From c24550c86089fe0f43e0ed98cd519f00b3db649b Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 11:30:30 -0700
Subject: [PATCH 01/19] Added fileImports.json

---
 .../2022-05-01-preview/FileImports.json       | 554 ++++++++++++++++++
 1 file changed, 554 insertions(+)
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
new file mode 100644
index 000000000000..83ed70b5a7b5
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -0,0 +1,554 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "Security Insights",
+    "description": "API spec for Microsoft.SecurityInsights (Azure Security Insights) resource provider",
+    "version": "2022-05-01-preview"
+  },
+  "host": "management.azure.com",
+  "schemes": [
+    "https"
+  ],
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "security": [
+    {
+      "azure_auth": [
+        "user_impersonation"
+      ]
+    }
+  ],
+  "securityDefinitions": {
+    "azure_auth": {
+      "type": "oauth2",
+      "authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize",
+      "flow": "implicit",
+      "description": "Azure Active Directory OAuth2 Flow",
+      "scopes": {
+        "user_impersonation": "impersonate your user account"
+      }
+    }
+  },
+  "paths": {
+    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/fileImports": {
+      "get": {
+        "x-ms-examples": {
+          "Get all file imports.": {
+            "$ref": "./examples/fileImports/GetFileImports.json"
+          }
+        },
+        "tags": [
+          "FileImports"
+        ],
+        "description": "Gets all file imports.",
+        "operationId": "FileImports_List",
+        "parameters": [
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
+          },
+          {
+            "$ref": "../../../common/2.0/types.json#/parameters/WorkspaceName"
+          },
+          {
+            "$ref": "../../../common/2.0/types.json#/parameters/ODataFilter"
+          },
+          {
+            "$ref": "../../../common/2.0/types.json#/parameters/ODataOrderBy"
+          },
+          {
+            "$ref": "../../../common/2.0/types.json#/parameters/ODataTop"
+          },
+          {
+            "$ref": "../../../common/2.0/types.json#/parameters/ODataSkipToken"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "schema": {
+              "$ref": "#/definitions/FileImportList"
+            }
+          },
+          "default": {
+            "description": "Error response describing why the operation failed.",
+            "schema": {
+              "$ref": "../../../common/2.0/types.json#/definitions/CloudError"
+            }
+          }
+        },
+        "x-ms-pageable": {
+          "nextLinkName": "nextLink"
+        }
+      }
+    },
+    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/fileImports/{fileImportId}": {
+      "get": {
+        "x-ms-examples": {
+          "Get a file import.": {
+            "$ref": "./examples/fileImports/GetFileImportById.json"
+          }
+        },
+        "tags": [
+          "FileImports"
+        ],
+        "description": "Gets a file import.",
+        "operationId": "FileImport_Get",
+        "parameters": [
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
+          },
+          {
+            "$ref": "../../../common/2.0/types.json#/parameters/WorkspaceName"
+          },
+          {
+            "$ref": "#/parameters/FileImportId"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "schema": {
+              "$ref": "#/definitions/FileImport"
+            }
+          },
+          "default": {
+            "description": "Error response describing why the operation failed.",
+            "schema": {
+              "$ref": "../../../common/2.0/types.json#/definitions/CloudError"
+            }
+          }
+        }
+      },
+      "put": {
+        "x-ms-examples": {
+          "Create a file import.": {
+            "$ref": "./examples/fileImports/CreateFileImport.json"
+          }
+        },
+        "tags": [
+          "FileImports"
+        ],
+        "description": "Creates the file import.",
+        "operationId": "FileImport_Create",
+        "parameters": [
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
+          },
+          {
+            "$ref": "../../../common/2.0/types.json#/parameters/WorkspaceName"
+          },
+          {
+            "$ref": "#/parameters/FileImportId"
+          },
+          {
+            "$ref": "#/parameters/FileImport"
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": "Created",
+            "schema": {
+              "$ref": "#/definitions/FileImport"
+            }
+          },
+          "default": {
+            "description": "Error response describing why the operation failed.",
+            "schema": {
+              "$ref": "../../../common/2.0/types.json#/definitions/CloudError"
+            }
+          }
+        }
+      },
+      "delete": {
+        "x-ms-examples": {
+          "Delete a file import.": {
+            "$ref": "./examples/fileImports/DeleteFileImport.json"
+          }
+        },
+        "tags": [
+          "FileImports"
+        ],
+        "description": "Delete the file import.",
+        "operationId": "FileImports_Delete",
+        "parameters": [
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
+          },
+          {
+            "$ref": "../../../common/2.0/types.json#/parameters/WorkspaceName"
+          },
+          {
+            "$ref": "#/parameters/FileImportId"
+          }
+        ],
+        "responses": {
+          "202": {
+            "description": "Accepted"
+          },
+          "204": {
+            "description": "No Content"
+          },
+          "default": {
+            "description": "Error response describing why the operation failed.",
+            "schema": {
+              "$ref": "../../../common/2.0/types.json#/definitions/CloudError"
+            }
+          }
+        }
+      }
+    }
+  },
+  "definitions": {
+    "FileMetadata": {
+      "description": "Represents a file.",
+      "properties": {
+        "fileFormat": {
+          "description": "The format of the file",
+          "enum": [
+            "CSV",
+            "JSON",
+            "Unspecified"
+          ],
+          "type": "string",
+          "x-ms-enum": {
+            "modelAsString": true,
+            "name": "fileFormat",
+            "values": [
+              {
+                "description": "A CSV file.",
+                "value": "CSV"
+              },
+              {
+                "description": "A JSON file.",
+                "value": "JSON"
+              },
+              {
+                "description": "A file of other format.",
+                "value": "Unspecified"
+              }
+            ]
+          }
+        },
+        "fileName": {
+          "description": "The name of the file.",
+          "type": "string"
+        },
+        "fileSize": {
+          "description": "The size of the file.",
+          "format": "int32",
+          "type": "integer"
+        },
+        "fileContentUri": {
+          "description": "A URI with a valid SAS token to allow uploading / downloading the file.",
+          "type": "string"
+        },
+        "deleteStatus": {
+          "description": "Indicates whether the file was deleted from the storge account.",
+          "enum": [
+            "Deleted",
+            "NotDeleted",
+            "Unspecified"
+          ],
+          "type": "string",
+          "x-ms-enum": {
+            "modelAsString": true,
+            "name": "DeleteStatus",
+            "values": [
+              {
+                "description": "The file was deleted.",
+                "value": "Deleted"
+              },
+              {
+                "description": "The file was not deleted.",
+                "value": "NotDeleted"
+              },
+              {
+                "description": "Unspecified",
+                "value": "Unspecified"
+              }
+            ]
+          }
+        }
+      },
