# Microsoft Sentinel Alert Rules API

**Canonical:** https://apis.io/apis/microsoft-sentinel/microsoft-sentinel-alert-rules-api/  
**Provider:** Microsoft Sentinel — https://apis.io/providers/microsoft-sentinel/  
**Base URL:** https://management.azure.com/  
**Documentation:** https://learn.microsoft.com/en-us/rest/api/securityinsights/

Microsoft Sentinel Alert Rules API is one of 5 APIs that [Microsoft Sentinel](https://apis.io/providers/microsoft-sentinel/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Alert Rules. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and a getting-started guide.

The Alert Rules API from Microsoft Sentinel — 2 operation(s) for alert rules.

## Operations (4)

| Method | Path | Summary |
|---|---|---|
| GET | `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules` | List alert rules |
| GET | `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}` | Get alert rule |
| PUT | `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}` | Create or update alert rule |
| DELETE | `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/alertRules/{ruleId}` | Delete alert rule |

## Machine-readable artifacts (3)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/microsoft-sentinel/refs/heads/main/openapi/microsoft-sentinel-alert-rules-api-openapi.yml
- **Documentation** — https://learn.microsoft.com/en-us/rest/api/securityinsights/
- **GettingStarted** — https://learn.microsoft.com/en-us/azure/sentinel/quickstart-onboard

## Other Microsoft Sentinel APIs (4)

- [Microsoft Sentinel Bookmarks API](https://apis.io/apis/microsoft-sentinel/microsoft-sentinel-bookmarks-api/)
- [Microsoft Sentinel Incidents API](https://apis.io/apis/microsoft-sentinel/microsoft-sentinel-incidents-api/)
- [Microsoft Sentinel Data Connectors API](https://apis.io/apis/microsoft-sentinel/microsoft-sentinel-data-connectors-api/)
- [Microsoft Sentinel Threat Intelligence API](https://apis.io/apis/microsoft-sentinel/microsoft-sentinel-threat-intelligence-api/)

## Tags

Alert Rules

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/microsoft-sentinel/microsoft-sentinel-alert-rules-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/microsoft-sentinel/.