{"openapi":"3.1.0","info":{"title":"Apizie","version":"2.0.0","description":"One API key, one envelope, many public data sources."},"servers":[{"url":"https://apizie.tech"}],"security":[{"ApiKeyAuth":[]}],"paths":{"/v1/cloud:azure-arm-securityinsights/operations-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_operations_list","summary":"Lists all operations available Azure Security Insights Resource Provider.","description":"GET /providers/Microsoft.SecurityInsights/operations","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/alert-rule-templates-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_alert_rule_templates_list","summary":"Gets all alert rule templates.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRuleTemplates","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/alert-rule-templates-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_alert_rule_templates_get","summary":"Gets the alert rule template.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRuleTemplates/{alertRuleTemplateId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"alertRuleTemplateId","in":"query","required":true,"description":"Alert rule template ID","schema":{"type":"string","description":"Alert rule template ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/alert-rules-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_alert_rules_list","summary":"Gets all alert rules.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/alert-rules-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_alert_rules_get","summary":"Gets the alert rule.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"ruleId","in":"query","required":true,"description":"Alert rule ID","schema":{"type":"string","description":"Alert rule ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/alert-rules-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_alert_rules_create_or_update","summary":"Creates or updates the alert rule.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","ruleId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"ruleId":{"type":"string","description":"Alert rule ID"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/alert-rules-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_alert_rules_delete","summary":"Delete the alert rule.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","ruleId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"ruleId":{"type":"string","description":"Alert rule ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/actions-list-by-alert-rule":{"get":{"operationId":"cloud_azure_arm_securityinsights_actions_list_by_alert_rule","summary":"Gets all actions of alert rule.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/actions","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"ruleId","in":"query","required":true,"description":"Alert rule ID","schema":{"type":"string","description":"Alert rule ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/actions-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_actions_get","summary":"Gets the action of alert rule.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/actions/{actionId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"ruleId","in":"query","required":true,"description":"Alert rule ID","schema":{"type":"string","description":"Alert rule ID"}},{"name":"actionId","in":"query","required":true,"description":"Action ID","schema":{"type":"string","description":"Action ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/actions-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_actions_create_or_update","summary":"Creates or updates the action of alert rule.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/actions/{actionId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","ruleId","actionId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"ruleId":{"type":"string","description":"Alert rule ID"},"actionId":{"type":"string","description":"Action ID"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/actions-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_actions_delete","summary":"Delete the action of alert rule.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}/actions/{actionId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","ruleId","actionId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"ruleId":{"type":"string","description":"Alert rule ID"},"actionId":{"type":"string","description":"Action ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/automation-rules-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_automation_rules_list","summary":"Gets all automation rules.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/automationRules","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/automation-rules-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_automation_rules_get","summary":"Gets the automation rule.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/automationRules/{automationRuleId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"automationRuleId","in":"query","required":true,"description":"Automation rule ID","schema":{"type":"string","description":"Automation rule ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/automation-rules-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_automation_rules_create_or_update","summary":"Creates or updates the automation rule.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/automationRules/{automationRuleId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","automationRuleId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the workspace."},"automationRuleId":{"type":"string","description":"The automation rule ID."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/automation-rules-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_automation_rules_delete","summary":"Delete the automation rule.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/automationRules/{automationRuleId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","automationRuleId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"automationRuleId":{"type":"string","description":"Automation rule ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/bookmarks-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_bookmarks_list","summary":"Gets all bookmarks.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/bookmarks","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/bookmarks-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_bookmarks_get","summary":"Gets a bookmark.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/bookmarks/{bookmarkId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"bookmarkId","in":"query","required":true,"description":"Bookmark ID","schema":{"type":"string","description":"Bookmark ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/bookmarks-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_bookmarks_create_or_update","summary":"Creates or updates the bookmark.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/bookmarks/{bookmarkId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","bookmarkId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"bookmarkId":{"type":"string","description":"Bookmark ID"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/bookmarks-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_bookmarks_delete","summary":"Delete the bookmark.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/bookmarks/{bookmarkId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","bookmarkId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"bookmarkId":{"type":"string","description":"Bookmark ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/content-packages-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_content_packages_list","summary":"Gets all installed packages.