MicrosoftSecurityIncidentCreationAlertRuleProperties interface

MicrosoftSecurityIncidentCreation rule property bag.

Extends

Properties

alertRuleTemplateName

The Name of the alert rule template used to create this rule.

description

The description of the alert rule.

displayName

The display name for alerts created by this alert rule.

enabled

Determines whether this alert rule is enabled or disabled.

lastModifiedUtc

The last time that this alert has been modified. NOTE: This property will not be serialized. It can only be populated by the server.

Inherited Properties

displayNamesExcludeFilter

the alerts' displayNames on which the cases will not be generated

displayNamesFilter

the alerts' displayNames on which the cases will be generated

productFilter

The alerts' productName on which the cases will be generated

severitiesFilter

the alerts' severities on which the cases will be generated

Property Details

alertRuleTemplateName

The Name of the alert rule template used to create this rule.

alertRuleTemplateName?: string

Property Value

string

description

The description of the alert rule.

description?: string

Property Value

string

displayName

The display name for alerts created by this alert rule.

displayName: string

Property Value

string

enabled

Determines whether this alert rule is enabled or disabled.

enabled: boolean

Property Value

boolean

lastModifiedUtc

The last time that this alert has been modified. NOTE: This property will not be serialized. It can only be populated by the server.

lastModifiedUtc?: Date

Property Value

Date

Inherited Property Details

displayNamesExcludeFilter

the alerts' displayNames on which the cases will not be generated

displayNamesExcludeFilter?: string[]

Property Value

string[]

Inherited From MicrosoftSecurityIncidentCreationAlertRuleCommonProperties.displayNamesExcludeFilter

displayNamesFilter

the alerts' displayNames on which the cases will be generated

displayNamesFilter?: string[]

Property Value

string[]

Inherited From MicrosoftSecurityIncidentCreationAlertRuleCommonProperties.displayNamesFilter

productFilter

The alerts' productName on which the cases will be generated

productFilter: string

Property Value

string

Inherited From MicrosoftSecurityIncidentCreationAlertRuleCommonProperties.productFilter

severitiesFilter

the alerts' severities on which the cases will be generated

severitiesFilter?: string[]

Property Value

string[]

Inherited From MicrosoftSecurityIncidentCreationAlertRuleCommonProperties.severitiesFilter