az sentinel watchlist create

Create a Watchlist and its Watchlist Items (bulk creation, e.g. Azure CLI extensions reference

Options

23 in the Azure CLI extensions reference

--content-typeThe content type of the raw content.

--created-byDescribes a user that created the watchlist

--createdThe time the watchlist was created

--default-durationThe default duration of a watchlist (in ISO 8601 duration format)

--descriptionA description of the watchlist

--display-nameThe display name of the watchlist

--etagEtag of the azure resource

--is-deletedA flag that indicates if the watchlist is deleted or not

--items-search-keyThe search key is used to optimize query performance when using watchlists for joins with other data.

--labelsList of labels relevant to this watchlist

--providerThe provider of the watchlist

--raw-contentThe raw content that represents to watchlist items to create.

--skip-numThe number of lines in a csv/tsv content to skip before the header

--source-typeThe sourceType of the watchlist

--sourceThe filename of the watchlist, called 'source'

--tenant-idThe tenantId where the watchlist belongs to

--updated-byDescribes a user that updated the watchlist

--updatedThe last time the watchlist was updated

--upload-statusThe status of the Watchlist upload : New, InProgress or Complete.

--watchlist-alias, --name, -nWatchlist Alias

--watchlist-idThe id (a Guid) of the watchlist

--watchlist-typeThe type of the watchlist

--workspace-name, -wThe name of the workspace.