ScheduledAlertRuleCommonProperties Class

Scheduled alert rule template property bag.

Inheritance

Model

ScheduledAlertRuleCommonProperties

Constructor

ScheduledAlertRuleCommonProperties(*, query: Optional[str] = None, query_frequency: Optional[datetime.timedelta] = None, query_period: Optional[datetime.timedelta] = None, severity: Optional[Union[str, azure.mgmt.securityinsight.models._security_insights_enums.AlertSeverity]] = None, trigger_operator: Optional[Union[str, azure.mgmt.securityinsight.models._security_insights_enums.TriggerOperator]] = None, trigger_threshold: Optional[int] = None, event_grouping_settings: Optional[azure.mgmt.securityinsight.models._models_py3.EventGroupingSettings] = None, custom_details: Optional[Dict[str, str]] = None, entity_mappings: Optional[List[azure.mgmt.securityinsight.models._models_py3.EntityMapping]] = None, alert_details_override: Optional[azure.mgmt.securityinsight.models._models_py3.AlertDetailsOverride] = None, **kwargs)

Variables

query

str

The query that creates alerts for this rule.

query_frequency

timedelta

The frequency (in ISO 8601 duration format) for this alert rule to run.

query_period

timedelta

The period (in ISO 8601 duration format) that this alert rule looks at.

severity

str or AlertSeverity

The severity for alerts created by this alert rule. Possible values include: "High", "Medium", "Low", "Informational".

trigger_operator

str or TriggerOperator

The operation against the threshold that triggers alert rule. Possible values include: "GreaterThan", "LessThan", "Equal", "NotEqual".

trigger_threshold

int

The threshold triggers this alert rule.

event_grouping_settings

EventGroupingSettings

The event grouping settings.

custom_details

dict[str, str]

Dictionary of string key-value pairs of columns to be attached to the alert.

entity_mappings

list[EntityMapping]

Array of the entity mappings of the alert rule.

alert_details_override

AlertDetailsOverride

The alert details override settings.