Microsoft Azure Processes API

swagger: '2.0'
info:
  version: 2020-08-01-preview
  title: Microsoft Azure AccessControlClient AccessConnector Processes API
schemes:
- https
tags:
- name: Processes
paths:
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/features/serviceMap/machines/{machineName}/processes
  : get:
      tags:
      - Processes
      operationId: microsoftAzureMachinesListprocesses
      x-ms-examples:
        SMMachinesListProcessesGet:
          $ref: ./examples/Machines/Processes/SMMachinesListProcessesGet.json
      description: 'Returns a collection of processes on the specified machine matching the specified conditions. The returned collection represents either processes that are active/live during the specified interval  of time (`live=true` and `startTime`/`endTime` are specified) or that are known to have existed at or  some time prior to the specified point in time (`live=false` and `timestamp` is specified).        '
      parameters:
      - $ref: '#/parameters/SubscriptionIdParameter'
      - $ref: '#/parameters/ResourceGroupNameParameter'
      - $ref: '#/parameters/WorkspaceNameParameter'
      - $ref: '#/parameters/ApiVersionParameter'
      - $ref: '#/parameters/MachineNameParameter'
      - name: live
        in: query
        required: false
        type: boolean
        default: true
        description: Specifies whether to return live resources (true) or inventory resources (false). Defaults to **true**. When retrieving live resources, the start time (`startTime`) and end time (`endTime`) of the desired interval should be included. When retrieving inventory resources, an optional timestamp (`timestamp`) parameter can be specified to return the version of each resource closest (not-after) that timestamp.
      - name: startTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the start time of an interval. When not specified the service uses DateTime.UtcNow - 10m
      - name: endTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the end time of an interval. When not specified the service uses DateTime.UtcNow
      - name: timestamp
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying a time instance relative to which to evaluate all process resource. Only applies when `live=false`. When not specified, the service uses DateTime.UtcNow.
      responses:
        '200':
          description: The operation completed successfully.
          schema:
            $ref: '#/definitions/ProcessCollection'
        default:
          description: An error occurred while processing the request. See the error.code parameter to identify the specific error.
          schema:
            $ref: '#/definitions/ErrorResponse'
      x-ms-pageable:
        nextLinkName: nextLink
      summary: Microsoft Azure Get Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Operationalinsights Workspaces Workspacename Features Servicemap Machines Machinename Processes
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/features/serviceMap/machines/{machineName}/processes/{processName}
  : get:
      tags:
      - Processes
      operationId: microsoftAzureProcessesGet
      x-ms-examples:
        SMMachinesProcessesGetGet:
          $ref: ./examples/Machines/Processes/SMMachinesProcessesGetGet.json
      description: Returns the specified process.
      parameters:
      - $ref: '#/parameters/SubscriptionIdParameter'
      - $ref: '#/parameters/ResourceGroupNameParameter'
      - $ref: '#/parameters/WorkspaceNameParameter'
      - $ref: '#/parameters/ApiVersionParameter'
      - $ref: '#/parameters/MachineNameParameter'
      - $ref: '#/parameters/ProcessNameParameter'
      - name: timestamp
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying a time instance relative to which to evaluate a resource. When not specified, the service uses DateTime.UtcNow.
      responses:
        '200':
          description: The operation completed successfully.
          schema:
            $ref: '#/definitions/Process'
        default:
          description: An error occurred while processing the request. See the error.code parameter to identify the specific error.
          schema:
            $ref: '#/definitions/ErrorResponse'
      summary: Microsoft Azure Get Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Operationalinsights Workspaces Workspacename Features Servicemap Machines Machinename Processes Processname
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/features/serviceMap/machines/{machineName}/processes/{processName}/liveness
  : get:
      tags:
      - Processes
      operationId: microsoftAzureProcessesGetliveness
      x-ms-examples:
        SMMachinesProcessesGetLivenessGet:
          $ref: ./examples/Machines/Processes/SMMachinesProcessesGetLivenessGet.json
      description: Obtains the liveness status of the process during the specified time interval.
