metadata
Creates, updates, deletes, gets or lists a metadata resource.
Overview
| Name | metadata |
| Type | Resource |
| Id | azure.sentinel.metadata |
Fields
- vw_metadata
- metadata
| Name | Datatype | Description |
|---|---|---|
author | text | field from the properties object |
categories | text | field from the properties object |
content_id | text | field from the properties object |
content_schema_version | text | field from the properties object |
custom_version | text | field from the properties object |
dependencies | text | field from the properties object |
etag | text | Etag of the azure resource |
first_publish_date | text | field from the properties object |
icon | text | field from the properties object |
kind | text | field from the properties object |
last_publish_date | text | field from the properties object |
metadataName | text | field from the properties object |
parent_id | text | field from the properties object |
preview_images | text | field from the properties object |
preview_images_dark | text | field from the properties object |
providers | text | field from the properties object |
resourceGroupName | text | field from the properties object |
source | text | field from the properties object |
subscriptionId | text | field from the properties object |
support | text | field from the properties object |
threat_analysis_tactics | text | field from the properties object |
threat_analysis_techniques | text | field from the properties object |
version | text | field from the properties object |
workspaceName | text | field from the properties object |
| Name | Datatype | Description |
|---|---|---|
etag | string | Etag of the azure resource |
properties | object | Metadata property bag. |
Methods
| Name | Accessible by | Required Params | Description |
|---|---|---|---|
get | SELECT | metadataName, resourceGroupName, subscriptionId, workspaceName | Get a Metadata. |
list | SELECT | resourceGroupName, subscriptionId, workspaceName | List of all metadata |
create | INSERT | metadataName, resourceGroupName, subscriptionId, workspaceName | Create a Metadata. |
delete | DELETE | metadataName, resourceGroupName, subscriptionId, workspaceName | Delete a Metadata. |
update | UPDATE | metadataName, resourceGroupName, subscriptionId, workspaceName | Update an existing Metadata. |
SELECT examples
List of all metadata
- vw_metadata
- metadata
SELECT
author,
categories,
content_id,
content_schema_version,
custom_version,
dependencies,
etag,
first_publish_date,
icon,
kind,
last_publish_date,
metadataName,
parent_id,
preview_images,
preview_images_dark,
providers,
resourceGroupName,
source,
subscriptionId,
support,
threat_analysis_tactics,
threat_analysis_techniques,
version,
workspaceName
FROM azure.sentinel.vw_metadata
WHERE resourceGroupName = '{{ resourceGroupName }}'
AND subscriptionId = '{{ subscriptionId }}'
AND workspaceName = '{{ workspaceName }}';
SELECT
etag,
properties
FROM azure.sentinel.metadata
WHERE resourceGroupName = '{{ resourceGroupName }}'
AND subscriptionId = '{{ subscriptionId }}'
AND workspaceName = '{{ workspaceName }}';
INSERT example
Use the following StackQL query and manifest file to create a new metadata resource.
- All Properties
- Manifest
/*+ create */
INSERT INTO azure.sentinel.metadata (
metadataName,
resourceGroupName,
subscriptionId,
workspaceName,
etag,
properties
)
SELECT
'{{ metadataName }}',
'{{ resourceGroupName }}',
'{{ subscriptionId }}',
'{{ workspaceName }}',
'{{ etag }}',
'{{ properties }}'
;
- name: your_resource_model_name
props:
- name: etag
value: string
- name: properties
value:
- name: contentId
value: []
- name: parentId
value: []
- name: version
value: []
- name: kind
value: []
- name: source
value:
- name: kind
value: string
- name: name
value: string
- name: sourceId
value: string
- name: author
value:
- name: name
value: string
- name: email
value: string
- name: link
value: string
- name: support
value:
- name: tier
value: string
- name: name
value: string
- name: email
value: string
- name: link
value: string
- name: dependencies
value:
- name: name
value: string
- name: operator
value: string
- name: criteria
value:
- - name: name
value: string
- name: operator
value: string
- name: criteria
value:
- - name: name
value: string
- name: operator
value: string
- name: criteria
value:
- - name: name
value: string
- name: operator
value: string
- name: criteria
value:
- - name: name
value: string
- name: operator
value: string
- name: criteria
value:
- - name: name
value: string
- name: operator
value: string
- name: criteria
value:
- - name: name
value: string
- name: operator
value: string
- name: criteria
value:
- - name: name
value: string
- name: operator
value: string
- name: criteria
value:
- - name: name
value: string
- name: operator
value: string
- name: criteria
value:
- []
- name: categories
value:
- name: domains
value:
- string
- name: verticals
value:
- string
- name: providers
value: []
- name: firstPublishDate
value: []
- name: lastPublishDate
value: []
- name: customVersion
value: []
- name: contentSchemaVersion
value: []
- name: icon
value: []
- name: threatAnalysisTactics
value: []
- name: threatAnalysisTechniques
value: []
- name: previewImages
value: []
- name: previewImagesDark
value: []
UPDATE example
Updates a metadata resource.
/*+ update */
UPDATE azure.sentinel.metadata
SET
properties = '{{ properties }}'
WHERE
metadataName = '{{ metadataName }}'
AND resourceGroupName = '{{ resourceGroupName }}'
AND subscriptionId = '{{ subscriptionId }}'
AND workspaceName = '{{ workspaceName }}';
DELETE example
Deletes the specified metadata resource.
/*+ delete */
DELETE FROM azure.sentinel.metadata
WHERE metadataName = '{{ metadataName }}'
AND resourceGroupName = '{{ resourceGroupName }}'
AND subscriptionId = '{{ subscriptionId }}'
AND workspaceName = '{{ workspaceName }}';