az sentinel incident create

Create the incident. Azure CLI extensions reference

Options

16 in the Azure CLI extensions reference

--classification-commentDescribes the reason the incident was closed

--classification-reasonThe classification reason the incident was closed with

--classificationThe reason the incident was closed

--descriptionThe description of the incident

--etagEtag of the azure resource

--first-activity-time-utcThe time of the first activity in the incident

--incident-id, --name, -nIncident ID

--labelsList of labels relevant to this incident

--last-activity-time-utcThe time of the last activity in the incident

--ownerDescribes a user that the incident is assigned to

--provider-incident-idThe incident ID assigned by the incident provider

--provider-nameThe name of the source provider that generated the incident

--severityThe severity of the incident

--statusThe status of the incident

--titleThe title of the incident

--workspace-name, -wThe name of the workspace.