The display name for alerts created by this alert rule.
- Id string
- The provider-assigned unique ID for this managed resource.
- Last
Modified stringUtc - The last time that this alert has been modified.
- Name string
- Azure resource name
- Severity string
- The severity for alerts created by this alert rule.
- Tactics List<string>
- The tactics of the alert rule
- Type string
- Azure resource type
- Etag string
- Etag of the azure resource
- Description string
- The description of the alert rule.
- Display
Name string - The display name for alerts created by this alert rule.
- Id string
- The provider-assigned unique ID for this managed resource.
- Last
Modified stringUtc - The last time that this alert has been modified.
- Name string
- Azure resource name
- Severity string
- The severity for alerts created by this alert rule.
- Tactics []string
- The tactics of the alert rule
- Type string
- Azure resource type
- Etag string
- Etag of the azure resource
- description String
- The description of the alert rule.
- display
Name String - The display name for alerts created by this alert rule.
- id String
- The provider-assigned unique ID for this managed resource.
- last
Modified StringUtc - The last time that this alert has been modified.
- name String
- Azure resource name
- severity String
- The severity for alerts created by this alert rule.
- tactics List<String>
- The tactics of the alert rule
- type String
- Azure resource type
- etag String
- Etag of the azure resource
- description string
- The description of the alert rule.
- display
Name string - The display name for alerts created by this alert rule.
- id string
- The provider-assigned unique ID for this managed resource.
- last
Modified stringUtc - The last time that this alert has been modified.
- name string
- Azure resource name
- severity string
- The severity for alerts created by this alert rule.
- tactics string[]
- The tactics of the alert rule
- type string
- Azure resource type
- etag string
- Etag of the azure resource
- description str
- The description of the alert rule.
- display_
name str - The display name for alerts created by this alert rule.
- id str
- The provider-assigned unique ID for this managed resource.
- last_
modified_ strutc - The last time that this alert has been modified.
- name str
- Azure resource name
- severity str
- The severity for alerts created by this alert rule.
- tactics Sequence[str]
- The tactics of the alert rule
- type str
- Azure resource type
- etag str
- Etag of the azure resource
- description String
- The description of the alert rule.
- display
Name String - The display name for alerts created by this alert rule.
- id String
- The provider-assigned unique ID for this managed resource.
- last
Modified StringUtc - The last time that this alert has been modified.
- name String
- Azure resource name
- severity String
- The severity for alerts created by this alert rule.
- tactics List<String>
- The tactics of the alert rule
- type String
- Azure resource type
- etag String
- Etag of the azure resource
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:securityinsights:FusionAlertRule 73e01a99-5cd7-4139-a149-9f2736ff2ab5 /subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/73e01a99-5cd7-4139-a149-9f2736ff2ab5
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- azure-native-v1 pulumi/pulumi-azure-native
- License
- Apache-2.0