{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/microsoft-sentinel/json-schema/microsoft-sentinel-threat-intelligence-metrics-list-schema.json",
  "title": "ThreatIntelligenceMetricsList",
  "description": "List of all the threat intelligence metric fields (type/threat type/source).",
  "x-generated": "2026-11-12",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/microsoft-sentinel-threat-intelligence-api-openapi.yml#/components/schemas/ThreatIntelligenceMetricsList",
  "type": "object",
  "properties": {
    "value": {
      "type": "array",
      "description": "Array of threat intelligence metric fields (type/threat type/source).",
      "items": {
        "$ref": "#/$defs/ThreatIntelligenceMetrics"
      },
      "x-ms-identifiers": []
    }
  },
  "required": [
    "value"
  ],
  "$defs": {
    "ThreatIntelligenceMetric": {
      "type": "object",
      "description": "Describes threat intelligence metric",
      "properties": {
        "lastUpdatedTimeUtc": {
          "type": "string",
          "description": "Last updated indicator metric"
        },
        "threatTypeMetrics": {
          "type": "array",
          "description": "Threat type metrics",
          "items": {
            "$ref": "#/$defs/ThreatIntelligenceMetricEntity"
          },
          "x-ms-identifiers": []
        },
        "patternTypeMetrics": {
          "type": "array",
          "description": "Pattern type metrics",
          "items": {
            "$ref": "#/$defs/ThreatIntelligenceMetricEntity"
          },
          "x-ms-identifiers": []
        },
        "sourceMetrics": {
          "type": "array",
          "description": "Source metrics",
          "items": {
            "$ref": "#/$defs/ThreatIntelligenceMetricEntity"
          },
          "x-ms-identifiers": []
        }
      }
    },
    "ThreatIntelligenceMetricEntity": {
      "type": "object",
      "description": "Describes threat intelligence metric entity",
      "properties": {
        "metricName": {
          "type": "string",
          "description": "Metric name"
        },
        "metricValue": {
          "type": "integer",
          "format": "int32",
          "description": "Metric value"
        }
      }
    },
    "ThreatIntelligenceMetrics": {
      "type": "object",
      "description": "Threat intelligence metrics.",
      "properties": {
        "properties": {
          "$ref": "#/$defs/ThreatIntelligenceMetric",
          "description": "Threat intelligence metrics."
        }
      }
    }
  }
}