AlertRuleLeafCondition Class

An Activity Log Alert rule condition that is met by comparing the field and value of an Activity Log event. This condition must contain 'field' and either 'equals' or 'containsAny'.

ivar field: The name of the Activity Log event's field that this condition will examine. The possible values for this field are (case-insensitive): 'resourceId', 'category', 'caller', 'level', 'operationName', 'resourceGroup', 'resourceProvider', 'status', 'subStatus', 'resourceType', or anything beginning with 'properties'.

vartype field: str

ivar equals: The value of the event's field will be compared to this value (case-insensitive) to determine if the condition is met.

vartype equals: str

ivar contains_any: The value of the event's field will be compared to the values in this array (case-insensitive) to determine if the condition is met.

vartype contains_any: list[str]

Inheritance

Model

AlertRuleLeafCondition

Constructor

AlertRuleLeafCondition(*, field: Optional[str] = None, equals: Optional[str] = None, contains_any: Optional[List[str]] = None, **kwargs)