Share via


SecurityInsightsThreatIntelligenceIndicatorCollection.CreateOrUpdate Method

Definition

Update a threat Intelligence indicator.

  • Request Path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{name}
  • Operation Id: ThreatIntelligenceIndicators_Update
public virtual Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource> CreateOrUpdate (Azure.WaitUntil waitUntil, string name, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData data, System.Threading.CancellationToken cancellationToken = default);
abstract member CreateOrUpdate : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData * System.Threading.CancellationToken -> Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>
override this.CreateOrUpdate : Azure.WaitUntil * string * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsThreatIntelligenceIndicatorData * System.Threading.CancellationToken -> Azure.ResourceManager.ArmOperation<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>
Public Overridable Function CreateOrUpdate (waitUntil As WaitUntil, name As String, data As SecurityInsightsThreatIntelligenceIndicatorData, Optional cancellationToken As CancellationToken = Nothing) As ArmOperation(Of SecurityInsightsThreatIntelligenceIndicatorResource)

Parameters

waitUntil
WaitUntil

Completed if the method should wait to return until the long-running operation has completed on the service; Started if it should return after starting the operation. For more information on long-running operations, please see Azure.Core Long-Running Operation samples.

name
String

Threat intelligence indicator name field.

data
SecurityInsightsThreatIntelligenceIndicatorData

Properties of threat intelligence indicators to create and update.

cancellationToken
CancellationToken

The cancellation token to use.

Returns

Exceptions

name is an empty string, and was expected to be non-empty.

name or data is null.

Applies to