pulumi-azure-kotlin/com.pulumi.azure.sentinel.kotlin/WatchlistArgs

WatchlistArgs

data class WatchlistArgs(val defaultDuration: Output<String>? = null, val description: Output<String>? = null, val displayName: Output<String>? = null, val itemSearchKey: Output<String>? = null, val labels: Output<List<String>>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null) : ConvertibleToJava<WatchlistArgs>

Manages a Sentinel Watchlist.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.operationalinsights.AnalyticsWorkspace;
import com.pulumi.azure.operationalinsights.AnalyticsWorkspaceArgs;
import com.pulumi.azure.sentinel.LogAnalyticsWorkspaceOnboarding;
import com.pulumi.azure.sentinel.LogAnalyticsWorkspaceOnboardingArgs;
import com.pulumi.azure.sentinel.Watchlist;
import com.pulumi.azure.sentinel.WatchlistArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()
            .location("West Europe")
            .build());
        var exampleAnalyticsWorkspace = new AnalyticsWorkspace("exampleAnalyticsWorkspace", AnalyticsWorkspaceArgs.builder()
            .location(exampleResourceGroup.location())
            .resourceGroupName(exampleResourceGroup.name())
            .sku("PerGB2018")
            .build());
        var exampleLogAnalyticsWorkspaceOnboarding = new LogAnalyticsWorkspaceOnboarding("exampleLogAnalyticsWorkspaceOnboarding", LogAnalyticsWorkspaceOnboardingArgs.builder()
            .workspaceId(exampleAnalyticsWorkspace.id())
            .build());
        var exampleWatchlist = new Watchlist("exampleWatchlist", WatchlistArgs.builder()
            .logAnalyticsWorkspaceId(exampleLogAnalyticsWorkspaceOnboarding.workspaceId())
            .displayName("example-wl")
            .itemSearchKey("Key")
            .build());
    }
}
Content copied to clipboard

Import

Sentinel Watchlists can be imported using the resource id, e.g.

$ pulumi import azure:sentinel/watchlist:Watchlist example /subscriptions/12345678-1234-9876-4563-123456789012/resourceGroups/resGroup1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/watchlists/list1
Content copied to clipboard

Constructors

Link copied to clipboard
fun WatchlistArgs(defaultDuration: Output<String>? = null, description: Output<String>? = null, displayName: Output<String>? = null, itemSearchKey: Output<String>? = null, labels: Output<List<String>>? = null, logAnalyticsWorkspaceId: Output<String>? = null, name: Output<String>? = null)

Functions

Link copied to clipboard
open override fun toJava(): WatchlistArgs

Properties

Link copied to clipboard
val defaultDuration: Output<String>? = null

The default duration in ISO8601 duration form of this Sentinel Watchlist. Changing this forces a new Sentinel Watchlist to be created.

Link copied to clipboard
val description: Output<String>? = null

The description of this Sentinel Watchlist. Changing this forces a new Sentinel Watchlist to be created.

Link copied to clipboard
val displayName: Output<String>? = null

The display name of this Sentinel Watchlist. Changing this forces a new Sentinel Watchlist to be created.

Link copied to clipboard
val itemSearchKey: Output<String>? = null

The key used to optimize query performance when using Watchlist for joins with other data. Changing this forces a new Sentinel Watchlist to be created.

Link copied to clipboard
val labels: Output<List<String>>? = null

Specifies a list of labels related to this Sentinel Watchlist. Changing this forces a new Sentinel Watchlist to be created.

Link copied to clipboard
val logAnalyticsWorkspaceId: Output<String>? = null

The ID of the Log Analytics Workspace where this Sentinel Watchlist resides in. Changing this forces a new Sentinel Watchlist to be created.

Link copied to clipboard
val name: Output<String>? = null

The name which should be used for this Sentinel Watchlist. Changing this forces a new Sentinel Watchlist to be created.