Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5vcGVyYXRpb25hbGluc2lnaHRzL3dvcmtzcGFjZXMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5zZWN1cml0eWluc2lnaHRzL2VudGl0aWVzL3t9L2dldGluc2lnaHRz/2022-06-01-preview.xml (126 lines of code) (raw):

<?xml version='1.0' encoding='utf-8'?> <CodeGen plane="mgmt-plane"> <resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/entities/{}/getinsights" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvZW50aXRpZXMve2VudGl0eUlkfS9nZXRJbnNpZ2h0cw==/V/MjAyMi0wNi0wMS1wcmV2aWV3"/> <commandGroup name="sentinel entity"> <command name="get-insight" version="2022-06-01-preview"> <resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/entities/{}/getinsights" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvZW50aXRpZXMve2VudGl0eUlkfS9nZXRJbnNpZ2h0cw==/V/MjAyMi0wNi0wMS1wcmV2aWV3"/> <argGroup name=""> <arg type="string" var="$Path.entityId" options="entity-id" required="True"> <help short="entity ID"/> </arg> <arg type="ResourceGroupName" var="$Path.resourceGroupName" options="resource-group g" required="True"/> <arg type="SubscriptionId" var="$Path.subscriptionId" options="subscription" required="True"/> <arg type="string" var="$Path.workspaceName" options="workspace-name w" required="True" stage="Experimental"> <help short="The name of the workspace."/> <format maxLength="90" minLength="1"/> </arg> </argGroup> <argGroup name="Parameters"> <arg type="boolean" var="$parameters.addDefaultExtendedTimeRange" options="add-default-extended-time-range" group="Parameters"> <help short="Indicates if query time range should be extended with default time range of the query. Default value is false"/> </arg> <arg type="dateTime" var="$parameters.endTime" options="end-time" required="True" group="Parameters"> <help short="The end timeline date, so the results returned are before this date."/> </arg> <arg type="array<uuid>" var="$parameters.insightQueryIds" options="insight-query-ids" group="Parameters"> <help short="List of Insights Query Id. If empty, default value is all insights of this entity"/> <item type="uuid"/> </arg> <arg type="dateTime" var="$parameters.startTime" options="start-time" required="True" group="Parameters"> <help short="The start timeline date, so the results returned are after this date."/> </arg> </argGroup> <operation operationId="Entities_GetInsights"> <http path="/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityId}/getInsights"> <request method="post"> <path> <param type="string" name="entityId" arg="$Path.entityId" required="True"/> <param type="string" name="resourceGroupName" arg="$Path.resourceGroupName" required="True"> <format maxLength="90" minLength="1"/> </param> <param type="string" name="subscriptionId" arg="$Path.subscriptionId" required="True"> <format minLength="1"/> </param> <param type="string" name="workspaceName" arg="$Path.workspaceName" required="True"> <format maxLength="90" minLength="1"/> </param> </path> <query> <const readOnly="True" const="True" type="string" name="api-version" required="True"> <default value="&quot;2022-06-01-preview&quot;"/> <format minLength="1"/> </const> </query> <body> <json> <schema type="object" name="parameters" required="True" clientFlatten="True"> <prop type="boolean" name="addDefaultExtendedTimeRange" arg="$parameters.addDefaultExtendedTimeRange"/> <prop type="dateTime" name="endTime" arg="$parameters.endTime" required="True"/> <prop type="array<uuid>" name="insightQueryIds" arg="$parameters.insightQueryIds"> <item type="uuid"/> </prop> <prop type="dateTime" name="startTime" arg="$parameters.startTime" required="True"/> </schema> </json> </body> </request> <response statusCode="200"> <body> <json var="$Instance"> <schema type="object"> <prop type="object" name="metaData"> <prop type="array<object>" name="errors"> <item type="object"> <prop type="string" name="errorMessage" required="True"/> <prop type="string" name="kind" required="True"> <enum> <item value="&quot;Insight&quot;"/> </enum> </prop> <prop type="string" name="queryId"/> </item> </prop> <prop type="integer32" name="totalCount" required="True"/> </prop> <prop type="array<object>" name="value"> <item type="object"> <prop type="array<@InsightsTableResult_read>" name="chartQueryResults"> <item type="@InsightsTableResult_read"/> </prop> <prop type="string" name="queryId"/> <prop type="object" name="queryTimeInterval"> <prop type="dateTime" name="endTime"/> <prop type="dateTime" name="startTime"/> </prop> <prop type="object" name="tableQueryResults" cls="InsightsTableResult_read"> <prop type="array<object>" name="columns"> <item type="object"> <prop type="string" name="name"/> <prop type="string" name="type"/> </item> </prop> <prop type="array<array<string>>" name="rows"> <item type="array<string>"> <item type="string"/> </item> </prop> </prop> </item> </prop> </schema> </json> </body> </response> <response isError="True"> <body> <json> <schema type="@ODataV4Format"/> </json> </body> </response> </http> </operation> <output type="object" ref="$Instance" clientFlatten="True"/> </command> </commandGroup> </CodeGen>