functions/Get-AzSRLogAnalyticsSavedSearchSchedule.ps1
|
<#
.SYNOPSIS Return the Schedule of a Log Analytics Saved Search from a Log Analytics Workspace .DESCRIPTION Return the Schedule of a Log Analytics Saved Search from a Log Analytics Workspace .PARAMETER SearchId The Azure Resource Id of the Log Analytics Search. Use Get-AzureRmOperationalInsightsWorkspace and Get-AzSRLogAnalyticsSavedSearchList to retrieve this information .EXAMPLE Get-AzureRmOperationalInsightsWorkspace | Get-AzSRLogAnalyticsSavedSearchList | Get-AzSRLogAnalyticsSavedSearchSchedule .NOTES Copyright: (c) 2018 Fabian Bader License: MIT https://opensource.org/licenses/MIT #> function Get-AzSRLogAnalyticsSavedSearchSchedule { [CmdletBinding()] param ( [Alias('Id')] [Parameter(Mandatory = $true, ValueFromPipeline = $true, ValueFromPipelineByPropertyName = $true)] [ValidateScript( { if ($_ -match "subscriptions\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/resourcegroups\/[\w\d-]+\/providers\/microsoft.operationalinsights\/workspaces\/[\w\d-]+\/savedSearches\/[\w|()-]+$" ) { $true } else { throw "Not a valid 'microsoft.operationalinsights/savedSearches' workspace URI" } } )] [string]$SearchId ) Begin { #region Get AccessToken try { $AccessToken = Get-AzureRmCachedAccessToken $LoginHeader = @{ 'authorization' = "Bearer $AccessToken" } } catch { throw $($_.Exception.Message) } #endregion } Process { #$SearchId = [uri]::EscapeDataString($SearchId) $uri = "https://management.azure.com/$SearchId/schedules?api-version=2015-03-20" Write-Verbose $uri $params = @{ ContentType = 'application/x-www-form-urlencoded' Headers = $LoginHeader Method = 'Get' URI = $uri Verbose = $False } try { $Response = Invoke-RestMethod @params Return $Response.value | ForEach-Object { New-Object psobject -Property @{ 'id' = $_.id 'etag' = [datetime]([uri]::UnescapeDataString(($_.etag -replace "^.*'(.*)'.*$", '$1'))) 'Interval' = $_.properties.Interval 'QueryTimeSpan' = $_.properties.QueryTimeSpan 'Enabled' = $_.properties.Enabled 'NearRealTime' = $_.properties.NearRealTime } } } catch { Write-Warning "Could not retrieve the data. $($_.Exception.Message))" } } } |