Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Namespace: microsoft.graph.security
Important
APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Contains settings used by the incidentConfiguration property of a detectionAction to control how alerts generated by a custom detection rule are associated with incidents.
Properties
| Property | Type | Description |
|---|---|---|
| isExcludedFromIncidentCorrelation | Boolean | Indicates whether alerts generated by the rule are excluded from automatic incident correlation. When true, each alert creates a standalone, single-alert incident. When false, alerts can be correlated with other related alerts. The default is false. On create, null or omission defaults to false. On update, null or omission leaves the existing value unchanged. |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.incidentConfiguration",
"isExcludedFromIncidentCorrelation": "Boolean"
}