MicrosoftSecurityIncidentCreationAlertRuleTemplate interface
Represents MicrosoftSecurityIncidentCreation rule template.
- Extends
Properties
| alert |
The number of alert rules that were created by this template |
| created |
The time that this alert rule template has been added. |
| description | The description of the alert rule template. |
| display |
The display name for alert rule template. |
| display |
the alerts' displayNames on which the cases will not be generated |
| display |
the alerts' displayNames on which the cases will be generated |
| kind | The kind of the alert rule |
| last |
The last time that this alert rule template has been updated. |
| product |
The alerts' productName on which the cases will be generated |
| required |
The required data sources for this template |
| severities |
the alerts' severities on which the cases will be generated |
| status | The alert rule template status. |
Inherited Properties
| id | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName} |
| name | The name of the resource |
| system |
Azure Resource Manager metadata containing createdBy and modifiedBy information. |
| type | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts" |
Property Details
alertRulesCreatedByTemplateCount
The number of alert rules that were created by this template
alertRulesCreatedByTemplateCount?: numberProperty Value
number
createdDateUTC
The time that this alert rule template has been added.
createdDateUTC?: DateProperty Value
Date
description
The description of the alert rule template.
description?: stringProperty Value
string
displayName
The display name for alert rule template.
displayName?: stringProperty Value
string
displayNamesExcludeFilter
the alerts' displayNames on which the cases will not be generated
displayNamesExcludeFilter?: string[]Property Value
string[]
displayNamesFilter
the alerts' displayNames on which the cases will be generated
displayNamesFilter?: string[]Property Value
string[]
kind
The kind of the alert rule
kind: "MicrosoftSecurityIncidentCreation"Property Value
"MicrosoftSecurityIncidentCreation"
lastUpdatedDateUTC
The last time that this alert rule template has been updated.
lastUpdatedDateUTC?: DateProperty Value
Date
productFilter
The alerts' productName on which the cases will be generated
productFilter?: stringProperty Value
string
requiredDataConnectors
The required data sources for this template
requiredDataConnectors?: AlertRuleTemplateDataSource[]Property Value
severitiesFilter
the alerts' severities on which the cases will be generated
severitiesFilter?: string[]Property Value
string[]
status
The alert rule template status.
status?: stringProperty Value
string
Inherited Property Details
id
Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
id?: stringProperty Value
string
Inherited From AlertRuleTemplate.id
name
systemData
Azure Resource Manager metadata containing createdBy and modifiedBy information.
systemData?: SystemDataProperty Value
Inherited From AlertRuleTemplate.systemData
type
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
type?: stringProperty Value
string
Inherited From AlertRuleTemplate.type
