SecurityInsightsWatchlistCollection.CreateOrUpdate Method

Definition

Create or update a Watchlist and its Watchlist Items (bulk creation, e.g. through text/csv content type). To create a Watchlist and its Items, we should call this endpoint with rawContent and contentType properties.

  • Request Path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}
  • Operation Id: Watchlists_CreateOrUpdate
public virtual Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistResource> CreateOrUpdate (Azure.WaitUntil waitUntil, string watchlistAlias, Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistData data, System.Threading.CancellationToken cancellationToken = default);
abstract member CreateOrUpdate : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistData * System.Threading.CancellationToken -> Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistResource>
override this.CreateOrUpdate : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistData * System.Threading.CancellationToken -> Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsWatchlistResource>
Public Overridable Function CreateOrUpdate (waitUntil As WaitUntil, watchlistAlias As String, data As SecurityInsightsWatchlistData, Optional cancellationToken As CancellationToken = Nothing) As ArmOperation(Of SecurityInsightsWatchlistResource)

Parameters

waitUntil
WaitUntil

Completed if the method should wait to return until the long-running operation has completed on the service; Started if it should return after starting the operation. For more information on long-running operations, please see Azure.Core Long-Running Operation samples.

watchlistAlias
String

The watchlist alias.

data
SecurityInsightsWatchlistData

The watchlist.

cancellationToken
CancellationToken

The cancellation token to use.

Returns

Exceptions

watchlistAlias is an empty string, and was expected to be non-empty.

watchlistAlias or data is null.

Applies to