ExpansionResultAggregation Class

Information of a specific aggregation in the expansion result.

All required parameters must be populated in order to send to Azure.

Inheritance
ExpansionResultAggregation

Constructor

ExpansionResultAggregation(*, count: int, entity_kind: Union[str, azure.mgmt.securityinsight.models._security_insights_enums.EntityKind], aggregation_type: Optional[str] = None, display_name: Optional[str] = None, **kwargs)

Variables

aggregation_type
str

The common type of the aggregation. (for e.g. entity field name).

count
int

Required. Total number of aggregations of the given kind (and aggregationType if given) in the expansion result.

display_name
str

The display name of the aggregation by type.

entity_kind
str or EntityKind

Required. The kind of the aggregated entity. Possible values include: "Account", "Host", "File", "AzureResource", "CloudApplication", "DnsResolution", "FileHash", "Ip", "Malware", "Process", "RegistryKey", "RegistryValue", "SecurityGroup", "Url", "IoTDevice", "SecurityAlert", "Bookmark", "MailCluster", "MailMessage", "Mailbox", "SubmissionMail".