azure-native.securityinsights.getEntityInsights
Explore with Pulumi AI
Execute Insights for an entity. Azure REST API version: 2023-06-01-preview.
Other available API versions: 2019-01-01-preview, 2021-09-01-preview, 2021-10-01-preview, 2022-01-01-preview, 2022-04-01-preview, 2022-05-01-preview, 2022-06-01-preview, 2022-07-01-preview, 2022-08-01-preview, 2022-09-01-preview, 2022-10-01-preview, 2022-11-01-preview, 2022-12-01-preview, 2023-02-01-preview, 2023-03-01-preview, 2023-04-01-preview, 2023-05-01-preview, 2023-07-01-preview, 2023-08-01-preview, 2023-09-01-preview, 2023-10-01-preview, 2023-12-01-preview, 2024-01-01-preview, 2024-04-01-preview, 2024-10-01-preview, 2025-01-01-preview.
Using getEntityInsights
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getEntityInsights(args: GetEntityInsightsArgs, opts?: InvokeOptions): Promise<GetEntityInsightsResult>
function getEntityInsightsOutput(args: GetEntityInsightsOutputArgs, opts?: InvokeOptions): Output<GetEntityInsightsResult>def get_entity_insights(add_default_extended_time_range: Optional[bool] = None,
                        end_time: Optional[str] = None,
                        entity_id: Optional[str] = None,
                        insight_query_ids: Optional[Sequence[str]] = None,
                        resource_group_name: Optional[str] = None,
                        start_time: Optional[str] = None,
                        workspace_name: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetEntityInsightsResult
def get_entity_insights_output(add_default_extended_time_range: Optional[pulumi.Input[bool]] = None,
                        end_time: Optional[pulumi.Input[str]] = None,
                        entity_id: Optional[pulumi.Input[str]] = None,
                        insight_query_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                        resource_group_name: Optional[pulumi.Input[str]] = None,
                        start_time: Optional[pulumi.Input[str]] = None,
                        workspace_name: Optional[pulumi.Input[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetEntityInsightsResult]func GetEntityInsights(ctx *Context, args *GetEntityInsightsArgs, opts ...InvokeOption) (*GetEntityInsightsResult, error)
func GetEntityInsightsOutput(ctx *Context, args *GetEntityInsightsOutputArgs, opts ...InvokeOption) GetEntityInsightsResultOutput> Note: This function is named GetEntityInsights in the Go SDK.
public static class GetEntityInsights 
{
    public static Task<GetEntityInsightsResult> InvokeAsync(GetEntityInsightsArgs args, InvokeOptions? opts = null)
    public static Output<GetEntityInsightsResult> Invoke(GetEntityInsightsInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetEntityInsightsResult> getEntityInsights(GetEntityInsightsArgs args, InvokeOptions options)
public static Output<GetEntityInsightsResult> getEntityInsights(GetEntityInsightsArgs args, InvokeOptions options)
fn::invoke:
  function: azure-native:securityinsights:getEntityInsights
  arguments:
    # arguments dictionaryThe following arguments are supported:
- EndTime string
- The end timeline date, so the results returned are before this date.
- EntityId string
- entity ID
- ResourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- StartTime string
- The start timeline date, so the results returned are after this date.
- WorkspaceName string
- The name of the workspace.
- AddDefault boolExtended Time Range 
- Indicates if query time range should be extended with default time range of the query. Default value is false
- InsightQuery List<string>Ids 
- List of Insights Query Id. If empty, default value is all insights of this entity
- EndTime string
- The end timeline date, so the results returned are before this date.
- EntityId string
- entity ID
- ResourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- StartTime string
- The start timeline date, so the results returned are after this date.
- WorkspaceName string
- The name of the workspace.
- AddDefault boolExtended Time Range 
- Indicates if query time range should be extended with default time range of the query. Default value is false
- InsightQuery []stringIds 
- List of Insights Query Id. If empty, default value is all insights of this entity
- endTime String
- The end timeline date, so the results returned are before this date.
- entityId String
- entity ID
- resourceGroup StringName 
- The name of the resource group. The name is case insensitive.
- startTime String
- The start timeline date, so the results returned are after this date.
- workspaceName String
- The name of the workspace.
- addDefault BooleanExtended Time Range 
- Indicates if query time range should be extended with default time range of the query. Default value is false
- insightQuery List<String>Ids 
- List of Insights Query Id. If empty, default value is all insights of this entity
- endTime string
- The end timeline date, so the results returned are before this date.
- entityId string
- entity ID
- resourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- startTime string
- The start timeline date, so the results returned are after this date.
- workspaceName string
- The name of the workspace.
- addDefault booleanExtended Time Range 
- Indicates if query time range should be extended with default time range of the query. Default value is false
- insightQuery string[]Ids 
- List of Insights Query Id. If empty, default value is all insights of this entity
- end_time str
- The end timeline date, so the results returned are before this date.
- entity_id str
- entity ID
- resource_group_ strname 
- The name of the resource group. The name is case insensitive.
- start_time str
- The start timeline date, so the results returned are after this date.
- workspace_name str
- The name of the workspace.
- add_default_ boolextended_ time_ range 
- Indicates if query time range should be extended with default time range of the query. Default value is false
- insight_query_ Sequence[str]ids 
- List of Insights Query Id. If empty, default value is all insights of this entity
- endTime String
- The end timeline date, so the results returned are before this date.
- entityId String
- entity ID
- resourceGroup StringName 
- The name of the resource group. The name is case insensitive.
- startTime String
- The start timeline date, so the results returned are after this date.
- workspaceName String
- The name of the workspace.