      parameters:
      - $ref: '#/parameters/SubscriptionIdParameter'
      - $ref: '#/parameters/ResourceGroupNameParameter'
      - $ref: '#/parameters/WorkspaceNameParameter'
      - $ref: '#/parameters/ApiVersionParameter'
      - $ref: '#/parameters/MachineNameParameter'
      - $ref: '#/parameters/ProcessNameParameter'
      - name: startTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the start time of an interval. When not specified the service uses DateTime.UtcNow - 10m
      - name: endTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the end time of an interval. When not specified the service uses DateTime.UtcNow
      responses:
        '200':
          description: The operation completed successfully.
          schema:
            $ref: '#/definitions/Liveness'
        default:
          description: An error occurred while processing the request. See the error.code parameter to identify the specific error.
          schema:
            $ref: '#/definitions/ErrorResponse'
      summary: Microsoft Azure Get Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Operationalinsights Workspaces Workspacename Features Servicemap Machines Machinename Processes Processname Liveness
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/features/serviceMap/machines/{machineName}/processes/{processName}/acceptingPorts
  : get:
      tags:
      - Processes
      operationId: microsoftAzureProcessesListacceptingports
      x-ms-examples:
        SMMachinesProcessesListAcceptingPortsGet:
          $ref: ./examples/Machines/Processes/SMMachinesProcessesListAcceptingPortsGet.json
      description: Returns a collection of ports on which this process is accepting
      parameters:
      - $ref: '#/parameters/SubscriptionIdParameter'
      - $ref: '#/parameters/ResourceGroupNameParameter'
      - $ref: '#/parameters/WorkspaceNameParameter'
      - $ref: '#/parameters/ApiVersionParameter'
      - $ref: '#/parameters/MachineNameParameter'
      - $ref: '#/parameters/ProcessNameParameter'
      - name: startTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the start time of an interval. When not specified the service uses DateTime.UtcNow - 10m
      - name: endTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the end time of an interval. When not specified the service uses DateTime.UtcNow
      responses:
        '200':
          description: The operation completed successfully.
          schema:
            $ref: '#/definitions/PortCollection'
        default:
          description: An error occurred while processing the request. See the error.code parameter to identify the specific error.
          schema:
            $ref: '#/definitions/ErrorResponse'
      x-ms-pageable:
        nextLinkName: nextLink
      summary: Microsoft Azure Get Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Operationalinsights Workspaces Workspacename Features Servicemap Machines Machinename Processes Processname Acceptingports
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/features/serviceMap/machines/{machineName}/processes/{processName}/connections
  : get:
      tags:
      - Processes
      operationId: microsoftAzureProcessesListconnections
      x-ms-examples:
        SMMachinesProcessesListConnectionsGet:
          $ref: ./examples/Machines/Processes/SMMachinesProcessesListConnectionsGet.json
      description: Returns a collection of connections terminating or originating at the specified process
      parameters:
      - $ref: '#/parameters/SubscriptionIdParameter'
      - $ref: '#/parameters/ResourceGroupNameParameter'
      - $ref: '#/parameters/WorkspaceNameParameter'
      - $ref: '#/parameters/ApiVersionParameter'
      - $ref: '#/parameters/MachineNameParameter'
      - $ref: '#/parameters/ProcessNameParameter'
      - name: startTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the start time of an interval. When not specified the service uses DateTime.UtcNow - 10m
      - name: endTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the end time of an interval. When not specified the service uses DateTime.UtcNow
      responses:
        '200':
          description: The operation completed successfully.
          schema:
            $ref: '#/definitions/ConnectionCollection'
        default:
          description: An error occurred while processing the request. See the error.code parameter to identify the specific error.
          schema:
            $ref: '#/definitions/ErrorResponse'
      x-ms-pageable:
        nextLinkName: nextLink
      summary: Microsoft Azure Get Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Operationalinsights Workspaces Workspacename Features Servicemap Machines Machinename Processes Processname Connections
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/features/serviceMap/machines/{machineName}/ports/{portName}/acceptingProcesses
  : get:
      tags:
      - Processes
      operationId: microsoftAzurePortsListacceptingprocesses
      x-ms-examples:
        SMMachinesPortsListAcceptingProcessesGet:
          $ref: ./examples/Machines/Ports/SMMachinesPortsListAcceptingProcessesGet.json
      description: Returns a collection of processes accepting on the specified port
      parameters:
      - $ref: '#/parameters/SubscriptionIdParameter'
      - $ref: '#/parameters/ResourceGroupNameParameter'
      - $ref: '#/parameters/WorkspaceNameParameter'
      - $ref: '#/parameters/ApiVersionParameter'
      - $ref: '#/parameters/MachineNameParameter'
      - $ref: '#/parameters/PortNameParameter'
      - name: startTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the start time of an interval. When not specified the service uses DateTime.UtcNow - 10m
      - name: endTime
        in: query
        required: false
        type: string
        format: date-time
        description: UTC date and time specifying the end time of an interval. When not specified the service uses DateTime.UtcNow
      responses:
        '200':
          description: The operation completed successfully.