+      "type": "object"
+    },
+    "FileImport": {
+      "allOf": [
+        {
+          "$ref": "../../../common/1.0/types.json#/definitions/Resource"
+        }
+      ],
+      "description": "Represents a file import in Azure Security Insights.",
+      "properties": {
+        "properties": {
+          "$ref": "#/definitions/FileImportProperties",
+          "description": "File import properties",
+          "x-ms-client-flatten": true
+        }
+      },
+      "type": "object"
+    },
+    "FileImportList": {
+      "description": "List all the file imports.",
+      "properties": {
+        "nextLink": {
+          "description": "URL to fetch the next set of file imports.",
+          "readOnly": true,
+          "type": "string"
+        },
+        "value": {
+          "description": "Array of file imports.",
+          "items": {
+            "$ref": "#/definitions/FileImport"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object",
+      "required": [
+        "value"
+      ]
+    },
+    "FileImportProperties": {
+      "description": "Describes the FileImport's properties",
+      "properties": {
+        "ingestionMode": {
+          "description": "Describes how to ingest the records in the file.",
+          "enum": [
+            "IngestOnlyIfAllAreValid",
+            "IngestAnyValidRecords",
+            "Unspecified"
+          ],
+          "type": "string",
+          "x-ms-enum": {
+            "modelAsString": true,
+            "name": "IngestionMode",
+            "values": [
+              {
+                "description": "No records should be ingested when invalid records are detected.",
+                "value": "IngestOnlyIfAllAreValid"
+              },
+              {
+                "description": "Valid records should still be ingested when invalid records are detected.",
+                "value": "IngestAnyValidRecords"
+              },
+              {
+                "description": "Unspecified",
+                "value": "Unspecified"
+              }
+            ]
+          }
+        },
+        "contentType": {
+          "description": "The content type of this file.",
+          "enum": [
+            "BasicIndicator",
+            "StixIndicator",
+            "Unspecified"
+          ],
+          "type": "string",
+          "x-ms-enum": {
+            "modelAsString": true,
+            "name": "FileImportContentType",
+            "values": [
+              {
+                "description": "File containing records with the core fields of an indicator, plus the observables to construct the STIX pattern.",
+                "value": "BasicIndicator"
+              },
+              {
+                "description": "File containing STIX indicators.",
+                "value": "StixIndicator"
+              },
+              {
+                "description": "File containing other records.",
+                "value": "Unspecified"
+              }
+            ]
+          }
+        },
+        "createdTimeUTC": {
+          "description": "The time the file was imported.",
+          "format": "date-time",
+          "readOnly": true,
+          "type": "string"
+        },
+        "errorFile": {
+          "description": "Represents the error file (if the import was ingested with errors or failed the validation).",
+          "$ref": "#/definitions/FileMetadata",
+          "readOnly": true,
+          "type": "object"
+        },
+        "errorsPreview": {
+          "description": "An ordered list of some of the errors that were encountered during validation.",
+          "items": {
+            "description": "An error that were encountered during validation.",
+            "$ref": "#/definitions/ValidationError"
+          },
+          "readOnly": true,
+          "type": "array"
+        },
+        "importFile": {
+          "description": "Represents the imported file.",
+          "$ref": "#/definitions/FileMetadata",
+          "readOnly": true,
+          "type": "object"
+        },
+        "ingestedRecordCount": {
+          "description": "The number of records that have been successfully ingested.",
+          "readOnly": true,
+          "type": "integer",
+          "format": "int32"
+        },
+        "source": {
+          "description": "The source for the data in the file.",
+          "type": "string"
+        },
+        "state": {
+          "description": "The state of the file import.",
+          "enum": [
+            "FatalError",
+            "Ingested",
+            "IngestedWithErrors",
+            "InProgress",
+            "Invalid",
+            "WaitingForUpload",
+            "Unspecified"
+          ],
+          "readOnly": true,
+          "type": "string",
+          "x-ms-enum": {
+            "modelAsString": true,
+            "name": "FileImportState",
+            "values": [
+              {
+                "description": "A fatal error has occured while ingesting the file.",
+                "value": "FatalError"
+              },
+              {
+                "description": "The file has been ingested.",
+                "value": "Ingested"
+              },
+              {
+                "description": "The file has been ingested with errors.",
+                "value": "IngestedWithErrors"
+              },
+              {
+                "description": "The file ingestion is in progress.",
+                "value": "InProgress"
+              },
+              {
+                "description": "The file is invalid.",
+                "value": "Invalid"
+              },
+              {
+                "description": "Waiting for the file to be uploaded.",
+                "value": "WaitingForUpload"
+              },
+              {
+                "description": "Unspecified state.",
+                "value": "Unspecified"
+              }
+            ]
+          }
+        },
+        "totalRecordCount": {
+          "description": "The number of records in the file.",
+          "readOnly": true,
+          "type": "integer",
+          "format": "int32"
+        },
+        "validRecordCount": {
+          "description": "The number of records that have passed validation.",
+          "readOnly": true,
+          "type": "integer",
+          "format": "int32"
+        },
+        "filesValidUntilTimeUTC": {
+          "description": "The time the files associated with this import are deleted from the storage account.",
+          "format": "date-time",
+          "readOnly": true,
+          "type": "string"
+        },
+        "importValidUntilTimeUTC": {
+          "description": "The time the file import record is soft deleted from the database and history.",
+          "format": "date-time",
+          "readOnly": true,
+          "type": "string"
+        }
+      },
+      "required": [
+        "ingestionMode",
+        "contentType",
+        "importFile",
+        "source"
+      ],
+      "type": "object"
+    },
+    "ValidationError": {
+      "description": "Describes an error encountered in the file during valiation.",
+      "properties": {
+        "RecordIndex": {
+          "description": "The number of the record that has the error.",
+          "type": "integer",
+          "format": "int32"
+        },
+        "ErrorMessages": {
+          "description": "A list of descriptions of the error.",
+          "items": {
+            "type": "string"
+          },
+          "readOnly": true,
+          "type": "array"
+        }
+      }
+    }
+  },
+  "parameters": {
+    "FileImportId": {
+      "description": "File import ID",
+      "in": "path",
+      "name": "fileImportId",
+      "required": true,
+      "type": "string",
+      "x-ms-parameter-location": "method"
+    },
+    "FileImport": {
+      "description": "The file import",
+      "in": "body",
+      "name": "fileImport",
+      "required": true,
+      "schema": {
+        "$ref": "#/definitions/FileImport"
+      },
+      "x-ms-parameter-location": "method"
+    }
+  }
+}

