{"note":"OpenAPI conversion -- returning structured metadata","name":"azure-com-securityinsights-securityinsights","description":"Security Insights","version":"2020-01-01","base_url":"https://management.azure.com","endpoints":8,"raw":"@lap v0.3\n# Machine-readable API spec. Each @endpoint block is one API call.\n@api Security Insights\n@base https://management.azure.com\n@version 2020-01-01\n@auth OAuth2\n@common_fields {api-version: any # API version for the operation}\n@endpoints 8\n@toc providers(1), subscriptions(7)\n\n@group providers\n@endpoint GET /providers/Microsoft.SecurityInsights/operations\n@desc Lists all operations available Azure Security Insights Resource Provider.\n@returns(200) OK. Successfully retrieved operations list.\n\n@endgroup\n\n@group subscriptions\n@endpoint GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents\n@desc Gets all incidents.\n@required {subscriptionId: any # Azure subscription ID, resourceGroupName: any # The name of the resource group within the user's subscription. The name is case insensitive., workspaceName: any # The name of the workspace.}\n@optional {$filter: any # Filters the results, based on a Boolean condition. Optional., $orderby: any # Sorts the results. Optional., $top: any # Returns only the first n results. Optional., $skipToken: any # Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional.}\n@returns(200) OK, Operation successfully completed\n\n@endpoint GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}\n@desc Gets an incident.\n@required {subscriptionId: any # Azure subscription ID, resourceGroupName: any # The name of the resource group within the user's subscription. The name is case insensitive., workspaceName: any # The name of the workspace., incidentId: any # Incident ID}\n@returns(200) OK, Operation successfully completed\n\n@endpoint PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}\n@desc Creates or updates the incident.\n@required {subscriptionId: any # Azure subscription ID, resourceGroupName: any # The name of the resource group within the user's subscription. The name is case insensitive., workspaceName: any # The name of the workspace., incidentId: any # Incident ID, incident: map # The incident}\n@returns(200) OK, Operation successfully completed\n@returns(201) Created\n\n@endpoint DELETE /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}\n@desc Delete the incident.\n@required {subscriptionId: any # Azure subscription ID, resourceGroupName: any # The name of the resource group within the user's subscription. The name is case insensitive., workspaceName: any # The name of the workspace., incidentId: any # Incident ID}\n@returns(200) OK, Operation successfully completed\n@returns(204) No Content\n\n@endpoint GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments\n@desc Gets all incident comments.\n@required {subscriptionId: any # Azure subscription ID, resourceGroupName: any # The name of the resource group within the user's subscription. The name is case insensitive., workspaceName: any # The name of the workspace., incidentId: any # Incident ID}\n@optional {$filter: any # Filters the results, based on a Boolean condition. Optional., $orderby: any # Sorts the results. Optional., $top: any # Returns only the first n results. Optional., $skipToken: any # Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional.}\n@returns(200) OK, Operation successfully completed\n\n@endpoint GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments/{incidentCommentId}\n@desc Gets an incident comment.\n@required {subscriptionId: any # Azure subscription ID, resourceGroupName: any # The name of the resource group within the user's subscription. The name is case insensitive., workspaceName: any # The name of the workspace., incidentId: any # Incident ID, incidentCommentId: any # Incident comment ID}\n@returns(200) OK, Operation successfully completed\n\n@endpoint PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentId}/comments/{incidentCommentId}\n@desc Creates the incident comment.\n@required {subscriptionId: any # Azure subscription ID, resourceGroupName: any # The name of the resource group within the user's subscription. The name is case insensitive., workspaceName: any # The name of the workspace., incidentId: any # Incident ID, incidentCommentId: any # Incident comment ID, incidentComment: map # The incident comment}\n@returns(201) Created\n\n@endgroup\n\n@end\n"}