incidents_bookmarks

Creates, updates, deletes, gets or lists a incidents_bookmarks resource.

Overview

Name	incidents_bookmarks
Type	Resource
Id	azure.sentinel.incidents_bookmarks

Fields

Name	Datatype	Description
kind	string	The kind of the entity
properties	object	Describes bookmark properties

Methods

Name	Accessible by	Required Params	Description
list	SELECT	incidentId, resourceGroupName, subscriptionId, workspaceName	Gets all bookmarks for an incident.

SELECT examples

Gets all bookmarks for an incident.

SELECT
kind,
properties
FROM azure.sentinel.incidents_bookmarks
WHERE incidentId = '{{ incidentId }}'
AND resourceGroupName = '{{ resourceGroupName }}'
AND subscriptionId = '{{ subscriptionId }}'
AND workspaceName = '{{ workspaceName }}';