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentPackages","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}},{"name":"$search","in":"query","required":false,"description":"Searches for a substring in the response. Optional.","schema":{"type":"string","description":"Searches for a substring in the response. Optional."}},{"name":"$count","in":"query","required":false,"description":"Instructs the server to return only object count without actual body. Optional.","schema":{"type":"boolean","description":"Instructs the server to return only object count without actual body. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skip","in":"query","required":false,"description":"Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left.","schema":{"type":"integer","description":"Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/content-packages-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_content_packages_get","summary":"Gets an installed packages by its id.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentPackages/{packageId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"packageId","in":"query","required":true,"description":"package Id","schema":{"type":"string","description":"package Id"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/content-package-install":{"post":{"operationId":"cloud_azure_arm_securityinsights_content_package_install","summary":"Install a package to the workspace.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentPackages/{packageId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","packageId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"packageId":{"type":"string","description":"package Id"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/content-package-uninstall":{"post":{"operationId":"cloud_azure_arm_securityinsights_content_package_uninstall","summary":"Uninstall a package from the workspace.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentPackages/{packageId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","packageId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"packageId":{"type":"string","description":"package Id"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/product-packages-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_product_packages_list","summary":"Gets all packages from the catalog. Expandable properties: - properties/installed - properties/packagedContent","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentProductPackages","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}},{"name":"$search","in":"query","required":false,"description":"Searches for a substring in the response. Optional.","schema":{"type":"string","description":"Searches for a substring in the response. Optional."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/product-package-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_product_package_get","summary":"Gets a package by its identifier from the catalog.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentProductPackages/{packageId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"packageId","in":"query","required":true,"description":"package Id","schema":{"type":"string","description":"package Id"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/product-templates-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_product_templates_list","summary":"Gets all templates in the catalog.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentProductTemplates","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}},{"name":"$search","in":"query","required":false,"description":"Searches for a substring in the response. Optional.","schema":{"type":"string","description":"Searches for a substring in the response. Optional."}},{"name":"$count","in":"query","required":false,"description":"Instructs the server to return only object count without actual body. Optional.","schema":{"type":"boolean","description":"Instructs the server to return only object count without actual body. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skip","in":"query","required":false,"description":"Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left.","schema":{"type":"integer","description":"Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/content-templates-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_content_templates_list","summary":"Gets all installed templates. Expandable properties: - properties/mainTemplate - properties/dependantTemplates","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentTemplates","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}},{"name":"$expand","in":"query","required":false,"description":"Expands the object with optional fiends that are not included by default. Optional.","schema":{"type":"string","description":"Expands the object with optional fiends that are not included by default. Optional."}},{"name":"$search","in":"query","required":false,"description":"Searches for a substring in the response. Optional.","schema":{"type":"string","description":"Searches for a substring in the response. Optional."}},{"name":"$count","in":"query","required":false,"description":"Instructs the server to return only object count without actual body. Optional.","schema":{"type":"boolean","description":"Instructs the server to return only object count without actual body. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skip","in":"query","required":false,"description":"Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left.","schema":{"type":"integer","description":"Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/content-template-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_content_template_get","summary":"Gets a template byt its identifier. Expandable properties: - properties/mainTemplate -…","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentTemplates/{templateId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"templateId","in":"query","required":true,"description":"template Id","schema":{"type":"string","description":"template Id"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/content-template-install":{"post":{"operationId":"cloud_azure_arm_securityinsights_content_template_install","summary":"Install a template.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentTemplates/{templateId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","templateId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"templateId":{"type":"string","description":"template Id"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/content-template-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_content_template_delete","summary":"Delete an installed template.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentTemplates/{templateId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","templateId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"templateId":{"type":"string","description":"template Id"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/product-template-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_product_template_get","summary":"Gets a template by its identifier.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/contentproducttemplates/{templateId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the workspace.","schema":{"type":"string","description":"The name of the workspace."}},{"name":"templateId","in":"query","required":true,"description":"template Id","schema":{"type":"string","description":"template Id"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/data-connector-definitions-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_data_connector_definitions_list","summary":"Gets all data connector definitions.