Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5vcGVyYXRpb25hbGluc2lnaHRzL3dvcmtzcGFjZXMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5zZWN1cml0eWluc2lnaHRzL2VudGl0aWVzL3t9L3F1ZXJpZXM=/2022-06-01-preview.xml (167 lines of code) (raw):
<?xml version='1.0' encoding='utf-8'?>
<CodeGen plane="mgmt-plane">
<resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/entities/{}/queries" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvZW50aXRpZXMve2VudGl0eUlkfS9xdWVyaWVz/V/MjAyMi0wNi0wMS1wcmV2aWV3"/>
<commandGroup name="sentinel entity">
<command name="get-query" version="2022-06-01-preview">
<resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/entities/{}/queries" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvZW50aXRpZXMve2VudGl0eUlkfS9xdWVyaWVz/V/MjAyMi0wNi0wMS1wcmV2aWV3"/>
<argGroup name="">
<arg type="string" var="$Path.entityId" options="entity-id" required="True">
<help short="entity ID"/>
</arg>
<arg type="ResourceGroupName" var="$Path.resourceGroupName" options="resource-group g" required="True"/>
<arg type="SubscriptionId" var="$Path.subscriptionId" options="subscription" required="True"/>
<arg type="string" var="$Path.workspaceName" options="workspace-name w" required="True" stage="Experimental">
<help short="The name of the workspace."/>
<format maxLength="90" minLength="1"/>
</arg>
<arg type="string" var="$Query.kind" options="kind" required="True">
<help short="The Kind parameter for queries"/>
<enum>
<item name="Insight" value=""Insight""/>
</enum>
</arg>
</argGroup>
<operation operationId="Entities_Queries">
<http path="/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityId}/queries">
<request method="get">
<path>
<param type="string" name="entityId" arg="$Path.entityId" required="True"/>
<param type="string" name="resourceGroupName" arg="$Path.resourceGroupName" required="True">
<format maxLength="90" minLength="1"/>
</param>
<param type="string" name="subscriptionId" arg="$Path.subscriptionId" required="True">
<format minLength="1"/>
</param>
<param type="string" name="workspaceName" arg="$Path.workspaceName" required="True">
<format maxLength="90" minLength="1"/>
</param>
</path>
<query>
<param type="string" name="kind" arg="$Query.kind" required="True">
<enum>
<item value=""Insight""/>
</enum>
</param>
<const readOnly="True" const="True" type="string" name="api-version" required="True">
<default value=""2022-06-01-preview""/>
<format minLength="1"/>
</const>
</query>
</request>
<response statusCode="200">
<body>
<json var="$Instance">
<schema type="object">
<prop type="array<object>" name="value">
<item type="object">
<prop readOnly="True" type="string" name="id"/>
<prop type="string" name="kind" required="True">
<enum>
<item value=""Activity""/>
<item value=""Expansion""/>
<item value=""Insight""/>
</enum>
</prop>
<prop type="string" name="name"/>
<prop type="string" name="type"/>
<discriminator property="kind" value="Insight">
<prop type="object" name="properties">
<prop type="object" name="additionalQuery">
<prop type="string" name="query"/>
<prop type="string" name="text"/>
</prop>
<prop type="string" name="baseQuery"/>
<prop type="array<object>" name="dataTypes">
<item type="object">
<prop type="string" name="dataType"/>
</item>
</prop>
<prop type="object" name="defaultTimeRange">
<prop type="string" name="afterRange"/>
<prop type="string" name="beforeRange"/>
</prop>
<prop type="string" name="description"/>
<prop type="string" name="displayName"/>
<prop type="string" name="inputEntityType">
<enum>
<item value=""Account""/>
<item value=""AzureResource""/>
<item value=""CloudApplication""/>
<item value=""DNS""/>
<item value=""File""/>
<item value=""FileHash""/>
<item value=""Host""/>
<item value=""HuntingBookmark""/>
<item value=""IP""/>
<item value=""IoTDevice""/>
<item value=""MailCluster""/>
<item value=""MailMessage""/>
<item value=""Mailbox""/>
<item value=""Malware""/>
<item value=""Process""/>
<item value=""RegistryKey""/>
<item value=""RegistryValue""/>
<item value=""SecurityAlert""/>
<item value=""SecurityGroup""/>
<item value=""SubmissionMail""/>
<item value=""URL""/>
</enum>
</prop>
<prop type="object" name="referenceTimeRange">
<prop type="string" name="beforeRange"/>
</prop>
<prop type="array<array<string>>" name="requiredInputFieldsSets">
<item type="array<string>">
<item type="string"/>
</item>
</prop>
<prop type="object" name="tableQuery">
<prop type="array<object>" name="columnsDefinitions">
<item type="object">
<prop type="string" name="header"/>
<prop type="string" name="outputType">
<enum>
<item value=""Date""/>
<item value=""Entity""/>
<item value=""Number""/>
<item value=""String""/>
</enum>
</prop>
<prop type="boolean" name="supportDeepLink"/>
</item>
</prop>
<prop type="array<object>" name="queriesDefinitions">
<item type="object">
<prop type="string" name="filter"/>
<prop type="array<object>" name="linkColumnsDefinitions">
<item type="object">
<prop type="string" name="Query"/>
<prop type="string" name="projectedName"/>
</item>
</prop>
<prop type="string" name="project"/>
<prop type="string" name="summarize"/>
</item>
</prop>
</prop>
</prop>
</discriminator>
</item>
</prop>
</schema>
</json>
</body>
</response>
<response isError="True">
<body>
<json>
<schema type="@ODataV4Format"/>
</json>
</body>
</response>
</http>
</operation>
<output type="object" ref="$Instance" clientFlatten="True"/>
</command>
</commandGroup>
</CodeGen>