          schema:
            $ref: '#/definitions/ProcessCollection'
        default:
          description: An error occurred while processing the request. See the error.code parameter to identify the specific error.
          schema:
            $ref: '#/definitions/ErrorResponse'
      x-ms-pageable:
        nextLinkName: nextLink
      summary: Microsoft Azure Get Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Operationalinsights Workspaces Workspacename Features Servicemap Machines Machinename Ports Portname Acceptingprocesses
definitions:
  ConnectionCollection:
    type: object
    description: Collection of Connection resources.
    properties:
      value:
        type: array
        items:
          $ref: '#/definitions/Connection'
        description: Collection of Connection resources.
      nextLink:
        type: string
        description: The URL to the next set of resources.
  Resource:
    description: Resource model definition.
    properties:
      id:
        type: string
        description: Resource identifier.
        readOnly: true
      type:
        type: string
        description: Resource type.
        readOnly: true
      name:
        type: string
        description: Resource name.
        readOnly: true
    x-ms-azure-resource: true
  Relationship:
    description: A typed relationship between two entities.
    allOf:
    - $ref: '#/definitions/Resource'
    discriminator: kind
    properties:
      kind:
        type: string
        description: Additional resource type qualifier.
        enum:
        - rel:connection
        - rel:acceptor
    required:
    - kind
  MachineReference:
    description: Reference to a machine.
    allOf:
    - $ref: '#/definitions/ResourceReference'
    x-ms-discriminator-value: ref:machine
  ProcessDetails:
    description: Describes process metadata.
    properties:
      persistentKey:
        type: string
        description: A unique identifier for a process, generally resilient to process restart, computed by Service Map.
      poolId:
        type: integer
        format: int32
        description: Represents the identity of the process pool assigned to the process by Dependency Agent.
      firstPid:
        type: integer
        format: int32
        description: The Operating System Process Identifier (PID) of the first process in this process pool.
      description:
        type: string
        description: Process description.
      companyName:
        type: string
        description: Name of company that created the process executable.
      internalName:
        type: string
        description: Internal process name.
      productName:
        type: string
        description: Product name.
      productVersion:
        type: string
        description: Product version.
      fileVersion:
        type: string
        description: File version.
      commandLine:
        type: string
        description: Process command line.
      executablePath:
        type: string
        description: Process executable path.
      workingDirectory:
        type: string
        description: Process workingDirectory.
      services:
        type: array
        items:
          $ref: '#/definitions/ProcessHostedService'
        x-ms-identifiers: []
        description: Collection of services hosted by this Process (Windows only).
      zoneName:
        type: string
        description: Process zone name (Linux only).
  Connection:
    description: A network connection.
    allOf:
    - $ref: '#/definitions/Relationship'
    x-ms-discriminator-value: rel:connection
    properties:
      properties:
        x-ms-client-flatten: true
        $ref: '#/definitions/ConnectionProperties'
  ConnectionFailureState:
    description: "Connection failure state:\n * ```ok``` indicates no failures\n * ```failed``` indicates only failures\n * ```mixed``` indicates both failures and successes"
    type: string
    enum:
    - ok
    - failed
    - mixed
    x-ms-enum:
      name: ConnectionFailureState
      modelAsString: false
  Port:
    description: A port resource represents a server port on a machine. The port may be actively *monitored*, i.e., a Dependency Agent is running on its machine, or *discovered*, i.e., its existence was inferred by observing the data stream from monitored machines. A port is live during an interval of time, if that port had associated activity during (parts) of that interval.
    allOf:
    - $ref: '#/definitions/CoreResource'
    x-ms-discriminator-value: port
    properties:
      properties:
        x-ms-client-flatten: true
        type: object
        description: Resource properties.
        properties:
          monitoringState:
            $ref: '#/definitions/MonitoringState'
            description: Specifies whether the port is actively monitored or discovered.
          machine:
            $ref: '#/definitions/ResourceReference'
            description: Machine hosting this port.
          displayName:
            type: string
            description: Name to use for display purposes.
          ipAddress:
            type: string
            description: IP address associated with the port. At present only IPv4 addresses are supported.
          portNumber:
            type: integer
            format: int32
            description: Port number.