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectorDefinitions","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/data-connector-definitions-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_data_connector_definitions_get","summary":"Gets a data connector definition.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectorDefinitions/{dataConnectorDefinitionName}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"dataConnectorDefinitionName","in":"query","required":true,"description":"The data connector definition name.","schema":{"type":"string","description":"The data connector definition name."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/data-connector-definitions-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_data_connector_definitions_create_or_update","summary":"Creates or updates the data connector definition.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectorDefinitions/{dataConnectorDefinitionName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","dataConnectorDefinitionName","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"dataConnectorDefinitionName":{"type":"string","description":"The data connector definition name."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/data-connector-definitions-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_data_connector_definitions_delete","summary":"Delete the data connector definition.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectorDefinitions/{dataConnectorDefinitionName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","dataConnectorDefinitionName"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"dataConnectorDefinitionName":{"type":"string","description":"The data connector definition name."}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/data-connectors-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_data_connectors_list","summary":"Gets all data connectors.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/data-connectors-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_data_connectors_get","summary":"Gets a data connector.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors/{dataConnectorId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"dataConnectorId","in":"query","required":true,"description":"Connector ID","schema":{"type":"string","description":"Connector ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/data-connectors-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_data_connectors_create_or_update","summary":"Creates or updates the data connector.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors/{dataConnectorId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","dataConnectorId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"dataConnectorId":{"type":"string","description":"Connector ID"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/data-connectors-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_data_connectors_delete","summary":"Delete the data connector.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors/{dataConnectorId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","dataConnectorId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"dataConnectorId":{"type":"string","description":"Connector ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/entities-run-playbook":{"post":{"operationId":"cloud_azure_arm_securityinsights_entities_run_playbook","summary":"Triggers playbook on a specific entity.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/entities/{entityIdentifier}/runPlaybook","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","entityIdentifier"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the workspace."},"entityIdentifier":{"type":"string","description":"entity ID"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incidents-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_incidents_list","summary":"Gets all incidents.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incidents-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_incidents_get","summary":"Gets a given incident.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"incidentId","in":"query","required":true,"description":"Incident ID","schema":{"type":"string","description":"Incident ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incidents-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_incidents_create_or_update","summary":"Creates or updates an incident.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incidents-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_incidents_delete","summary":"Deletes a given incident.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incidents-list-alerts":{"post":{"operationId":"cloud_azure_arm_securityinsights_incidents_list_alerts","summary":"Gets all alerts for an incident.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/alerts","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incidents-list-bookmarks":{"post":{"operationId":"cloud_azure_arm_securityinsights_incidents_list_bookmarks","summary":"Gets all bookmarks for an incident.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/bookmarks","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-comments-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_incident_comments_list","summary":"Gets all comments for a given incident.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"incidentId","in":"query","required":true,"description":"Incident ID","schema":{"type":"string","description":"Incident ID"}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-comments-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_incident_comments_get","summary":"Gets an incident comment.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments/{incidentCommentId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"incidentId","in":"query","required":true,"description":"Incident ID","schema":{"type":"string","description":"Incident ID"}},{"name":"incidentCommentId","in":"query","required":true,"description":"Incident comment ID","schema":{"type":"string","description":"Incident comment ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-comments-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_incident_comments_create_or_update","summary":"Creates or updates a comment for a given incident.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments/{incidentCommentId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId","incidentCommentId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"},"incidentCommentId":{"type":"string","description":"Incident comment ID"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-comments-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_incident_comments_delete","summary":"Deletes a comment for a given incident.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments/{incidentCommentId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId","incidentCommentId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"},"incidentCommentId":{"type":"string","description":"Incident comment ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incidents-list-entities":{"post":{"operationId":"cloud_azure_arm_securityinsights_incidents_list_entities","summary":"Gets all entities for an incident.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/entities","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-relations-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_incident_relations_list","summary":"Gets all relations for a given incident.