IncidentConfiguration Class

Reference

Definition

Namespace:: Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview

Assembly:: Az.SecurityInsights.private.dll

Important

Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Incident Configuration property bag.

[System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IncidentConfigurationTypeConverter))]
public class IncidentConfiguration : Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IIncidentConfiguration

[<System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IncidentConfigurationTypeConverter))>]
type IncidentConfiguration = class
    interface IIncidentConfiguration
    interface IJsonSerializable

Public Class IncidentConfiguration
Implements IIncidentConfiguration

Inheritance: Object
IncidentConfiguration

Attributes: TypeConverterAttribute

Implements: IIncidentConfiguration IJsonSerializable

Constructors

IncidentConfiguration()

Creates an new IncidentConfiguration instance.

Properties

CreateIncident	Create incidents from alerts triggered by this analytics rule
GroupingConfigurationEnabled	Grouping enabled
GroupingConfigurationGroupByAlertDetail	A list of alert details to group by (when matchingMethod is Selected)
GroupingConfigurationGroupByCustomDetail	A list of custom details keys to group by (when matchingMethod is Selected). Only keys defined in the current alert rule may be used.
GroupingConfigurationGroupByEntity	A list of entity types to group by (when matchingMethod is Selected). Only entities defined in the current alert rule may be used.
GroupingConfigurationLookbackDuration	Limit the group to alerts created within the lookback duration (in ISO 8601 duration format)
GroupingConfigurationMatchingMethod	Grouping matching method. When method is Selected at least one of groupByEntities, groupByAlertDetails, groupByCustomDetails must be provided and not empty.
GroupingConfigurationReopenClosedIncident	Re-open closed matching incidents

Methods

DeserializeFromDictionary(IDictionary)	Deserializes a IDictionary into an instance of IncidentConfiguration.
DeserializeFromPSObject(PSObject)	Deserializes a PSObject into an instance of IncidentConfiguration.
FromJson(JsonNode)	Deserializes a JsonNode into an instance of Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IIncidentConfiguration.
FromJsonString(String)	Creates a new instance of IncidentConfiguration, deserializing the content from a json string.
ToJson(JsonObject, SerializationMode)	Serializes this instance of IncidentConfiguration into a JsonNode.
ToJsonString()	Serializes this instance to a json string.

Applies to

Share via