From 6dede2603d6dfdd940af593797b178390e16ca75 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 13:22:37 -0700
Subject: [PATCH 02/19] add example files

---
 .../fileImports/CreateFileImport.json         | 37 +++++++++++++++++
 .../fileImports/DeleteFileImport.json         | 38 ++++++++++++++++++
 .../fileImports/GetFileImportById.json        | 37 +++++++++++++++++
 .../examples/fileImports/GetFileImports.json  | 40 +++++++++++++++++++
 4 files changed, 152 insertions(+)
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/CreateFileImport.json
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/DeleteFileImport.json
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImportById.json
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImports.json

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/CreateFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/CreateFileImport.json
new file mode 100644
index 000000000000..387c36be5364
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/CreateFileImport.json
@@ -0,0 +1,37 @@
+{
+  "parameters": {
+    "api-version": "2022-05-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
+  },
+  "responses": {
+    "201": {
+      "body": {
+        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "type": "Microsoft.SecurityInsights/FileImports",
+        "properties": {
+          "importFile": {
+            "fileName": "myFile.json",
+            "fileSize": 4653,
+            "fileFormat": "JSON",
+            "fileContentUri": "https://sentinelimportswus2.blob.core.windows.net/78c2e51a-3cd3-4ca0-a2d4-e7effb9a05fe/43967a5e-47a7-474e-afb8-2081e9b99ca1/fileName.json?skoid=40ca3ff4-ed1d-4c65-a409-8c6caff8a6d5&sktid=72f988bf-86f1-41af-91ab-2d7cd011db47&skt=2022-03-25T21%3A12%3A51Z&ske=2022-03-25T22%3A12%3A51Z&sks=b&skv=2020-10-02&sv=2020-08-04&st=2022-03-25T21%3A12%3A51Z&se=2022-03-25T22%3A12%3A51Z&sr=b&sp=c&sig=5n0D%2FERS6ZOQdfdO2adleeSVOM4b6mQeds%2FWYCGm9pU%3D",
+            "deleteStatus": "NotDeleted"
+          },
+          "state": "WaitingForUpload",
+          "contentType": "StixIndicator",
+          "ingestionMode": "IngestAnyValidRecords",
+          "totalRecordCount": null,
+          "validRecordCount": null,
+          "ingestedRecordCount": null,
+          "createdTimeUTC": "2022-04-04T20:05:59.847136Z",
+          "filesValidUntilTimeUTC": "2022-04-05T20:05:59.8471361Z",
+          "importValidUntilTimeUTC": "2022-05-04T20:05:59.8471366Z",
+          "source": "mySource"
+        }
+      }
+    }
+  }
+}
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/DeleteFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/DeleteFileImport.json
new file mode 100644
index 000000000000..e0c81325179f
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/DeleteFileImport.json
@@ -0,0 +1,38 @@
+{
+  "parameters": {
+    "api-version": "2022-05-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
+  },
+  "responses": {
+    "202": {
+      "body": {
+        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "type": "Microsoft.SecurityInsights/FileImports",
+        "properties": {
+          "importFile": {
+            "fileName": "myFile.json",
+            "fileSize": 5146,
+            "fileFormat": "JSON",
+            "fileContentUri": null,
+            "deleteStatus": "NotDeleted"
+          },
+          "state": "Ingested",
+          "contentType": "StixIndicator",
+          "ingestionMode": "IngestAnyValidRecords",
+          "totalRecordCount": 5,
+          "validRecordCount": 5,
+          "ingestedRecordCount": 5,
+          "createdTimeUTC": "2021-12-12T02:45:00",
+          "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
+          "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+          "source": "mySource"
+        }
+      }
+    }
+  },
+  "204": {}
+} }
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImportById.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImportById.json
new file mode 100644
index 000000000000..956d8a9c47f2
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImportById.json
@@ -0,0 +1,37 @@
+{
+  "parameters": {
+    "api-version": "2022-05-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "type": "Microsoft.SecurityInsights/FileImports",
+        "properties": {
+          "importFile": {
+            "fileName": "myFile.json",
+            "fileSize": 5146,
+            "fileFormat": "JSON",
+            "fileContentUri": "https://sentinelimportswus2.blob.core.windows.net/78c2e51a-3cd3-4ca0-a2d4-e7effb9a05fe/43967a5e-47a7-474e-afb8-2081e9b99ca1/myFile.json?skoid=40ca3ff4-ed1d-4c65-a409-8c6caff8a6d5&sktid=72f988bf-86f1-41af-91ab-2d7cd011db47&skt=2022-03-25T21%3A12%3A51Z&ske=2022-03-25T22%3A12%3A51Z&sks=b&skv=2020-10-02&sv=2020-08-04&st=2022-03-25T21%3A12%3A51Z&se=2022-03-25T22%3A12%3A51Z&sr=b&sp=c&sig=5n0D%2FERS6ZOQdfdO2adleeSVOM4b6mQeds%2FWYCGm9pU%3D",
+            "deleteStatus": "NotDeleted"
+          },
+          "state": "Ingested",
+          "contentType": "StixIndicator",
+          "ingestionMode": "IngestAnyValidRecords",
+          "totalRecordCount": 5,
+          "validRecordCount": 5,
+          "ingestedRecordCount": 5,
+          "createdTimeUTC": "2021-12-12T02:45:00",
+          "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
+          "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+          "source": "mySource"
+        }
+      }
+    }
+  }
+} }
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImports.json
new file mode 100644
index 000000000000..811b36c0f66f
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImports.json
@@ -0,0 +1,40 @@
+{
+  "parameters": {
+    "api-version": "2022-05-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "value": [
+          {
+            "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+            "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+            "type": "Microsoft.SecurityInsights/FileImports",
+            "properties": {
+              "importFile": {
+                "fileName": "fileName.json",
+                "fileSize": 5146,
+                "fileFormat": "JSON",
+                "fileContentUri": null,
+                "deleteStatus": "NotDeleted"
+              },
+              "state": "Ingested",
+              "contentType": "StixIndicator",
+              "ingestionMode": "IngestAnyValidRecords",
+              "totalRecordCount": 5,
+              "validRecordCount": 5,
+              "ingestedRecordCount": 5,
+              "createdTimeUTC": "2021-12-12T02:45:00",
+              "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
+              "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+              "source": "mySource"
+            }
+          }
+        ]
+      }
+    }
+  }
+}

