text: # coding=utf-8
  # *** WARNING: this file was generated by the Pulumi SDK Generator. ***
  # *** Do not edit by hand unless you're certain you know what you are doing! ***
  
  import warnings
  import pulumi
  import pulumi.runtime
  from typing import Any, Mapping, Optional, Sequence, Union, overload
  from ... import _utilities
  from . import outputs
  
  __all__ = [
      'GetUebaResult',
      'AwaitableGetUebaResult',
      'get_ueba',
  ]
  
  @pulumi.output_type
  class GetUebaResult:
      """
      Settings with single toggle.
      """
      def __init__(__self__, data_sources=None, etag=None, id=None, kind=None, name=None, system_data=None, type=None):
          if data_sources and not isinstance(data_sources, list):
              raise TypeError("Expected argument 'data_sources' to be a list")
          pulumi.set(__self__, "data_sources", data_sources)
          if etag and not isinstance(etag, str):
              raise TypeError("Expected argument 'etag' to be a str")
          pulumi.set(__self__, "etag", etag)
          if id and not isinstance(id, str):
              raise TypeError("Expected argument 'id' to be a str")
          pulumi.set(__self__, "id", id)
          if kind and not isinstance(kind, str):
              raise TypeError("Expected argument 'kind' to be a str")
          pulumi.set(__self__, "kind", kind)
          if name and not isinstance(name, str):
              raise TypeError("Expected argument 'name' to be a str")
          pulumi.set(__self__, "name", name)
          if system_data and not isinstance(system_data, dict):
              raise TypeError("Expected argument 'system_data' to be a dict")
          pulumi.set(__self__, "system_data", system_data)
          if type and not isinstance(type, str):
              raise TypeError("Expected argument 'type' to be a str")
          pulumi.set(__self__, "type", type)
  
      @property
      @pulumi.getter(name="dataSources")
      def data_sources(self) -> Optional[Sequence[str]]:
          """
          The relevant data sources that enriched by ueba
          """
          return pulumi.get(self, "data_sources")
  
      @property
      @pulumi.getter
      def etag(self) -> Optional[str]:
          """
          Etag of the azure resource
          """
          return pulumi.get(self, "etag")
  
      @property
      @pulumi.getter
      def id(self) -> str:
          """
          Azure resource Id
          """
          return pulumi.get(self, "id")
  
      @property
      @pulumi.getter
      def kind(self) -> str:
          """
          The kind of the setting
          Expected value is 'Ueba'.
          """
          return pulumi.get(self, "kind")
  
      @property
      @pulumi.getter
      def name(self) -> str:
          """
          Azure resource name
          """
          return pulumi.get(self, "name")
  
      @property
      @pulumi.getter(name="systemData")
      def system_data(self) -> 'outputs.SystemDataResponse':
          """
          Azure Resource Manager metadata containing createdBy and modifiedBy information.
          """
          return pulumi.get(self, "system_data")
  
      @property
      @pulumi.getter
      def type(self) -> str:
          """
          Azure resource type
          """
          return pulumi.get(self, "type")
  
  
  class AwaitableGetUebaResult(GetUebaResult):
      # pylint: disable=using-constant-test
      def __await__(self):
          if False:
              yield self
          return GetUebaResult(
              data_sources=self.data_sources,
              etag=self.etag,
              id=self.id,
              kind=self.kind,
              name=self.name,
              system_data=self.system_data,
              type=self.type)
  
  
  def get_ueba(operational_insights_resource_provider: Optional[str] = None,
               resource_group_name: Optional[str] = None,
               settings_name: Optional[str] = None,
               workspace_name: Optional[str] = None,
               opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetUebaResult:
      """
      Settings with single toggle.
  
  
      :param str operational_insights_resource_provider: The namespace of workspaces resource provider- Microsoft.OperationalInsights.
      :param str resource_group_name: The name of the resource group. The name is case insensitive.
      :param str settings_name: The setting name. Supports - Anomalies, EyesOn, EntityAnalytics, Ueba
      :param str workspace_name: The name of the workspace.
      """
      __args__ = dict()
      __args__['operationalInsightsResourceProvider'] = operational_insights_resource_provider
      __args__['resourceGroupName'] = resource_group_name
      __args__['settingsName'] = settings_name
      __args__['workspaceName'] = workspace_name
      if opts is None:
          opts = pulumi.InvokeOptions()
      if opts.version is None:
          opts.version = _utilities.get_version()
      __ret__ = pulumi.runtime.invoke('azure-native:securityinsights/v20210301preview:getUeba', __args__, opts=opts, typ=GetUebaResult).value
  
      return AwaitableGetUebaResult(
          data_sources=__ret__.data_sources,
          etag=__ret__.etag,
          id=__ret__.id,
          kind=__ret__.kind,
          name=__ret__.name,
          system_data=__ret__.system_data,
          type=__ret__.type)
  