alertHistoryState resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Stores changes made to alerts.

Properties

Property	Type	Description
appId	String	The Application ID of the calling application that submitted an update (PATCH) to the alert. The appId should be extracted from the auth token and not entered manually by the calling application.
assignedTo	String	UPN of user the alert was assigned to (note: alert.assignedTo only stores the last value/UPN).
comments	String collection	Comment entered by signed-in user.
feedback	String	Analyst feedback on the alert in this update. Possible values are: unknown, truePositive, falsePositive, benignPositive.
status	String	Alert status value (if updated). Possible values are: unknown, newAlert, inProgress, resolved, dismissed.
updatedDateTime	DateTimeOffset	Date and time of the alert update. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
user	String	UPN of the signed-in user that updated the alert (taken from the bearer token - if in user/delegated auth mode).

JSON representation

The following JSON representation shows the resource type.

{
  "appId": "String",
  "assignedTo": "String",
  "comments": ["String"],
  "feedback": "String",
  "status": "String",
  "updatedDateTime": "String (timestamp)",
  "user": "String"
}