AutomationActionWorkspace interface
The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore
- Extends
Properties
| action |
The type of the action that will be triggered by the Automation |
| workspace |
The fully qualified Log Analytics Workspace Azure Resource ID. |
Property Details
actionType
The type of the action that will be triggered by the Automation
actionType: "Workspace"Property Value
"Workspace"
workspaceResourceId
The fully qualified Log Analytics Workspace Azure Resource ID.
workspaceResourceId?: stringProperty Value
string