From 589f00b816f8f0832b9ca90ac3e87af832bbfc42 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 13:28:20 -0700
Subject: [PATCH 03/19] move example files

---
 .../fileImports/CreateFileImport.json         | 37 +++++++++++++++++
 .../fileImports/DeleteFileImport.json         | 38 ++++++++++++++++++
 .../fileImports/GetFileImportById.json        | 37 +++++++++++++++++
 .../examples/fileImports/GetFileImports.json  | 40 +++++++++++++++++++
 4 files changed, 152 insertions(+)
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/CreateFileImport.json
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
 create mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImports.json

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/CreateFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/CreateFileImport.json
new file mode 100644
index 000000000000..387c36be5364
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/CreateFileImport.json
@@ -0,0 +1,37 @@
+{
+  "parameters": {
+    "api-version": "2022-05-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
+  },
+  "responses": {
+    "201": {
+      "body": {
+        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "type": "Microsoft.SecurityInsights/FileImports",
+        "properties": {
+          "importFile": {
+            "fileName": "myFile.json",
+            "fileSize": 4653,
+            "fileFormat": "JSON",
+            "fileContentUri": "https://sentinelimportswus2.blob.core.windows.net/78c2e51a-3cd3-4ca0-a2d4-e7effb9a05fe/43967a5e-47a7-474e-afb8-2081e9b99ca1/fileName.json?skoid=40ca3ff4-ed1d-4c65-a409-8c6caff8a6d5&sktid=72f988bf-86f1-41af-91ab-2d7cd011db47&skt=2022-03-25T21%3A12%3A51Z&ske=2022-03-25T22%3A12%3A51Z&sks=b&skv=2020-10-02&sv=2020-08-04&st=2022-03-25T21%3A12%3A51Z&se=2022-03-25T22%3A12%3A51Z&sr=b&sp=c&sig=5n0D%2FERS6ZOQdfdO2adleeSVOM4b6mQeds%2FWYCGm9pU%3D",
+            "deleteStatus": "NotDeleted"
+          },
+          "state": "WaitingForUpload",
+          "contentType": "StixIndicator",
+          "ingestionMode": "IngestAnyValidRecords",
+          "totalRecordCount": null,
+          "validRecordCount": null,
+          "ingestedRecordCount": null,
+          "createdTimeUTC": "2022-04-04T20:05:59.847136Z",
+          "filesValidUntilTimeUTC": "2022-04-05T20:05:59.8471361Z",
+          "importValidUntilTimeUTC": "2022-05-04T20:05:59.8471366Z",
+          "source": "mySource"
+        }
+      }
+    }
+  }
+}
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
new file mode 100644
index 000000000000..e0c81325179f
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
@@ -0,0 +1,38 @@
+{
+  "parameters": {
+    "api-version": "2022-05-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
+  },
+  "responses": {
+    "202": {
+      "body": {
+        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "type": "Microsoft.SecurityInsights/FileImports",
+        "properties": {
+          "importFile": {
+            "fileName": "myFile.json",
+            "fileSize": 5146,
+            "fileFormat": "JSON",
+            "fileContentUri": null,
+            "deleteStatus": "NotDeleted"
+          },
+          "state": "Ingested",
+          "contentType": "StixIndicator",
+          "ingestionMode": "IngestAnyValidRecords",
+          "totalRecordCount": 5,
+          "validRecordCount": 5,
+          "ingestedRecordCount": 5,
+          "createdTimeUTC": "2021-12-12T02:45:00",
+          "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
+          "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+          "source": "mySource"
+        }
+      }
+    }
+  },
+  "204": {}
+} }
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
new file mode 100644
index 000000000000..956d8a9c47f2
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
@@ -0,0 +1,37 @@
+{
+  "parameters": {
+    "api-version": "2022-05-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+        "type": "Microsoft.SecurityInsights/FileImports",
+        "properties": {
+          "importFile": {
+            "fileName": "myFile.json",
+            "fileSize": 5146,
+            "fileFormat": "JSON",
+            "fileContentUri": "https://sentinelimportswus2.blob.core.windows.net/78c2e51a-3cd3-4ca0-a2d4-e7effb9a05fe/43967a5e-47a7-474e-afb8-2081e9b99ca1/myFile.json?skoid=40ca3ff4-ed1d-4c65-a409-8c6caff8a6d5&sktid=72f988bf-86f1-41af-91ab-2d7cd011db47&skt=2022-03-25T21%3A12%3A51Z&ske=2022-03-25T22%3A12%3A51Z&sks=b&skv=2020-10-02&sv=2020-08-04&st=2022-03-25T21%3A12%3A51Z&se=2022-03-25T22%3A12%3A51Z&sr=b&sp=c&sig=5n0D%2FERS6ZOQdfdO2adleeSVOM4b6mQeds%2FWYCGm9pU%3D",
+            "deleteStatus": "NotDeleted"
+          },
+          "state": "Ingested",
+          "contentType": "StixIndicator",
+          "ingestionMode": "IngestAnyValidRecords",
+          "totalRecordCount": 5,
+          "validRecordCount": 5,
+          "ingestedRecordCount": 5,
+          "createdTimeUTC": "2021-12-12T02:45:00",
+          "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
+          "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+          "source": "mySource"
+        }
+      }
+    }
+  }
+} }
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImports.json
new file mode 100644
index 000000000000..811b36c0f66f
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImports.json
@@ -0,0 +1,40 @@
+{
+  "parameters": {
+    "api-version": "2022-05-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "value": [
+          {
+            "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+            "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+            "type": "Microsoft.SecurityInsights/FileImports",
+            "properties": {
+              "importFile": {
+                "fileName": "fileName.json",
+                "fileSize": 5146,
+                "fileFormat": "JSON",
+                "fileContentUri": null,
+                "deleteStatus": "NotDeleted"
+              },
+              "state": "Ingested",
+              "contentType": "StixIndicator",
+              "ingestionMode": "IngestAnyValidRecords",
+              "totalRecordCount": 5,
+              "validRecordCount": 5,
+              "ingestedRecordCount": 5,
+              "createdTimeUTC": "2021-12-12T02:45:00",
+              "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
+              "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+              "source": "mySource"
+            }
+          }
+        ]
+      }
+    }
+  }
+}

