MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties interface

MicrosoftSecurityIncidentCreation rule template properties

Extends

Properties

displayNamesExcludeFilter

the alerts' displayNames on which the cases will not be generated

displayNamesFilter

the alerts' displayNames on which the cases will be generated

productFilter

The alerts' productName on which the cases will be generated

severitiesFilter

the alerts' severities on which the cases will be generated

Inherited Properties

alertRulesCreatedByTemplateCount

the number of alert rules that were created by this template

createdDateUTC

The time that this alert rule template has been added. NOTE: This property will not be serialized. It can only be populated by the server.

description

The description of the alert rule template.

displayName

The display name for alert rule template.

lastUpdatedDateUTC

The last time that this alert rule template has been updated. NOTE: This property will not be serialized. It can only be populated by the server.

requiredDataConnectors

The required data sources for this template

status

The alert rule template status.

Property Details

displayNamesExcludeFilter

the alerts' displayNames on which the cases will not be generated

displayNamesExcludeFilter?: string[]

Property Value

string[]

displayNamesFilter

the alerts' displayNames on which the cases will be generated

displayNamesFilter?: string[]

Property Value

string[]

productFilter

The alerts' productName on which the cases will be generated

productFilter?: string

Property Value

string

severitiesFilter

the alerts' severities on which the cases will be generated

severitiesFilter?: string[]

Property Value

string[]

Inherited Property Details

alertRulesCreatedByTemplateCount

the number of alert rules that were created by this template

alertRulesCreatedByTemplateCount?: number

Property Value

number

Inherited From AlertRuleTemplatePropertiesBase.alertRulesCreatedByTemplateCount

createdDateUTC

The time that this alert rule template has been added. NOTE: This property will not be serialized. It can only be populated by the server.

createdDateUTC?: Date

Property Value

Date

Inherited From AlertRuleTemplatePropertiesBase.createdDateUTC

description

The description of the alert rule template.

description?: string

Property Value

string

Inherited From AlertRuleTemplatePropertiesBase.description

displayName

The display name for alert rule template.

displayName?: string

Property Value

string

Inherited From AlertRuleTemplatePropertiesBase.displayName

lastUpdatedDateUTC

The last time that this alert rule template has been updated. NOTE: This property will not be serialized. It can only be populated by the server.

lastUpdatedDateUTC?: Date

Property Value

Date

Inherited From AlertRuleTemplatePropertiesBase.lastUpdatedDateUTC

requiredDataConnectors

The required data sources for this template

requiredDataConnectors?: AlertRuleTemplateDataSource[]

Property Value

Inherited From AlertRuleTemplatePropertiesBase.requiredDataConnectors

status

The alert rule template status.

status?: string

Property Value

string

Inherited From AlertRuleTemplatePropertiesBase.status