Get Bookmark

External DocumentationTo learn more, visit the Microsoft Sentinel documentation.

Parameter	Description
Bookmark ID	The ID of the bookmark.
Resource Group Name	The name of the resource group. The name is case insensitive.
Subscription ID	The ID of the target subscription.
Workspace Name	The name of the workspace.

Parameter

Description

Bookmark ID

The ID of the bookmark.

Resource Group Name

The name of the resource group. The name is case insensitive.

Subscription ID

The ID of the target subscription.

Workspace Name

The name of the workspace.

Example Output

{
	"id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/bookmarks/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
	"name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
	"etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"",
	"type": "Microsoft.SecurityInsights/bookmarks",
	"properties": {
		"displayName": "My bookmark",
		"created": "2019-01-01T13:15:30Z",
		"updated": "2019-01-01T13:15:30Z",
		"createdBy": {
			"objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70",
			"name": "john doe",
			"email": "john@contoso.com"
		},
		"updatedBy": {
			"objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70",
			"name": "john doe",
			"email": "john@contoso.com"
		},
		"labels": [
			"Tag1",
			"Tag2"
		],
		"query": "SecurityEvent | where TimeGenerated > ago(1d) and TimeGenerated < ago(2d)",
		"queryResult": "Security Event query result",
		"incidentInfo": {
			"incidentId": "DDA55F97-170B-40B9-B8ED-CBFD05481E7D",
			"title": "New case 1",
			"relationName": "4bb36b7b-26ff-4d1c-9cbe-0d8ab3da0018",
			"severity": "Low"
		},
		"notes": "Found a suspicious activity"
	}
}

Integrations

Parameters

Example Output

Workflow Library Example

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example