  ProcessHostingConfiguration:
    description: Describes the hosting configuration of a process.
    discriminator: kind
    properties:
      provider:
        type: string
        description: The hosting provider of the VM.
        enum:
        - azure
      kind:
        type: string
        description: Additional hosting configuration type qualifier.
        enum:
        - provider:azure
    required:
    - kind
  ProcessUser:
    description: Describes the user under which a process is running.
    properties:
      userName:
        type: string
        description: User name under which the process is running.
      userDomain:
        type: string
        description: Domain name for the user.
  Liveness:
    description: Specifies the contents of a check liveness response.
    type: object
    properties:
      startTime:
        type: string
        format: date-time
        description: Liveness interval start time.
      endTime:
        type: string
        format: date-time
        description: Liveness interval end time.
      live:
        type: boolean
        description: '`true` if the resource is live during [startTime, endTime], `false` otherwise'
    required:
    - startTime
    - endTime
    - live
  Process:
    description: A process resource represents a process running on a machine. The process may be actively *monitored*, i.e., a Dependency Agent is running on its machine, or *discovered*, i.e., its existence was inferred by observing the data stream from monitored machines. A process resource represents a pool of actual operating system resources that share command lines and metadata. As the process pool evolves over time, prior versions of the process resource are preserved and available for access. A process is live during an interval of time, if that process is executing during (parts) of that interval
    allOf:
    - $ref: '#/definitions/CoreResource'
    x-ms-discriminator-value: process
    properties:
      properties:
        x-ms-client-flatten: true
        type: object
        description: Resource properties.
        properties:
          timestamp:
            type: string
            format: date-time
            description: UTC date and time when this process resource was updated in the system
          monitoringState:
            $ref: '#/definitions/MonitoringState'
            description: Specifies whether the process is actively monitored or discovered.
          machine:
            $ref: '#/definitions/ResourceReference'
            description: Machine hosting this process.
          executableName:
            type: string
            description: The name of the process executable
          displayName:
            type: string
            description: Name to use for display purposes
          startTime:
            type: string
            format: date-time
            description: UTC date and time when the process started
          role:
            type: string
            enum:
            - webServer
            - appServer
            - databaseServer
            - ldapServer
            - smbServer
            x-ms-enum:
              name: ProcessRole
              modelAsString: true
            description: The inferred role of this process based on its name, command line, etc.
          group:
            type: string
            description: The name of the product or suite of the process. The group is determined by its executable name, command line, etc.
          details:
            $ref: '#/definitions/ProcessDetails'
            description: Process metadata (command line, product name, etc.).
          user:
            $ref: '#/definitions/ProcessUser'
            description: Information about the account under which the process is executing.
          clientOf:
            $ref: '#/definitions/ResourceReference'
            description: Present only for a discovered process acting as a client of a monitored process/machine/port. References the monitored process/machine/port that this process is a client of.
          acceptorOf:
            $ref: '#/definitions/ResourceReference'
            description: Present only for a discovered process acting as a server. References the port on which the discovered process is accepting.
          hosting:
            $ref: '#/definitions/ProcessHostingConfiguration'
            description: Information about the hosting environment
  PortReference:
    description: Reference to a port.
    allOf:
    - $ref: '#/definitions/ResourceReference'
    x-ms-discriminator-value: ref:port
    properties:
      properties:
        x-ms-client-flatten: true
        type: object
        description: Resource properties.
        properties:
          machine:
            $ref: '#/definitions/MachineReference'
            description: Machine hosting the port.
            readOnly: true
          ipAddress:
            type: string
            description: IP address of the port.
            readOnly: true
          portNumber:
            type: integer
            format: int32
            description: Port number.
  PortCollection:
    type: object
    description: Collection of Port resources.
    properties:
      value:
        type: array
        items:
          $ref: '#/definitions/Port'
        description: Collection of Port resources.
      nextLink:
        type: string
        description: The URL to the next set of resources.
