Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5vcGVyYXRpb25hbGluc2lnaHRzL3dvcmtzcGFjZXMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5zZWN1cml0eWluc2lnaHRzL2VudGl0aWVzL3t9L2dldGluc2lnaHRz/2022-06-01-preview.xml (126 lines of code) (raw):
<?xml version='1.0' encoding='utf-8'?>
<CodeGen plane="mgmt-plane">
<resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/entities/{}/getinsights" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvZW50aXRpZXMve2VudGl0eUlkfS9nZXRJbnNpZ2h0cw==/V/MjAyMi0wNi0wMS1wcmV2aWV3"/>
<commandGroup name="sentinel entity">
<command name="get-insight" version="2022-06-01-preview">
<resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/entities/{}/getinsights" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvZW50aXRpZXMve2VudGl0eUlkfS9nZXRJbnNpZ2h0cw==/V/MjAyMi0wNi0wMS1wcmV2aWV3"/>
<argGroup name="">
<arg type="string" var="$Path.entityId" options="entity-id" required="True">
<help short="entity ID"/>
</arg>
<arg type="ResourceGroupName" var="$Path.resourceGroupName" options="resource-group g" required="True"/>
<arg type="SubscriptionId" var="$Path.subscriptionId" options="subscription" required="True"/>
<arg type="string" var="$Path.workspaceName" options="workspace-name w" required="True" stage="Experimental">
<help short="The name of the workspace."/>
<format maxLength="90" minLength="1"/>
</arg>
</argGroup>
<argGroup name="Parameters">
<arg type="boolean" var="$parameters.addDefaultExtendedTimeRange" options="add-default-extended-time-range" group="Parameters">
<help short="Indicates if query time range should be extended with default time range of the query. Default value is false"/>
</arg>
<arg type="dateTime" var="$parameters.endTime" options="end-time" required="True" group="Parameters">
<help short="The end timeline date, so the results returned are before this date."/>
</arg>
<arg type="array<uuid>" var="$parameters.insightQueryIds" options="insight-query-ids" group="Parameters">
<help short="List of Insights Query Id. If empty, default value is all insights of this entity"/>
<item type="uuid"/>
</arg>
<arg type="dateTime" var="$parameters.startTime" options="start-time" required="True" group="Parameters">
<help short="The start timeline date, so the results returned are after this date."/>
</arg>
</argGroup>
<operation operationId="Entities_GetInsights">
<http path="/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityId}/getInsights">
<request method="post">
<path>
<param type="string" name="entityId" arg="$Path.entityId" required="True"/>
<param type="string" name="resourceGroupName" arg="$Path.resourceGroupName" required="True">
<format maxLength="90" minLength="1"/>
</param>
<param type="string" name="subscriptionId" arg="$Path.subscriptionId" required="True">
<format minLength="1"/>
</param>
<param type="string" name="workspaceName" arg="$Path.workspaceName" required="True">
<format maxLength="90" minLength="1"/>
</param>
</path>
<query>
<const readOnly="True" const="True" type="string" name="api-version" required="True">
<default value=""2022-06-01-preview""/>
<format minLength="1"/>
</const>
</query>
<body>
<json>
<schema type="object" name="parameters" required="True" clientFlatten="True">
<prop type="boolean" name="addDefaultExtendedTimeRange" arg="$parameters.addDefaultExtendedTimeRange"/>
<prop type="dateTime" name="endTime" arg="$parameters.endTime" required="True"/>
<prop type="array<uuid>" name="insightQueryIds" arg="$parameters.insightQueryIds">
<item type="uuid"/>
</prop>
<prop type="dateTime" name="startTime" arg="$parameters.startTime" required="True"/>
</schema>
</json>
</body>
</request>
<response statusCode="200">
<body>
<json var="$Instance">
<schema type="object">
<prop type="object" name="metaData">
<prop type="array<object>" name="errors">
<item type="object">
<prop type="string" name="errorMessage" required="True"/>
<prop type="string" name="kind" required="True">
<enum>
<item value=""Insight""/>
</enum>
</prop>
<prop type="string" name="queryId"/>
</item>
</prop>
<prop type="integer32" name="totalCount" required="True"/>
</prop>
<prop type="array<object>" name="value">
<item type="object">
<prop type="array<@InsightsTableResult_read>" name="chartQueryResults">
<item type="@InsightsTableResult_read"/>
</prop>
<prop type="string" name="queryId"/>
<prop type="object" name="queryTimeInterval">
<prop type="dateTime" name="endTime"/>
<prop type="dateTime" name="startTime"/>
</prop>
<prop type="object" name="tableQueryResults" cls="InsightsTableResult_read">
<prop type="array<object>" name="columns">
<item type="object">
<prop type="string" name="name"/>
<prop type="string" name="type"/>
</item>
</prop>
<prop type="array<array<string>>" name="rows">
<item type="array<string>">
<item type="string"/>
</item>
</prop>
</prop>
</item>
</prop>
</schema>
</json>
</body>
</response>
<response isError="True">
<body>
<json>
<schema type="@ODataV4Format"/>
</json>
</body>
</response>
</http>
</operation>
<output type="object" ref="$Instance" clientFlatten="True"/>
</command>
</commandGroup>
</CodeGen>