QueryBasedAlertRuleTemplateProperties Class

Query based alert rule template base property bag.

Inheritance

Model

QueryBasedAlertRuleTemplateProperties

Constructor

QueryBasedAlertRuleTemplateProperties(*, query: Optional[str] = None, severity: Optional[Union[str, azure.mgmt.securityinsight.models._security_insights_enums.AlertSeverity]] = None, version: Optional[str] = None, custom_details: Optional[Dict[str, str]] = None, entity_mappings: Optional[List[azure.mgmt.securityinsight.models._models_py3.EntityMapping]] = None, alert_details_override: Optional[azure.mgmt.securityinsight.models._models_py3.AlertDetailsOverride] = None, **kwargs)

Variables

query

str

The query that creates alerts for this rule.

severity

str or AlertSeverity

The severity for alerts created by this alert rule. Possible values include: "High", "Medium", "Low", "Informational".

version

str

The version of this template - in format <a.b.c>, where all are numbers. For example <1.0.2>.

custom_details

dict[str, str]

Dictionary of string key-value pairs of columns to be attached to the alert.

entity_mappings

list[EntityMapping]

Array of the entity mappings of the alert rule.

alert_details_override

AlertDetailsOverride

The alert details override settings.