Share via


IGroupingConfiguration Interface

Definition

[System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.GroupingConfigurationTypeConverter))]
public interface IGroupingConfiguration : Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Runtime.IJsonSerializable
[<System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.GroupingConfigurationTypeConverter))>]
type IGroupingConfiguration = interface
    interface IJsonSerializable
Public Interface IGroupingConfiguration
Implements IJsonSerializable
Derived
Attributes
Implements

Properties

Enabled

Grouping enabled

GroupByAlertDetail

A list of alert details to group by (when matchingMethod is Selected)

GroupByCustomDetail

A list of custom details keys to group by (when matchingMethod is Selected). Only keys defined in the current alert rule may be used.

GroupByEntity

A list of entity types to group by (when matchingMethod is Selected). Only entities defined in the current alert rule may be used.

LookbackDuration

Limit the group to alerts created within the lookback duration (in ISO 8601 duration format)

MatchingMethod

Grouping matching method. When method is Selected at least one of groupByEntities, groupByAlertDetails, groupByCustomDetails must be provided and not empty.

ReopenClosedIncident

Re-open closed matching incidents

Methods

ToJson(JsonObject, SerializationMode) (Inherited from IJsonSerializable)

Applies to