@lap v0.3
# Machine-readable API spec. Each @endpoint block is one API call.
@api Security Insights
@base https://management.azure.com
@version 2020-01-01
@auth OAuth2
@common_fields {api-version: any}
@endpoints 8
@toc providers(1), subscriptions(7)

@group providers
@endpoint GET /providers/Microsoft.SecurityInsights/operations
@returns(200)

@endgroup

@group subscriptions
@endpoint GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents
@required {subscriptionId: any, resourceGroupName: any, workspaceName: any}
@optional {$filter: any, $orderby: any, $top: any, $skipToken: any}
@returns(200)

@endpoint GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}
@required {subscriptionId: any, resourceGroupName: any, workspaceName: any, incidentId: any}
@returns(200)

@endpoint PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}
@required {subscriptionId: any, resourceGroupName: any, workspaceName: any, incidentId: any, incident: map}
@returns(200)
@returns(201)

@endpoint DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}
@required {subscriptionId: any, resourceGroupName: any, workspaceName: any, incidentId: any}
@returns(200)
@returns(204)

@endpoint GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments
@required {subscriptionId: any, resourceGroupName: any, workspaceName: any, incidentId: any}
@optional {$filter: any, $orderby: any, $top: any, $skipToken: any}
@returns(200)

@endpoint GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments/{incidentCommentId}
@required {subscriptionId: any, resourceGroupName: any, workspaceName: any, incidentId: any, incidentCommentId: any}
@returns(200)

@endpoint PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments/{incidentCommentId}
@required {subscriptionId: any, resourceGroupName: any, workspaceName: any, incidentId: any, incidentCommentId: any, incidentComment: map}
@returns(201)

@endgroup

@end