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/relations","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"incidentId","in":"query","required":true,"description":"Incident ID","schema":{"type":"string","description":"Incident ID"}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-relations-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_incident_relations_get","summary":"Gets a relation for a given incident.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/relations/{relationName}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"incidentId","in":"query","required":true,"description":"Incident ID","schema":{"type":"string","description":"Incident ID"}},{"name":"relationName","in":"query","required":true,"description":"Relation Name","schema":{"type":"string","description":"Relation Name"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-relations-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_incident_relations_create_or_update","summary":"Creates or updates the incident relation.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/relations/{relationName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId","relationName","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"},"relationName":{"type":"string","description":"Relation Name"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-relations-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_incident_relations_delete","summary":"Deletes a relation for a given incident.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/relations/{relationName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId","relationName"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"},"relationName":{"type":"string","description":"Relation Name"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incidents-run-playbook":{"post":{"operationId":"cloud_azure_arm_securityinsights_incidents_run_playbook","summary":"Triggers playbook on a specific incident","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentIdentifier}/runPlaybook","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentIdentifier"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the workspace."},"incidentIdentifier":{"type":"string","description":"The incident identifier."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-tasks-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_incident_tasks_list","summary":"Gets all incident tasks.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/tasks","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"incidentId","in":"query","required":true,"description":"Incident ID","schema":{"type":"string","description":"Incident ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-tasks-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_incident_tasks_get","summary":"Gets an incident task.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/tasks/{incidentTaskId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"incidentId","in":"query","required":true,"description":"Incident ID","schema":{"type":"string","description":"Incident ID"}},{"name":"incidentTaskId","in":"query","required":true,"description":"Incident task ID","schema":{"type":"string","description":"Incident task ID"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-tasks-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_incident_tasks_create_or_update","summary":"Creates or updates the incident task.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/tasks/{incidentTaskId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId","incidentTaskId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"},"incidentTaskId":{"type":"string","description":"Incident task ID"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/incident-tasks-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_incident_tasks_delete","summary":"Delete the incident task.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/tasks/{incidentTaskId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","incidentId","incidentTaskId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"incidentId":{"type":"string","description":"Incident ID"},"incidentTaskId":{"type":"string","description":"Incident task ID"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/source-control-list-repositories":{"post":{"operationId":"cloud_azure_arm_securityinsights_source_control_list_repositories","summary":"Gets a list of repositories metadata.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/listRepositories","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the workspace."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/metadata-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_metadata_list","summary":"List of all metadata","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/metadata","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skip","in":"query","required":false,"description":"Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left.","schema":{"type":"integer","description":"Used to skip n elements in the OData query (offset). Returns a nextLink to the next page of results if there are any left."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/metadata-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_metadata_get","summary":"Get a Metadata.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/metadata/{metadataName}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"metadataName","in":"query","required":true,"description":"The Metadata name.","schema":{"type":"string","description":"The Metadata name."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/metadata-create":{"post":{"operationId":"cloud_azure_arm_securityinsights_metadata_create","summary":"Create a Metadata.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/metadata/{metadataName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","metadataName","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"metadataName":{"type":"string","description":"The Metadata name."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/metadata-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_metadata_update","summary":"Update an existing Metadata.","description":"PATCH /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/metadata/{metadataName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","metadataName","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"metadataName":{"type":"string","description":"The Metadata name."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/metadata-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_metadata_delete","summary":"Delete a Metadata.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/metadata/{metadataName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","metadataName"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"metadataName":{"type":"string","description":"The Metadata name."}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/sentinel-onboarding-states-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_sentinel_onboarding_states_list","summary":"Gets all Sentinel onboarding states","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/onboardingStates","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the workspace.","schema":{"type":"string","description":"The name of the workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/sentinel-onboarding-states-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_sentinel_onboarding_states_get","summary":"Get Sentinel onboarding state","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/onboardingStates/{sentinelOnboardingStateName}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"sentinelOnboardingStateName","in":"query","required":true,"description":"The Sentinel onboarding state name. Supports - default","schema":{"type":"string","description":"The Sentinel onboarding state name. Supports - default"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/sentinel-onboarding-states-create":{"post":{"operationId":"cloud_azure_arm_securityinsights_sentinel_onboarding_states_create","summary":"Create Sentinel onboarding state","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/onboardingStates/{sentinelOnboardingStateName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","sentinelOnboardingStateName"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the workspace."