diff --git a/specification/security/resource-manager/Microsoft.Security/preview/2023-12-01-preview/automations.json b/specification/security/resource-manager/Microsoft.Security/preview/2023-12-01-preview/automations.json index 6bd5beeeb0d9..24ed13d90d53 100644 --- a/specification/security/resource-manager/Microsoft.Security/preview/2023-12-01-preview/automations.json +++ b/specification/security/resource-manager/Microsoft.Security/preview/2023-12-01-preview/automations.json @@ -612,7 +612,7 @@ }, "AutomationActionWorkspace": { "type": "object", - "description": "The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore", + "description": "The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore", "x-ms-discriminator-value": "Workspace", "allOf": [ {