There is a command group 'az_security_automation rule'. This group of commands could 'creates security automation rule'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_security_automation rule_create'.The syntax is: az security automation-rule create --expected-value
                                   --operator
                                   --property-j-path
                                   --property-type. The 1th example of the child command would be to use it to 'creates security automation rule', the syntax is: az security automation-rule create --expected-value 'High' --operator 'Equals' --property-j-path 'properties.metadata.severity' --property-type 'string'. The parameter '--expected-value' is required. It is used to the expected value.. The parameter '--operator' is required. It is used to a valid comparer operator to use. a case-insensitive comparison will be applied for string propertytype.. The parameter '--property-j-path' is required. It is used to the jpath of the entity model property that should be checked.. The parameter '--property-type' is required. It is used to the data type of the compared operands (string, integer, floating point number or a boolean [true/false]].. 