- addDefault BooleanExtended Time Range 
- Indicates if query time range should be extended with default time range of the query. Default value is false
- insightQuery List<String>Ids 
- List of Insights Query Id. If empty, default value is all insights of this entity
getEntityInsights Result
The following output properties are available:
- MetaData Pulumi.Azure Native. Security Insights. Outputs. Get Insights Results Metadata Response 
- The metadata from the get insights operation results.
- Value
List<Pulumi.Azure Native. Security Insights. Outputs. Entity Insight Item Response> 
- The insights result values.
- MetaData GetInsights Results Metadata Response 
- The metadata from the get insights operation results.
- Value
[]EntityInsight Item Response 
- The insights result values.
- metaData GetInsights Results Metadata Response 
- The metadata from the get insights operation results.
- value
List<EntityInsight Item Response> 
- The insights result values.
- metaData GetInsights Results Metadata Response 
- The metadata from the get insights operation results.
- value
EntityInsight Item Response[] 
- The insights result values.
- meta_data GetInsights Results Metadata Response 
- The metadata from the get insights operation results.
- value
Sequence[EntityInsight Item Response] 
- The insights result values.
- metaData Property Map
- The metadata from the get insights operation results.
- value List<Property Map>
- The insights result values.
Supporting Types
EntityInsightItemResponse   
- ChartQuery List<Pulumi.Results Azure Native. Security Insights. Inputs. Insights Table Result Response> 
- Query results for table insights query.
- QueryId string
- The query id of the insight
- QueryTime Pulumi.Interval Azure Native. Security Insights. Inputs. Entity Insight Item Response Query Time Interval 
- The Time interval that the query actually executed on.
- TableQuery Pulumi.Results Azure Native. Security Insights. Inputs. Insights Table Result Response 
- Query results for table insights query.
- ChartQuery []InsightsResults Table Result Response 
- Query results for table insights query.
- QueryId string
- The query id of the insight
- QueryTime EntityInterval Insight Item Response Query Time Interval 
- The Time interval that the query actually executed on.
- TableQuery InsightsResults Table Result Response 
- Query results for table insights query.
- chartQuery List<InsightsResults Table Result Response> 
- Query results for table insights query.
- queryId String
- The query id of the insight
- queryTime EntityInterval Insight Item Response Query Time Interval 
- The Time interval that the query actually executed on.
- tableQuery InsightsResults Table Result Response 
- Query results for table insights query.
- chartQuery InsightsResults Table Result Response[] 
- Query results for table insights query.
- queryId string
- The query id of the insight
- queryTime EntityInterval Insight Item Response Query Time Interval 
- The Time interval that the query actually executed on.
- tableQuery InsightsResults Table Result Response 
- Query results for table insights query.
- chart_query_ Sequence[Insightsresults Table Result Response] 
- Query results for table insights query.
- query_id str
- The query id of the insight
- query_time_ Entityinterval Insight Item Response Query Time Interval 
- The Time interval that the query actually executed on.
- table_query_ Insightsresults Table Result Response 
- Query results for table insights query.
- chartQuery List<Property Map>Results 
- Query results for table insights query.
- queryId String
- The query id of the insight
- queryTime Property MapInterval 
- The Time interval that the query actually executed on.
- tableQuery Property MapResults 
- Query results for table insights query.
EntityInsightItemResponseQueryTimeInterval      
- end_time str
- Insight query end time
- start_time str
- Insight query start time
GetInsightsErrorKindResponse    
- ErrorMessage string
- the error message
- Kind string
- the query kind
- QueryId string
- the query id
- ErrorMessage string
- the error message
- Kind string
- the query kind
- QueryId string
- the query id
- errorMessage String
- the error message
- kind String
- the query kind
- queryId String
- the query id
- errorMessage string
- the error message
- kind string
- the query kind
- queryId string
- the query id
- error_message str
- the error message
- kind str
- the query kind
- query_id str
- the query id
- errorMessage String
- the error message
- kind String
- the query kind
- queryId String
- the query id
GetInsightsResultsMetadataResponse    
- TotalCount int
- the total items found for the insights request
- Errors
List<Pulumi.Azure Native. Security Insights. Inputs. Get Insights Error Kind Response> 
- information about the failed queries
- TotalCount int
- the total items found for the insights request
- Errors
[]GetInsights Error Kind Response 
- information about the failed queries
- totalCount Integer
- the total items found for the insights request
- errors
List<GetInsights Error Kind Response> 
- information about the failed queries
- totalCount number
- the total items found for the insights request
- errors
GetInsights Error Kind Response[] 
- information about the failed queries
- total_count int
- the total items found for the insights request
- errors
Sequence[GetInsights Error Kind Response] 
- information about the failed queries
- totalCount Number
- the total items found for the insights request
- errors List<Property Map>
- information about the failed queries
InsightsTableResultResponse   
- Columns
List<Pulumi.Azure Native. Security Insights. Inputs. Insights Table Result Response Columns> 
- Columns Metadata of the table
- Rows
List<ImmutableArray<string>> 
- Rows data of the table
- Columns
[]InsightsTable Result Response Columns 
- Columns Metadata of the table
- Rows [][]string
- Rows data of the table
- columns
List<InsightsTable Result Response Columns> 
- Columns Metadata of the table
- rows List<List<String>>
- Rows data of the table
- columns
InsightsTable Result Response Columns[] 
- Columns Metadata of the table
- rows string[][]
- Rows data of the table
- columns
Sequence[InsightsTable Result Response Columns] 
- Columns Metadata of the table
- rows Sequence[Sequence[str]]
- Rows data of the table
- columns List<Property Map>
- Columns Metadata of the table
- rows List<List<String>>
- Rows data of the table
InsightsTableResultResponseColumns    
Package Details
- Repository
- Azure Native pulumi/pulumi-azure-native
- License
- Apache-2.0