From 34a6f3979ad9344c89952c61f59f3ddf305f7a23 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 13:37:05 -0700
Subject: [PATCH 04/19] delete old example files

---
 .../fileImports/CreateFileImport.json         | 37 -----------------
 .../fileImports/DeleteFileImport.json         | 38 ------------------
 .../fileImports/GetFileImportById.json        | 37 -----------------
 .../examples/fileImports/GetFileImports.json  | 40 -------------------
 4 files changed, 152 deletions(-)
 delete mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/CreateFileImport.json
 delete mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/DeleteFileImport.json
 delete mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImportById.json
 delete mode 100644 specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImports.json

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/CreateFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/CreateFileImport.json
deleted file mode 100644
index 387c36be5364..000000000000
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/CreateFileImport.json
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-  "parameters": {
-    "api-version": "2022-05-01-preview",
-    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
-    "resourceGroupName": "myRg",
-    "workspaceName": "myWorkspace",
-    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
-  },
-  "responses": {
-    "201": {
-      "body": {
-        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
-        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
-        "type": "Microsoft.SecurityInsights/FileImports",
-        "properties": {
-          "importFile": {
-            "fileName": "myFile.json",
-            "fileSize": 4653,
-            "fileFormat": "JSON",
-            "fileContentUri": "https://sentinelimportswus2.blob.core.windows.net/78c2e51a-3cd3-4ca0-a2d4-e7effb9a05fe/43967a5e-47a7-474e-afb8-2081e9b99ca1/fileName.json?skoid=40ca3ff4-ed1d-4c65-a409-8c6caff8a6d5&sktid=72f988bf-86f1-41af-91ab-2d7cd011db47&skt=2022-03-25T21%3A12%3A51Z&ske=2022-03-25T22%3A12%3A51Z&sks=b&skv=2020-10-02&sv=2020-08-04&st=2022-03-25T21%3A12%3A51Z&se=2022-03-25T22%3A12%3A51Z&sr=b&sp=c&sig=5n0D%2FERS6ZOQdfdO2adleeSVOM4b6mQeds%2FWYCGm9pU%3D",
-            "deleteStatus": "NotDeleted"
-          },
-          "state": "WaitingForUpload",
-          "contentType": "StixIndicator",
-          "ingestionMode": "IngestAnyValidRecords",
-          "totalRecordCount": null,
-          "validRecordCount": null,
-          "ingestedRecordCount": null,
-          "createdTimeUTC": "2022-04-04T20:05:59.847136Z",
-          "filesValidUntilTimeUTC": "2022-04-05T20:05:59.8471361Z",
-          "importValidUntilTimeUTC": "2022-05-04T20:05:59.8471366Z",
-          "source": "mySource"
-        }
-      }
-    }
-  }
-}
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/DeleteFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/DeleteFileImport.json
deleted file mode 100644
index e0c81325179f..000000000000
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/DeleteFileImport.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "parameters": {
-    "api-version": "2022-05-01-preview",
-    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
-    "resourceGroupName": "myRg",
-    "workspaceName": "myWorkspace",
-    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
-  },
-  "responses": {
-    "202": {
-      "body": {
-        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
-        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
-        "type": "Microsoft.SecurityInsights/FileImports",
-        "properties": {
-          "importFile": {
-            "fileName": "myFile.json",
-            "fileSize": 5146,
-            "fileFormat": "JSON",
-            "fileContentUri": null,
-            "deleteStatus": "NotDeleted"
-          },
-          "state": "Ingested",
-          "contentType": "StixIndicator",
-          "ingestionMode": "IngestAnyValidRecords",
-          "totalRecordCount": 5,
-          "validRecordCount": 5,
-          "ingestedRecordCount": 5,
-          "createdTimeUTC": "2021-12-12T02:45:00",
-          "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
-          "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
-          "source": "mySource"
-        }
-      }
-    }
-  },
-  "204": {}
-} }
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImportById.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImportById.json
deleted file mode 100644
index 956d8a9c47f2..000000000000
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImportById.json
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-  "parameters": {
-    "api-version": "2022-05-01-preview",
-    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
-    "resourceGroupName": "myRg",
-    "workspaceName": "myWorkspace",
-    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
-  },
-  "responses": {
-    "200": {
-      "body": {
-        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
-        "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
-        "type": "Microsoft.SecurityInsights/FileImports",
-        "properties": {
-          "importFile": {
-            "fileName": "myFile.json",
-            "fileSize": 5146,
-            "fileFormat": "JSON",
-            "fileContentUri": "https://sentinelimportswus2.blob.core.windows.net/78c2e51a-3cd3-4ca0-a2d4-e7effb9a05fe/43967a5e-47a7-474e-afb8-2081e9b99ca1/myFile.json?skoid=40ca3ff4-ed1d-4c65-a409-8c6caff8a6d5&sktid=72f988bf-86f1-41af-91ab-2d7cd011db47&skt=2022-03-25T21%3A12%3A51Z&ske=2022-03-25T22%3A12%3A51Z&sks=b&skv=2020-10-02&sv=2020-08-04&st=2022-03-25T21%3A12%3A51Z&se=2022-03-25T22%3A12%3A51Z&sr=b&sp=c&sig=5n0D%2FERS6ZOQdfdO2adleeSVOM4b6mQeds%2FWYCGm9pU%3D",
-            "deleteStatus": "NotDeleted"
-          },
-          "state": "Ingested",
-          "contentType": "StixIndicator",
-          "ingestionMode": "IngestAnyValidRecords",
-          "totalRecordCount": 5,
-          "validRecordCount": 5,
-          "ingestedRecordCount": 5,
-          "createdTimeUTC": "2021-12-12T02:45:00",
-          "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
-          "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
-          "source": "mySource"
-        }
-      }
-    }
-  }
-} }
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImports.json
deleted file mode 100644
index 811b36c0f66f..000000000000
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/fileImports/GetFileImports.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-  "parameters": {
-    "api-version": "2022-05-01-preview",
-    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
-    "resourceGroupName": "myRg",
-    "workspaceName": "myWorkspace"
-  },
-  "responses": {
-    "200": {
-      "body": {
-        "value": [
-          {
-            "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
-            "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
-            "type": "Microsoft.SecurityInsights/FileImports",
-            "properties": {
-              "importFile": {
-                "fileName": "fileName.json",
-                "fileSize": 5146,
-                "fileFormat": "JSON",
-                "fileContentUri": null,
-                "deleteStatus": "NotDeleted"
-              },
-              "state": "Ingested",
-              "contentType": "StixIndicator",
-              "ingestionMode": "IngestAnyValidRecords",
-              "totalRecordCount": 5,
-              "validRecordCount": 5,
-              "ingestedRecordCount": 5,
-              "createdTimeUTC": "2021-12-12T02:45:00",
-              "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
-              "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
-              "source": "mySource"
-            }
-          }
-        ]
-      }
-    }
-  }
-}

