New-AzAlertsSuppressionRuleScope

  • Reference
Module:
Az.Security

Helper cmdlet to create PSIScopeElement.

Syntax

New-AzAlertsSuppressionRuleScope
   -Field <String>
   [-ContainsSubstring <String>]
   [-AnyOf <String[]>]
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

Description

Helper cmdlet to create PSIScopeElement. Usable in Set-AzAlertsSuppressionRule as part of the -AllOf parameter.

Examples

Example 1

$scope1 = New-AzAlertsSuppressionRuleScope -Field "entities.account.name" -ContainsSubstring "Example"

Creates a PSScopeElementContains.

Example 2

$scope2 = New-AzAlertsSuppressionRuleScope -Field "entities.file.name" -AnyOf "FileName1","FileName2","FileName3"

Creates a PSScopeElementIn.

Parameters

-AnyOf

Suppress only when field equals one of those values.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ContainsSubstring

Suppress only when field contains this specific value.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DefaultProfile

The credentials, account, tenant, and subscription used for communication with Azure.

Type:IAzureContextContainer
Aliases:AzContext, AzureRmContext, AzureCredential
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Field

Entity field to scope by.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

Inputs

None

Outputs

PSIScopeElement