Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. securityinsights
  5. getMicrosoftSecurityIncidentCreationAlertRule
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.securityinsights.getMicrosoftSecurityIncidentCreationAlertRule

Explore with Pulumi AI

This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-azure-native

Gets the alert rule.

Uses Azure REST API version 2024-09-01.

Using getMicrosoftSecurityIncidentCreationAlertRule

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getMicrosoftSecurityIncidentCreationAlertRule(args: GetMicrosoftSecurityIncidentCreationAlertRuleArgs, opts?: InvokeOptions): Promise<GetMicrosoftSecurityIncidentCreationAlertRuleResult>
function getMicrosoftSecurityIncidentCreationAlertRuleOutput(args: GetMicrosoftSecurityIncidentCreationAlertRuleOutputArgs, opts?: InvokeOptions): Output<GetMicrosoftSecurityIncidentCreationAlertRuleResult>
Copy
def get_microsoft_security_incident_creation_alert_rule(resource_group_name: Optional[str] = None,
                                                        rule_id: Optional[str] = None,
                                                        workspace_name: Optional[str] = None,
                                                        opts: Optional[InvokeOptions] = None) -> GetMicrosoftSecurityIncidentCreationAlertRuleResult
def get_microsoft_security_incident_creation_alert_rule_output(resource_group_name: Optional[pulumi.Input[str]] = None,
                                                        rule_id: Optional[pulumi.Input[str]] = None,
                                                        workspace_name: Optional[pulumi.Input[str]] = None,
                                                        opts: Optional[InvokeOptions] = None) -> Output[GetMicrosoftSecurityIncidentCreationAlertRuleResult]
Copy
func LookupMicrosoftSecurityIncidentCreationAlertRule(ctx *Context, args *LookupMicrosoftSecurityIncidentCreationAlertRuleArgs, opts ...InvokeOption) (*LookupMicrosoftSecurityIncidentCreationAlertRuleResult, error)
func LookupMicrosoftSecurityIncidentCreationAlertRuleOutput(ctx *Context, args *LookupMicrosoftSecurityIncidentCreationAlertRuleOutputArgs, opts ...InvokeOption) LookupMicrosoftSecurityIncidentCreationAlertRuleResultOutput
Copy

> Note: This function is named LookupMicrosoftSecurityIncidentCreationAlertRule in the Go SDK.

public static class GetMicrosoftSecurityIncidentCreationAlertRule 
{
    public static Task<GetMicrosoftSecurityIncidentCreationAlertRuleResult> InvokeAsync(GetMicrosoftSecurityIncidentCreationAlertRuleArgs args, InvokeOptions? opts = null)
    public static Output<GetMicrosoftSecurityIncidentCreationAlertRuleResult> Invoke(GetMicrosoftSecurityIncidentCreationAlertRuleInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetMicrosoftSecurityIncidentCreationAlertRuleResult> getMicrosoftSecurityIncidentCreationAlertRule(GetMicrosoftSecurityIncidentCreationAlertRuleArgs args, InvokeOptions options)
public static Output<GetMicrosoftSecurityIncidentCreationAlertRuleResult> getMicrosoftSecurityIncidentCreationAlertRule(GetMicrosoftSecurityIncidentCreationAlertRuleArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: azure-native:securityinsights:getMicrosoftSecurityIncidentCreationAlertRule
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
RuleId
This property is required.
Changes to this property will trigger replacement.
string
Alert rule ID
WorkspaceName
This property is required.
Changes to this property will trigger replacement.
string
The name of the workspace.
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
RuleId
This property is required.
Changes to this property will trigger replacement.
string
Alert rule ID
WorkspaceName
This property is required.
Changes to this property will trigger replacement.
string
The name of the workspace.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group. The name is case insensitive.
ruleId
This property is required.
Changes to this property will trigger replacement.
String
Alert rule ID
workspaceName
This property is required.
Changes to this property will trigger replacement.
String
The name of the workspace.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
ruleId
This property is required.
Changes to this property will trigger replacement.
string
Alert rule ID
workspaceName
This property is required.
Changes to this property will trigger replacement.
string
The name of the workspace.
resource_group_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the resource group. The name is case insensitive.
rule_id
This property is required.
Changes to this property will trigger replacement.
str
Alert rule ID
workspace_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the workspace.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group. The name is case insensitive.
ruleId
This property is required.
Changes to this property will trigger replacement.
String
Alert rule ID
workspaceName
This property is required.
Changes to this property will trigger replacement.
String
The name of the workspace.

getMicrosoftSecurityIncidentCreationAlertRule Result

The following output properties are available:

