ArmSecurityInsightsModelFactory.SecurityInsightsGroupingConfiguration Method

Definition

Namespace:

Azure.ResourceManager.SecurityInsights.Models

Assembly:

Azure.ResourceManager.SecurityInsights.dll

Package:

Azure.ResourceManager.SecurityInsights v1.2.0-beta.4

Source:

ArmSecurityInsightsModelFactory.cs

public static Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsGroupingConfiguration SecurityInsightsGroupingConfiguration(bool isEnabled = false, bool isClosedIncidentReopened = false, TimeSpan lookbackDuration = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsGroupingMatchingMethod matchingMethod = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertRuleEntityMappingType> groupByEntities = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertDetail> groupByAlertDetails = default, System.Collections.Generic.IEnumerable<string> groupByCustomDetails = default);

static member SecurityInsightsGroupingConfiguration : bool * bool * TimeSpan * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsGroupingMatchingMethod * seq<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertRuleEntityMappingType> * seq<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertDetail> * seq<string> -> Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsGroupingConfiguration

Public Shared Function SecurityInsightsGroupingConfiguration (Optional isEnabled As Boolean = false, Optional isClosedIncidentReopened As Boolean = false, Optional lookbackDuration As TimeSpan = Nothing, Optional matchingMethod As SecurityInsightsGroupingMatchingMethod = Nothing, Optional groupByEntities As IEnumerable(Of SecurityInsightsAlertRuleEntityMappingType) = Nothing, Optional groupByAlertDetails As IEnumerable(Of SecurityInsightsAlertDetail) = Nothing, Optional groupByCustomDetails As IEnumerable(Of String) = Nothing) As SecurityInsightsGroupingConfiguration

Parameters

isEnabled

Boolean

Grouping enabled.

isClosedIncidentReopened

Boolean

Re-open closed matching incidents.

lookbackDuration

TimeSpan

Limit the group to alerts created within the lookback duration (in ISO 8601 duration format).

matchingMethod

SecurityInsightsGroupingMatchingMethod

Grouping matching method. When method is Selected at least one of groupByEntities, groupByAlertDetails, groupByCustomDetails must be provided and not empty.

groupByEntities

IEnumerable<SecurityInsightsAlertRuleEntityMappingType>

A list of entity types to group by (when matchingMethod is Selected). Only entities defined in the current alert rule may be used.

groupByAlertDetails

IEnumerable<SecurityInsightsAlertDetail>

A list of alert details to group by (when matchingMethod is Selected).

groupByCustomDetails

IEnumerable<String>

A list of custom details keys to group by (when matchingMethod is Selected). Only keys defined in the current alert rule may be used.

Returns

SecurityInsightsGroupingConfiguration

A new SecurityInsightsGroupingConfiguration instance for mocking.