  Error:
    type: object
    description: Error details.
    properties:
      code:
        type: string
        description: Error code identifying the specific error.
      message:
        type: string
        description: Error message in the caller's locale.
    required:
    - code
  ResourceReference:
    description: Represents a reference to another resource.
    discriminator: kind
    properties:
      id:
        type: string
        description: Resource URI.
      type:
        type: string
        description: Resource type qualifier.
        readOnly: true
      name:
        type: string
        description: Resource name.
        readOnly: true
      kind:
        type: string
        description: Specifies the sub-class of the reference.
        enum:
        - ref:machine
        - ref:machinewithhints
        - ref:process
        - ref:port
        - ref:onmachine
        - ref:clientgroup
    required:
    - id
    - kind
  ErrorResponse:
    type: object
    description: An error response from the API.
    properties:
      error:
        $ref: '#/definitions/Error'
        description: Error information.
    required:
    - error
  ProcessCollection:
    type: object
    description: Collection of Process resources.
    properties:
      value:
        type: array
        items:
          $ref: '#/definitions/Process'
        description: Collection of Process resources.
      nextLink:
        type: string
        description: The URL to the next set of resources.
  CoreResource:
    description: Marker resource for the core Service Map resources
    allOf:
    - $ref: '#/definitions/Resource'
    discriminator: kind
    properties:
      etag:
        type: string
        description: Resource ETAG.
      kind:
        type: string
        description: Additional resource type qualifier.
        enum:
        - machine
        - process
        - port
        - clientGroup
        - machineGroup
    required:
    - kind
  ProcessHostedService:
    description: A service hosted by a process.
    properties:
      name:
        type: string
        description: The name of the service.
      displayName:
        type: string
        description: The service's display name.
  MonitoringState:
    description: Used to specify if a resources is monitored or discovered.
    type: string
    enum:
    - monitored
    - discovered
    x-ms-enum:
      name: MonitoringState
      modelAsString: false
  RelationshipProperties:
    description: Relationship properties.
    properties:
      source:
        $ref: '#/definitions/ResourceReference'
        description: Source resource of the relationship.
      destination:
        $ref: '#/definitions/ResourceReference'
        description: Destination resource of the relationship.
      startTime:
        type: string
        format: date-time
        description: Relationship start time.
      endTime:
        type: string
        format: date-time
        description: Relationship end time.
    required:
    - source
    - destination
  ConnectionProperties:
    description: Properties for a connection resource.
    allOf:
    - $ref: '#/definitions/RelationshipProperties'
    properties:
      serverPort:
        $ref: '#/definitions/PortReference'
        description: Reference to the server port via which this connection has been established.
      failureState:
        $ref: '#/definitions/ConnectionFailureState'
        description: Specifies whether there are only successful, failed or a mixture of both connections represented by this resource.
parameters:
  ApiVersionParameter:
    name: api-version
    in: query
    required: true
    type: string
    description: API version.
  ResourceGroupNameParameter:
    name: resourceGroupName
    in: path
    x-ms-parameter-location: method
    required: true
    type: string
    description: Resource group name within the specified subscriptionId.
    maxLength: 64
    minLength: 1
    pattern: '[a-zA-Z0-9_-]+'
  MachineNameParameter:
    name: machineName
    in: path
    x-ms-parameter-location: method
    required: true
    type: string
    description: Machine resource name.
    minLength: 3
    maxLength: 64
  SubscriptionIdParameter:
    name: subscriptionId
    in: path
    required: true
    type: string
    description: Azure subscription identifier.
  ProcessNameParameter:
    name: processName
    in: path
    x-ms-parameter-location: method
    required: true
    type: string
    description: Process resource name.
    minLength: 3
    maxLength: 128
  WorkspaceNameParameter:
    name: workspaceName
    in: path
    x-ms-parameter-location: method
    required: true
    type: string
    description: OMS workspace containing the resources of interest.
    minLength: 3
    maxLength: 63
    pattern: '[a-zA-Z0-9_][a-zA-Z0-9_-]+[a-zA-Z0-9_]'
  PortNameParameter:
    name: portName
    in: path
    x-ms-parameter-location: method
    required: true
    type: string
    description: Port resource name.
    minLength: 3
    maxLength: 64
x-ms-parameterized-host:
  hostTemplate: '{endpoint}'
  useSchemePrefix: false
  parameters:
  - $ref: '#/parameters/Endpoint'