New-AzOperationalInsightsSavedSearch

Creates a new saved search with the specified parameters.

Note

This is the previous version of our documentation. Please consult the most recent version for up-to-date information.

Syntax

New-AzOperationalInsightsSavedSearch
   [-ResourceGroupName] <String>
   [-WorkspaceName] <String>
   [-SavedSearchId] <String>
   [-DisplayName] <String>
   [-Category] <String>
   [-Query] <String>
   [[-Tag] <Hashtable>]
   [[-Version] <Int64>]
   [[-FunctionAlias] <String>]
   [[-FunctionParameter] <String>]
   [-Force]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The New-AzOperationalInsightsSavedSearch cmdlet creates a new saved search with the specified parameters for the workspace.

Examples

PS C:\>New-AzOperationalInsightsSavedSearch -ResourceGroupName "ContosoResourceGroup" -WorkspaceName "ContosoWorkspace" -SavedSearchId "ContosoSavedSearchId" -DisplayName "ContosoSavedSearchDisplayName" -Category "ContosoSavedSearchCategory" -Query "*" -Version $Version -Force

This command creates a new saved search.

Parameters

-Category

Specifies the category name.

Type:String
Position:4
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False
-DefaultProfile

The credentials, account, tenant, and subscription used for communication with azure

Type:IAzureContextContainer
Aliases:AzContext, AzureRmContext, AzureCredential
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-DisplayName

Specifies the saved search display name.

Type:String
Position:3
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-Force

Forces the command to run without asking for user confirmation.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-FunctionAlias

The function alias if query serves as a function.

Type:String
Position:8
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-FunctionParameter

The optional function parameters if query serves as a function. Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. For more examples and proper syntax please refer to https://docs.microsoft.com/azure/kusto/query/functions/user-defined-functions.

Type:String
Aliases:FunctionParameters
Position:9
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Query

Specifies the query expression for the saved search.

Type:String
Position:5
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-ResourceGroupName

Specifies the resource group name.

Type:String
Position:0
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-SavedSearchId

Specifies the saved search ID.

Type:String
Position:2
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-Tag

The saved search tags.

Type:Hashtable
Position:6
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-Version

Specifies the version.

Type:Int64
Position:7
Default value:1
Accept pipeline input:True
Accept wildcard characters:False
-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False
-WorkspaceName

Specifies the workspace name.

Type:String
Aliases:Name
Position:1
Default value:None
Accept pipeline input:True
Accept wildcard characters:False

Inputs

String

Hashtable

Int64

Outputs

HttpStatusCode