},"sentinelOnboardingStateName":{"type":"string","description":"The Sentinel onboarding state name. Supports - default"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/sentinel-onboarding-states-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_sentinel_onboarding_states_delete","summary":"Delete Sentinel onboarding state","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/onboardingStates/{sentinelOnboardingStateName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","sentinelOnboardingStateName"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"sentinelOnboardingStateName":{"type":"string","description":"The Sentinel onboarding state name. Supports - default"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/security-mlanalytics-settings-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_security_mlanalytics_settings_list","summary":"Gets all Security ML Analytics Settings.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/securityMLAnalyticsSettings","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/security-mlanalytics-settings-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_security_mlanalytics_settings_get","summary":"Gets the Security ML Analytics Settings.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/securityMLAnalyticsSettings/{settingsResourceName}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"settingsResourceName","in":"query","required":true,"description":"Security ML Analytics Settings resource name","schema":{"type":"string","description":"Security ML Analytics Settings resource name"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/security-mlanalytics-settings-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_security_mlanalytics_settings_create_or_update","summary":"Creates or updates the Security ML Analytics Settings.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/securityMLAnalyticsSettings/{settingsResourceName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","settingsResourceName","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"settingsResourceName":{"type":"string","description":"Security ML Analytics Settings resource name"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/security-mlanalytics-settings-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_security_mlanalytics_settings_delete","summary":"Delete the Security ML Analytics Settings.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/securityMLAnalyticsSettings/{settingsResourceName}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","settingsResourceName"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"settingsResourceName":{"type":"string","description":"Security ML Analytics Settings resource name"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/source-controls-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_source_controls_list","summary":"Gets all source controls, without source control items.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/sourcecontrols","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/source-controls-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_source_controls_get","summary":"Gets a source control byt its identifier.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/sourcecontrols/{sourceControlId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"sourceControlId","in":"query","required":true,"description":"Source control Id","schema":{"type":"string","description":"Source control Id"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/source-controls-create":{"post":{"operationId":"cloud_azure_arm_securityinsights_source_controls_create","summary":"Creates a source control.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/sourcecontrols/{sourceControlId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","sourceControlId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"sourceControlId":{"type":"string","description":"Source control Id"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/source-controls-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_source_controls_delete","summary":"Delete a source control.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/sourcecontrols/{sourceControlId}/delete","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","sourceControlId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"sourceControlId":{"type":"string","description":"Source control Id"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicator-create-indicator":{"post":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicator_create_indicator","summary":"Create a new threat intelligence indicator.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/createIndicator","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicators-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicators_list","summary":"Get all threat intelligence indicators.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"$filter","in":"query","required":false,"description":"Filters the results, based on a Boolean condition. Optional.","schema":{"type":"string","description":"Filters the results, based on a Boolean condition. Optional."}},{"name":"$top","in":"query","required":false,"description":"Returns only the first n results. Optional.","schema":{"type":"integer","description":"Returns only the first n results. Optional."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}},{"name":"$orderby","in":"query","required":false,"description":"Sorts the results. Optional.","schema":{"type":"string","description":"Sorts the results. Optional."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicator-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicator_get","summary":"View a threat intelligence indicator by name.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"name","in":"query","required":true,"description":"Threat intelligence indicator name field.","schema":{"type":"string","description":"Threat intelligence indicator name field."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicator-create":{"post":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicator_create","summary":"Update a threat Intelligence indicator.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","name","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"name":{"type":"string","description":"Threat intelligence indicator name field."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicator-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicator_delete","summary":"Delete a threat intelligence indicator.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","name"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"name":{"type":"string","description":"Threat intelligence indicator name field."}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicator-append-tags":{"post":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicator_append_tags","summary":"Append tags to a threat intelligence indicator.