From 96c45882bfb0f985b062097dfdc6ff02648ca357 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 13:37:58 -0700
Subject: [PATCH 05/19] fix get file import by id example

---
 .../examples/fileImports/GetFileImportById.json                 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
index 956d8a9c47f2..4f7b5c6e679a 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
@@ -34,4 +34,4 @@
       }
     }
   }
-} }
+}

From 5ddc646fc1b3c564a803d91d5ba91fcc3484d910 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 13:38:56 -0700
Subject: [PATCH 06/19] fix delete file import example

---
 .../examples/fileImports/DeleteFileImport.json                  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
index e0c81325179f..a7596ce881e6 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
@@ -35,4 +35,4 @@
     }
   },
   "204": {}
-} }
+}

From 4bbdb32f61b69aff6e40c3d46fd5637971753fe5 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 13:41:44 -0700
Subject: [PATCH 07/19] fix typos

---
 .../preview/2022-05-01-preview/FileImports.json             | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 83ed70b5a7b5..1387dc427514 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -271,7 +271,7 @@
           "type": "string"
         },
         "deleteStatus": {
-          "description": "Indicates whether the file was deleted from the storge account.",
+          "description": "Indicates whether the file was deleted from the storage account.",
           "enum": [
             "Deleted",
             "NotDeleted",
@@ -449,7 +449,7 @@
             "name": "FileImportState",
             "values": [
               {
-                "description": "A fatal error has occured while ingesting the file.",
+                "description": "A fatal error has occurred while ingesting the file.",
                 "value": "FatalError"
               },
               {
@@ -513,7 +513,7 @@
       "type": "object"
     },
     "ValidationError": {
-      "description": "Describes an error encountered in the file during valiation.",
+      "description": "Describes an error encountered in the file during validation.",
       "properties": {
         "RecordIndex": {
           "description": "The number of the record that has the error.",

From 12ab5a091227b95dd79e040ebbac1360def6f4c6 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 13:57:37 -0700
Subject: [PATCH 08/19] resolve issues

