New-AzAlertsSuppressionRuleScope

Module:

Az.Security

Helper cmdlet to create PSIScopeElement.

Syntax

New-AzAlertsSuppressionRuleScope
   -Field <String>
   [-ContainsSubstring <String>]
   [-AnyOf <String[]>]
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

Description

Helper cmdlet to create PSIScopeElement. Usable in Set-AzAlertsSuppressionRule as part of the -AllOf parameter.

Examples

Example 1

$scope1 = New-AzAlertsSuppressionRuleScope -Field "entities.account.name" -ContainsSubstring "Example"

Creates a PSScopeElementContains.

Example 2

$scope2 = New-AzAlertsSuppressionRuleScope -Field "entities.file.name" -AnyOf "FileName1","FileName2","FileName3"

Creates a PSScopeElementIn.

Parameters

-AnyOf

Suppress only when field equals one of those values.

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ContainsSubstring

Suppress only when field contains this specific value.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DefaultProfile

The credentials, account, tenant, and subscription used for communication with Azure.

Type:	IAzureContextContainer
Aliases:	AzContext, AzureRmContext, AzureCredential
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Field

Entity field to scope by.

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

Inputs

None

Outputs

PSIScopeElement