Skip to content

Commit a632ad0

Browse files
authored
Update New-AzSentinelAlertRule.md (#26185)
corrected query and added TriggerOperator because it is a required parameter
1 parent bb7824c commit a632ad0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/SecurityInsights/SecurityInsights/help/New-AzSentinelAlertRule.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,7 @@ This command creates an Alert Rule of the MicrosoftSecurityIncidentCreation kind
9696

9797
### Example 5: Create a Scheduled Alert Rule
9898
```powershell
99-
New-AzSentinelAlertRule -ResourceGroupName "myResourceGroup" -WorkspaceName "myWorkspaceName" -Kind Scheduled -Enabled -DisplayName "Powershell Exection Alert (Several Times per Hour)" -Severity Low -Query "SecurityEvent | where EventId == 4688" -QueryFrequency (New-TimeSpan -Hours 1) -QueryPeriod (New-TimeSpan -Hours 1) -TriggerThreshold 10
99+
New-AzSentinelAlertRule -ResourceGroupName "myResourceGroup" -WorkspaceName "myWorkspaceName" -Kind Scheduled -Enabled -DisplayName "Powershell Exection Alert (Several Times per Hour)" -Severity Low -Query "SecurityEvent | where EventID == 4688" -QueryFrequency (New-TimeSpan -Hours 1) -QueryPeriod (New-TimeSpan -Hours 1) -TriggerThreshold 10 -TriggerOperator "GreaterThan"
100100
```
101101

102102
This command creates an Alert Rule of the Scheduled kind.

0 commit comments

Comments
 (0)