AzureApiVersion string
The Azure API version of the resource.
DisplayName string
The display name for alerts created by this alert rule.
Enabled bool
Determines whether this alert rule is enabled or disabled.
Id string
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
LastModifiedUtc string
The last time that this alert has been modified.
Name string
The name of the resource
ProductFilter string
The alerts' productName on which the cases will be generated
SystemData Pulumi.AzureNative.SecurityInsights.Outputs.SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
AlertRuleTemplateName string
The Name of the alert rule template used to create this rule.
Description string
The description of the alert rule.
DisplayNamesExcludeFilter List<string>
the alerts' displayNames on which the cases will not be generated
DisplayNamesFilter List<string>
the alerts' displayNames on which the cases will be generated
Etag string
Etag of the azure resource
SeveritiesFilter List<string>
the alerts' severities on which the cases will be generated
AzureApiVersion string
The Azure API version of the resource.
DisplayName string
The display name for alerts created by this alert rule.
Enabled bool
Determines whether this alert rule is enabled or disabled.
Id string
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
LastModifiedUtc string
The last time that this alert has been modified.
Name string
The name of the resource
ProductFilter string
The alerts' productName on which the cases will be generated
SystemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
AlertRuleTemplateName string
The Name of the alert rule template used to create this rule.
Description string
The description of the alert rule.
DisplayNamesExcludeFilter []string
the alerts' displayNames on which the cases will not be generated
DisplayNamesFilter []string
the alerts' displayNames on which the cases will be generated
Etag string
Etag of the azure resource
SeveritiesFilter []string
the alerts' severities on which the cases will be generated
azureApiVersion String
The Azure API version of the resource.
displayName String
The display name for alerts created by this alert rule.
enabled Boolean
Determines whether this alert rule is enabled or disabled.
id String
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
lastModifiedUtc String
The last time that this alert has been modified.
name String
The name of the resource
productFilter String
The alerts' productName on which the cases will be generated
systemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
alertRuleTemplateName String
The Name of the alert rule template used to create this rule.
description String
The description of the alert rule.
displayNamesExcludeFilter List<String>
the alerts' displayNames on which the cases will not be generated
displayNamesFilter List<String>
the alerts' displayNames on which the cases will be generated
etag String
Etag of the azure resource
severitiesFilter List<String>
the alerts' severities on which the cases will be generated
azureApiVersion string
The Azure API version of the resource.
displayName string
The display name for alerts created by this alert rule.
enabled boolean
Determines whether this alert rule is enabled or disabled.
id string
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
lastModifiedUtc string
The last time that this alert has been modified.
name string
The name of the resource
productFilter string
The alerts' productName on which the cases will be generated
systemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
alertRuleTemplateName string
The Name of the alert rule template used to create this rule.
description string
The description of the alert rule.
displayNamesExcludeFilter string[]
the alerts' displayNames on which the cases will not be generated
displayNamesFilter string[]
the alerts' displayNames on which the cases will be generated
etag string
Etag of the azure resource
severitiesFilter string[]
the alerts' severities on which the cases will be generated
azure_api_version str
The Azure API version of the resource.
display_name str
The display name for alerts created by this alert rule.
enabled bool
Determines whether this alert rule is enabled or disabled.
id str
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
last_modified_utc str
The last time that this alert has been modified.
name str
The name of the resource
product_filter str
The alerts' productName on which the cases will be generated
system_data SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type str
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
alert_rule_template_name str
The Name of the alert rule template used to create this rule.
description str
The description of the alert rule.
display_names_exclude_filter Sequence[str]
the alerts' displayNames on which the cases will not be generated
display_names_filter Sequence[str]
the alerts' displayNames on which the cases will be generated
etag str
Etag of the azure resource
severities_filter Sequence[str]
the alerts' severities on which the cases will be generated
azureApiVersion String
The Azure API version of the resource.
displayName String
The display name for alerts created by this alert rule.
enabled Boolean
Determines whether this alert rule is enabled or disabled.
id String
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
lastModifiedUtc String
The last time that this alert has been modified.
name String
The name of the resource
productFilter String
The alerts' productName on which the cases will be generated
systemData Property Map
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
alertRuleTemplateName String
The Name of the alert rule template used to create this rule.
description String
The description of the alert rule.
displayNamesExcludeFilter List<String>
the alerts' displayNames on which the cases will not be generated
displayNamesFilter List<String>
the alerts' displayNames on which the cases will be generated
etag String
Etag of the azure resource
severitiesFilter List<String>
the alerts' severities on which the cases will be generated

Supporting Types

SystemDataResponse

CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.
createdAt string
The timestamp of resource creation (UTC).
createdBy string
The identity that created the resource.
createdByType string
The type of identity that created the resource.
lastModifiedAt string
The timestamp of resource last modification (UTC)
lastModifiedBy string
The identity that last modified the resource.
lastModifiedByType string
The type of identity that last modified the resource.
created_at str
The timestamp of resource creation (UTC).
created_by str
The identity that created the resource.
created_by_type str
The type of identity that created the resource.
last_modified_at str
The timestamp of resource last modification (UTC)
last_modified_by str
The identity that last modified the resource.
last_modified_by_type str
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.

Package Details

Repository
Azure Native pulumi/pulumi-azure-native
License
Apache-2.0
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-azure-native