| Description | : Gets all watchlists, without watchlist items. |
| Reference | : Link ¶ |
⚶ Changes
{
"#id": "Watchlists_List",
"$responses": {
"200": {
"$properties": {
"value": {
"$properties": {
"properties": [
{
"#name": "sourceType",
"Enum": {
"new": [
[
"Local",
""
],
[
"AzureStorage",
""
]
],
"old": [
[
"Local file",
""
],
[
"Remote storage",
""
]
]
}
}
]
}
}
}
}
}
}
⚼ Request
GET:
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists
{
api-version:
string
,
subscriptionId:
string
,
resourceGroupName:
string
,
workspaceName:
string
,
$skipToken:
string
,
}
⚐ Response (200)
{
nextLink:
string
,
value:
}
[
]
,
{
,
properties:
}
{
,
watchlistId:
string
,
displayName:
string
,
provider:
string
,
source:
string
,
sourceType:
enum
,
created:
string
,
updated:
string
,
createdBy:
{
,
email:
string
,
name:
string
,
objectId:
string
,
}
updatedBy:
{
,
email:
string
,
name:
string
,
objectId:
string
,
}
description:
string
,
watchlistType:
string
,
watchlistAlias:
string
,
isDeleted:
boolean
,
labels:
[
,
string
,
]
defaultDuration:
string
,
tenantId:
string
,
numberOfLinesToSkip:
integer
,
rawContent:
string
,
itemsSearchKey:
string
,
contentType:
string
,
uploadStatus:
string
,
provisioningState:
enum
,
}
⚐ Response (default)
{
error:
}
{
,
code:
string
,
message:
string
,
}