---
 .../preview/2022-05-01-preview/FileImports.json           | 8 ++++----
 .../examples/fileImports/DeleteFileImport.json            | 6 +++---
 .../examples/fileImports/GetFileImportById.json           | 6 +++---
 .../examples/fileImports/GetFileImports.json              | 6 +++---
 specification/securityinsights/resource-manager/readme.md | 1 +
 5 files changed, 14 insertions(+), 13 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 1387dc427514..31207600d06d 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -161,9 +161,6 @@
           },
           {
             "$ref": "#/parameters/FileImportId"
-          },
-          {
-            "$ref": "#/parameters/FileImport"
           }
         ],
         "responses": {
@@ -211,7 +208,10 @@
         ],
         "responses": {
           "202": {
-            "description": "Accepted"
+            "description": "Accepted",
+            "schema": {
+              "$ref": "#/definitions/FileImport"
+            }
           },
           "204": {
             "description": "No Content"
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
index a7596ce881e6..83e69fa4a8c6 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
@@ -32,7 +32,7 @@
           "source": "mySource"
         }
       }
-    }
-  },
-  "204": {}
+    },
+    "204": {}
+  }
 }
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
index 4f7b5c6e679a..08b3050b6c95 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImportById.json
@@ -26,9 +26,9 @@
           "totalRecordCount": 5,
           "validRecordCount": 5,
           "ingestedRecordCount": 5,
-          "createdTimeUTC": "2021-12-12T02:45:00",
-          "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
-          "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+          "createdTimeUTC": "2022-03-25T21:02:38.8350631Z",
+          "filesValidUntilTimeUTC": "2022-03-26T21:02:38.8350632Z",
+          "importValidUntilTimeUTC": "2022-04-24T21:02:38.8350636Z",
           "source": "mySource"
         }
       }
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImports.json
index 811b36c0f66f..536d58a3b7bf 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/GetFileImports.json
@@ -27,9 +27,9 @@
               "totalRecordCount": 5,
               "validRecordCount": 5,
               "ingestedRecordCount": 5,
-              "createdTimeUTC": "2021-12-12T02:45:00",
-              "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
-              "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+              "createdTimeUTC": "2022-03-25T21:02:38.8350631Z",
+              "filesValidUntilTimeUTC": "2022-03-26T21:02:38.8350632Z",
+              "importValidUntilTimeUTC": "2022-04-24T21:02:38.8350636Z",
               "source": "mySource"
             }
           }
diff --git a/specification/securityinsights/resource-manager/readme.md b/specification/securityinsights/resource-manager/readme.md
index efb4ce8fbf24..82891f26beb8 100644
--- a/specification/securityinsights/resource-manager/readme.md
+++ b/specification/securityinsights/resource-manager/readme.md
@@ -45,6 +45,7 @@ input-file:
   - Microsoft.SecurityInsights/preview/2022-05-01-preview/Entities.json
   - Microsoft.SecurityInsights/preview/2022-05-01-preview/EntityQueries.json
   - Microsoft.SecurityInsights/preview/2022-05-01-preview/EntityQueryTemplates.json
+  - Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
   - Microsoft.SecurityInsights/preview/2022-05-01-preview/Incidents.json
   - Microsoft.SecurityInsights/preview/2022-05-01-preview/Metadata.json
   - Microsoft.SecurityInsights/preview/2022-05-01-preview/OfficeConsents.json

From 2f2fa30e2508e83e7fac12952aa680ea8fd058a0 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 14:09:22 -0700
Subject: [PATCH 09/19] fix date

---
 .../examples/fileImports/DeleteFileImport.json              | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
index 83e69fa4a8c6..c0d16977161d 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
@@ -26,9 +26,9 @@
           "totalRecordCount": 5,
           "validRecordCount": 5,
           "ingestedRecordCount": 5,
-          "createdTimeUTC": "2021-12-12T02:45:00",
-          "filesValidUntilTimeUTC": "2023-02-25T23:30:34.9634895Z",
-          "importValidUntilTimeUTC": "2023-02-25T23:41:34.9634895Z",
+          "createdTimeUTC": "2022-03-25T21:02:38.8350631Z",
+          "filesValidUntilTimeUTC": "2022-03-26T21:02:38.8350632Z",
+          "importValidUntilTimeUTC": "2022-04-24T21:02:38.8350636Z",
           "source": "mySource"
         }
       }

From 2e6a7992a0cacb9f693c0e84918c89417d62b2f1 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 14:51:16 -0700
Subject: [PATCH 10/19] more issue resolving

---
 .../preview/2022-05-01-preview/FileImports.json        | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 31207600d06d..9421863f888c 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -216,12 +216,14 @@
           "204": {
             "description": "No Content"
           },
+          "200": {},
           "default": {
             "description": "Error response describing why the operation failed.",
             "schema": {
               "$ref": "../../../common/2.0/types.json#/definitions/CloudError"
             }
-          }
+          },
+          "x-ms-long-running-operation": true
         }
       }
     }
@@ -413,7 +415,8 @@
             "$ref": "#/definitions/ValidationError"
           },
           "readOnly": true,
-          "type": "array"
+          "type": "array",
+          "x-ms-identifiers": []
         },
         "importFile": {
           "description": "Represents the imported file.",
@@ -528,7 +531,8 @@
           "readOnly": true,
           "type": "array"
         }
-      }
+      },
+      "type": "object"
     }
   },
   "parameters": {

From 90f0268309801b807a3b9290245e1f5a224c9716 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 15:10:34 -0700
Subject: [PATCH 11/19] .

---
 .../preview/2022-05-01-preview/FileImports.json                  | 1 -
 1 file changed, 1 deletion(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 9421863f888c..87662ea18eac 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -216,7 +216,6 @@
           "204": {
             "description": "No Content"
           },
-          "200": {},
           "default": {
             "description": "Error response describing why the operation failed.",
             "schema": {

From 2efdb7ed4cd38bc461a1fa50ade32c2c0877a4a3 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 16:11:22 -0700
Subject: [PATCH 12/19] .

---
 .../preview/2022-05-01-preview/FileImports.json             | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 87662ea18eac..a091ab8cd6f3 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -221,9 +221,9 @@
             "schema": {
               "$ref": "../../../common/2.0/types.json#/definitions/CloudError"
             }
-          },
-          "x-ms-long-running-operation": true
-        }
+          }
+        },
+        "x-ms-long-running-operation": true
       }
     }
   },

From 690081c68836ce7073b1c8f45ee660fe90c68157 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 16:34:32 -0700
Subject: [PATCH 13/19] add location to delete example

---
 .../preview/2022-05-01-preview/FileImports.json                | 1 +
 .../examples/fileImports/DeleteFileImport.json                 | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index a091ab8cd6f3..5eaf33f81b98 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -216,6 +216,7 @@
           "204": {
             "description": "No Content"
           },
+          "200": {},
           "default": {
             "description": "Error response describing why the operation failed.",
             "schema": {
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
index c0d16977161d..ef936605c52e 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
@@ -8,6 +8,9 @@
   },
   "responses": {
     "202": {
+      "headers": {
+        "location": "https://management.azure.com/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5"
+      },
       "body": {
         "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/FileImports/73e01a99-5cd7-4139-a149-9f2736ff2ab5",
         "name": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",

