Skip to main content

Get-XdrConfigurationAlertTuning

SYNOPSIS

Retrieves alert tuning configuration from Microsoft Defender XDR.

SYNTAX

Get-XdrConfigurationAlertTuning [-Force] [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION

Gets the alert suppression rules configuration from the Microsoft Defender XDR portal, including alert tuning rules and their conditions. This function includes caching support with a 30-minute TTL to reduce API calls.

EXAMPLES

EXAMPLE 1

Get-XdrConfigurationAlertTuning
Retrieves the alert tuning configuration using cached data if available.

EXAMPLE 2

Get-XdrConfigurationAlertTuning -Force
Forces a fresh retrieval of the alert tuning configuration, bypassing the cache.

PARAMETERS

-Force

Bypasses the cache and forces a fresh retrieval from the API.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ProgressAction

The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

Object

Returns the alert suppression rules configuration.

NOTES