QueryBasedAlertRuleTemplateProperties interface

Package:

@azure/arm-securityinsight

Query based alert rule template base property bag.

Properties

alertDetailsOverride	The alert details override settings
customDetails	Dictionary of string key-value pairs of columns to be attached to the alert
entityMappings	Array of the entity mappings of the alert rule
eventGroupingSettings	The event grouping settings.
query	The query that creates alerts for this rule.
severity	The severity for alerts created by this alert rule.
version	The version of this template - in format <a.b.c>, where all are numbers. For example <1.0.2>.

Property Details

alertDetailsOverride

The alert details override settings

alertDetailsOverride?: AlertDetailsOverride

Property Value

AlertDetailsOverride

customDetails

Dictionary of string key-value pairs of columns to be attached to the alert

customDetails?: {[propertyName: string]: string}

Property Value

{[propertyName: string]: string}

entityMappings

Array of the entity mappings of the alert rule

entityMappings?: EntityMapping[]

Property Value

EntityMapping[]

eventGroupingSettings

The event grouping settings.

eventGroupingSettings?: EventGroupingSettings

Property Value

EventGroupingSettings

query

The query that creates alerts for this rule.

query?: string

Property Value

string

severity

The severity for alerts created by this alert rule.

severity?: string

Property Value

string

version

The version of this template - in format <a.b.c>, where all are numbers. For example <1.0.2>.

version?: string

Property Value

string