Move-XdrAlertToIncident
SYNOPSIS
Moves alerts to a specific incident or creates a new one.
SYNTAX
Move-XdrAlertToIncident [-AlertIds] <String[]> [[-TargetIncidentId] <Int64>] [[-Comment] <String>]
[-ProgressAction <ActionPreference>] [-WhatIf] [-Confirm] [<CommonParameters>]
DESCRIPTION
Moves one or more alerts to a target incident. If TargetIncidentId is not specified, a new incident is created containing the alerts. Validates that the TargetIncidentId and AlertIds exist before attempting the move.
EXAMPLES
EXAMPLE 1
Move-XdrAlertToIncident -AlertIds "ed638962183442188554_-691007355" -TargetIncidentId 2822
Moves the specified alert to incident 2822.
EXAMPLE 2
Move-XdrAlertToIncident -AlertIds "ed638962183442188554_-691007355"
Moves the specified alert to a new incident.
PARAMETERS
-AlertIds
A list of alert IDs to move.
Type: String[]
Parameter Sets: (All)
Aliases:
Required: True
Position: 1
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False
-TargetIncidentId
The ID of the incident to move the alerts to. If null or omitted, a new incident is created.
Type: Int64
Parameter Sets: (All)
Aliases:
Required: False
Position: 2
Default value: 0
Accept pipeline input: False
Accept wildcard characters: False
-Comment
Optional comment for the operation. Default is "Moved via XDRInternals".
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 3
Default value: Moved via XDRInternals
Accept pipeline input: False
Accept wildcard characters: False
-WhatIf
Shows what would happen if the cmdlet runs.
Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Confirm
Prompts for confirmation before executing the move operation.
Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-ProgressAction
The ProgressAction parameter is a common parameter, not a cmdlet parameter. For more information, see about_CommonParameters.
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.