Remove AzSentinelAlertRule

---

external help file: AzSentinel-help.xml Module Name: AzSentinel online version: schema: 2.0.0

Remove-AzSentinelAlertRule

SYNOPSIS

Remove Azure Sentinal Alert Rules

SYNTAX

Remove-AzSentinelAlertRule [-SubscriptionId <String>] -WorkspaceName <String> [-RuleName <String[]>] [-WhatIf]
 [-Confirm] [<CommonParameters>]

DESCRIPTION

With this function you can remove Azure Sentinal Alert rules from Powershell, if you don't provide andy Rule name all rules will be removed

EXAMPLES

EXAMPLE 1

Remove-AzSentinelAlertRule -WorkspaceName "" -RuleName ""
In this example the defined rule will be removed from Azure Sentinel

EXAMPLE 2

Remove-AzSentinelAlertRule -WorkspaceName "" -RuleName "","", ""
In this example you can define multiple rules that will be removed

EXAMPLE 3

Remove-AzSentinelAlertRule -WorkspaceName ""
In this example no rule is specified, all rules will be removed one by one. For each rule you need to confirm the action

PARAMETERS

-SubscriptionId

Enter the subscription ID, if no subscription ID is provided then current AZContext subscription will be used

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-WorkspaceName

Enter the Workspace name

Type: String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RuleName

Enter the name of the rule that you wnat to remove

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS