SecurityInsightsHuntCollection.CreateOrUpdate Method

Definition

Create or update a hunt

  • Request Path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/hunts/{huntId}
  • Operation Id: Hunts_CreateOrUpdate
  • Default Api Version: 2024-01-01-preview
  • Resource: SecurityInsightsHuntResource
public virtual Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsHuntResource> CreateOrUpdate (Azure.WaitUntil waitUntil, string huntId, Azure.ResourceManager.SecurityInsights.SecurityInsightsHuntData data, System.Threading.CancellationToken cancellationToken = default);
abstract member CreateOrUpdate : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.SecurityInsightsHuntData * System.Threading.CancellationToken -> Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsHuntResource>
override this.CreateOrUpdate : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.SecurityInsightsHuntData * System.Threading.CancellationToken -> Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsHuntResource>
Public Overridable Function CreateOrUpdate (waitUntil As WaitUntil, huntId As String, data As SecurityInsightsHuntData, Optional cancellationToken As CancellationToken = Nothing) As ArmOperation(Of SecurityInsightsHuntResource)

Parameters

waitUntil
WaitUntil

Completed if the method should wait to return until the long-running operation has completed on the service; Started if it should return after starting the operation. For more information on long-running operations, please see Azure.Core Long-Running Operation samples.

huntId
String

The hunt id (GUID).

data
SecurityInsightsHuntData

The hunt.

cancellationToken
CancellationToken

The cancellation token to use.

Returns

Exceptions

huntId is an empty string, and was expected to be non-empty.

huntId or data is null.

Applies to