From 226a4d20cdc35a04cbc557be842a1adf1a286a71 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Mon, 4 Apr 2022 16:59:12 -0700
Subject: [PATCH 14/19] support 200

---
 .../preview/2022-05-01-preview/FileImports.json               | 4 +++-
 .../examples/fileImports/DeleteFileImport.json                | 3 ++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 5eaf33f81b98..693ef3c02ec0 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -216,7 +216,9 @@
           "204": {
             "description": "No Content"
           },
-          "200": {},
+          "200": {
+            "description": ""
+          },
           "default": {
             "description": "Error response describing why the operation failed.",
             "schema": {
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
index ef936605c52e..c731e8ce6e34 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/DeleteFileImport.json
@@ -36,6 +36,7 @@
         }
       }
     },
-    "204": {}
+    "204": {},
+    "200": {}
   }
 }

From 400789721bf8cf16a0053058f00dea8022191df7 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Wed, 6 Apr 2022 08:54:45 -0700
Subject: [PATCH 15/19] resolve comments

---
 .../preview/2022-05-01-preview/FileImports.json       | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 693ef3c02ec0..7a41127d030f 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -161,6 +161,9 @@
           },
           {
             "$ref": "#/parameters/FileImportId"
+          },
+          {
+            "$ref": "#/parameters/FileImport"
           }
         ],
         "responses": {
@@ -272,7 +275,8 @@
         },
         "fileContentUri": {
           "description": "A URI with a valid SAS token to allow uploading / downloading the file.",
-          "type": "string"
+          "type": "string",
+          "readonly":  true
         },
         "deleteStatus": {
           "description": "Indicates whether the file was deleted from the storage account.",
@@ -299,7 +303,8 @@
                 "value": "Unspecified"
               }
             ]
-          }
+          },
+          "readonly": true
         }
       },
       "type": "object"
@@ -307,7 +312,7 @@
     "FileImport": {
       "allOf": [
         {
-          "$ref": "../../../common/1.0/types.json#/definitions/Resource"
+          "$ref": "../../../../../common-types/resource-management/v3/types.json#/definitions/Resource"
         }
       ],
       "description": "Represents a file import in Azure Security Insights.",

From dfe64d86af87e7e47cc4b2253f06218b5bd0a5df Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Wed, 6 Apr 2022 09:01:55 -0700
Subject: [PATCH 16/19] update example

---
 .../examples/fileImports/CreateFileImport.json     | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/CreateFileImport.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/CreateFileImport.json
index 387c36be5364..2559e9f6867f 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/CreateFileImport.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/examples/fileImports/CreateFileImport.json
@@ -4,7 +4,19 @@
     "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
     "resourceGroupName": "myRg",
     "workspaceName": "myWorkspace",
-    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5"
+    "fileImportId": "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
+    "fileImport": {
+      "properties": {
+        "source": "mySource",
+        "importFile": {
+          "fileName": "myFile.json",
+          "fileSize": 4653,
+          "fileFormat": "JSON"
+        },
+        "contentType": "StixIndicator",
+        "ingestionMode": "IngestAnyValidRecords"
+      }
+    }
   },
   "responses": {
     "201": {

From 6187999c04ab68477c1ab22e969a705388fc0af2 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Wed, 6 Apr 2022 09:07:05 -0700
Subject: [PATCH 17/19] remove whitespace

---
 .../preview/2022-05-01-preview/FileImports.json                 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 7a41127d030f..1cbe782d9b9b 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -276,7 +276,7 @@
         "fileContentUri": {
           "description": "A URI with a valid SAS token to allow uploading / downloading the file.",
           "type": "string",
-          "readonly":  true
+          "readonly": true
         },
         "deleteStatus": {
           "description": "Indicates whether the file was deleted from the storage account.",

From 368b398c584a751d6bcab91ea2ecb955109a39b9 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Wed, 6 Apr 2022 09:11:42 -0700
Subject: [PATCH 18/19] readonly

---
 .../preview/2022-05-01-preview/FileImports.json               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index 1cbe782d9b9b..b23ba46c88ea 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -276,7 +276,7 @@
         "fileContentUri": {
           "description": "A URI with a valid SAS token to allow uploading / downloading the file.",
           "type": "string",
-          "readonly": true
+          "readOnly": true
         },
         "deleteStatus": {
           "description": "Indicates whether the file was deleted from the storage account.",
@@ -304,7 +304,7 @@
               }
             ]
           },
-          "readonly": true
+          "readOnly": true
         }
       },
       "type": "object"

From 94fa4f1d44c7276397b4732d1f1d9c6b04367334 Mon Sep 17 00:00:00 2001
From: Moran Raz Mizrahi <morazmiz@microsoft.com>
Date: Wed, 6 Apr 2022 09:20:42 -0700
Subject: [PATCH 19/19]  operationId

---
 .../preview/2022-05-01-preview/FileImports.json          | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
index b23ba46c88ea..64f95a3b891f 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-05-01-preview/FileImports.json
@@ -102,7 +102,7 @@
           "FileImports"
         ],
         "description": "Gets a file import.",
-        "operationId": "FileImport_Get",
+        "operationId": "FileImports_Get",
         "parameters": [
           {
             "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
@@ -145,7 +145,7 @@
           "FileImports"
         ],
         "description": "Creates the file import.",
-        "operationId": "FileImport_Create",
+        "operationId": "FileImports_Create",
         "parameters": [
           {
             "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
@@ -428,7 +428,6 @@
         "importFile": {
           "description": "Represents the imported file.",
           "$ref": "#/definitions/FileMetadata",
-          "readOnly": true,
           "type": "object"
         },
         "ingestedRecordCount": {
@@ -525,12 +524,12 @@
     "ValidationError": {
       "description": "Describes an error encountered in the file during validation.",
       "properties": {
-        "RecordIndex": {
+        "recordIndex": {
           "description": "The number of the record that has the error.",
           "type": "integer",
           "format": "int32"
         },
-        "ErrorMessages": {
+        "errorMessages": {
           "description": "A list of descriptions of the error.",
           "items": {
             "type": "string"