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}/appendTags","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","name","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"name":{"type":"string","description":"Threat intelligence indicator name field."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicator-replace-tags":{"post":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicator_replace_tags","summary":"Replace tags added to a threat intelligence indicator.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}/replaceTags","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","name","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"name":{"type":"string","description":"Threat intelligence indicator name field."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicator-metrics-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicator_metrics_list","summary":"Get threat intelligence indicators metrics (Indicators counts by Type, Threat Type, Source).","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/metrics","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/threat-intelligence-indicator-query-indicators":{"post":{"operationId":"cloud_azure_arm_securityinsights_threat_intelligence_indicator_query_indicators","summary":"Query threat intelligence indicators as per filtering criteria.","description":"POST /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/queryIndicators","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/watchlists-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_watchlists_list","summary":"Get all watchlists, without watchlist items.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/watchlists-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_watchlists_get","summary":"Get a watchlist, without its watchlist items.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"watchlistAlias","in":"query","required":true,"description":"The watchlist alias","schema":{"type":"string","description":"The watchlist alias"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/watchlists-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_watchlists_create_or_update","summary":"Create or update a Watchlist and its Watchlist Items (bulk creation, e.g. through text/csv content type). To…","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","watchlistAlias","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"watchlistAlias":{"type":"string","description":"The watchlist alias"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/watchlists-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_watchlists_delete","summary":"Delete a watchlist.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","watchlistAlias"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"watchlistAlias":{"type":"string","description":"The watchlist alias"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/watchlist-items-list":{"get":{"operationId":"cloud_azure_arm_securityinsights_watchlist_items_list","summary":"Get all watchlist Items.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}/watchlistItems","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"watchlistAlias","in":"query","required":true,"description":"The watchlist alias","schema":{"type":"string","description":"The watchlist alias"}},{"name":"$skipToken","in":"query","required":false,"description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…","schema":{"type":"string","description":"Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of…"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/watchlist-items-get":{"get":{"operationId":"cloud_azure_arm_securityinsights_watchlist_items_get","summary":"Get a watchlist item.","description":"GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}/watchlistItems/{watchlistItemId}","tags":["cloud"],"parameters":[{"name":"api-version","in":"query","required":false,"description":"The API version to use for this operation.","schema":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."}},{"name":"subscriptionId","in":"query","required":true,"description":"The ID of the target subscription. The value must be an UUID.","schema":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."}},{"name":"resourceGroupName","in":"query","required":true,"description":"The name of the resource group. The name is case insensitive.","schema":{"type":"string","description":"The name of the resource group. The name is case insensitive."}},{"name":"workspaceName","in":"query","required":true,"description":"The name of the monitor workspace.","schema":{"type":"string","description":"The name of the monitor workspace."}},{"name":"watchlistAlias","in":"query","required":true,"description":"The watchlist alias","schema":{"type":"string","description":"The watchlist alias"}},{"name":"watchlistItemId","in":"query","required":true,"description":"The watchlist item id (GUID)","schema":{"type":"string","description":"The watchlist item id (GUID)"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":60,"x-apizie-min-plan":null,"x-apizie-bulk":true,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/watchlist-items-create-or-update":{"post":{"operationId":"cloud_azure_arm_securityinsights_watchlist_items_create_or_update","summary":"Create or update a watchlist item.","description":"PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}/watchlistItems/{watchlistItemId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","watchlistAlias","watchlistItemId","body"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"watchlistAlias":{"type":"string","description":"The watchlist alias"},"watchlistItemId":{"type":"string","description":"The watchlist item id (GUID)"},"body":{"type":"object","description":"JSON request body"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}},"/v1/cloud:azure-arm-securityinsights/watchlist-items-delete":{"post":{"operationId":"cloud_azure_arm_securityinsights_watchlist_items_delete","summary":"Delete a watchlist item.","description":"DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}/watchlistItems/{watchlistItemId}","tags":["cloud"],"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["subscriptionId","resourceGroupName","workspaceName","watchlistAlias","watchlistItemId"],"properties":{"api-version":{"type":"string","default":"2025-09-01","description":"The API version to use for this operation."},"subscriptionId":{"type":"string","description":"The ID of the target subscription. The value must be an UUID."},"resourceGroupName":{"type":"string","description":"The name of the resource group. The name is case insensitive."},"workspaceName":{"type":"string","description":"The name of the monitor workspace."},"watchlistAlias":{"type":"string","description":"The watchlist alias"},"watchlistItemId":{"type":"string","description":"The watchlist item id (GUID)"}}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RunEnvelope"}}}},"4XX":{"$ref":"#/components/responses/Error"},"5XX":{"$ref":"#/components/responses/Error"}},"x-apizie-cache-ttl":0,"x-apizie-min-plan":null,"x-apizie-bulk":false,"x-apizie-status":"byok"}}},"components":{"securitySchemes":{"ApiKeyAuth":{"type":"apiKey","in":"header","name":"x-api-key"}},"schemas":{"RunEnvelope":{"type":"object","required":["project","data","timestamp"],"properties":{"project":{"type":"string","example":"dev-tools:hash"},"data":{},"timestamp":{"type":"string","format":"date-time"}}},"ErrorEnvelope":{"type":"object","properties":{"content":{},"message":{"type":"string"},"errors":{"type":"array","items":{}},"error":{"type":"object","properties":{"code":{"type":"string"},"message":{"type":"string"}}}}}},"responses":{"Error":{"description":"Invalid key, plan gate, rate limit or upstream failure","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorEnvelope"}}}}}}}