ScheduledAlertRuleCommonProperties interface

Scheduled alert rule template property bag.

Properties

alertDetailsOverride

The alert details override settings

customDetails

Dictionary of string key-value pairs of columns to be attached to the alert

entityMappings

Array of the entity mappings of the alert rule

eventGroupingSettings

The event grouping settings.

query

The query that creates alerts for this rule.

queryFrequency

The frequency (in ISO 8601 duration format) for this alert rule to run.

queryPeriod

The period (in ISO 8601 duration format) that this alert rule looks at.

sentinelEntitiesMappings

Array of the sentinel entity mappings of the alert rule

severity

The severity for alerts created by this alert rule.

triggerOperator

The operation against the threshold that triggers alert rule.

triggerThreshold

The threshold triggers this alert rule.

Property Details

alertDetailsOverride

The alert details override settings

alertDetailsOverride?: AlertDetailsOverride

Property Value

customDetails

Dictionary of string key-value pairs of columns to be attached to the alert

customDetails?: Record<string, string>

Property Value

Record<string, string>

entityMappings

Array of the entity mappings of the alert rule

entityMappings?: EntityMapping[]

Property Value

eventGroupingSettings

The event grouping settings.

eventGroupingSettings?: EventGroupingSettings

Property Value

query

The query that creates alerts for this rule.

query?: string

Property Value

string

queryFrequency

The frequency (in ISO 8601 duration format) for this alert rule to run.

queryFrequency?: string

Property Value

string

queryPeriod

The period (in ISO 8601 duration format) that this alert rule looks at.

queryPeriod?: string

Property Value

string

sentinelEntitiesMappings

Array of the sentinel entity mappings of the alert rule

sentinelEntitiesMappings?: SentinelEntityMapping[]

Property Value

severity

The severity for alerts created by this alert rule.

severity?: string

Property Value

string

triggerOperator

The operation against the threshold that triggers alert rule.

triggerOperator?: TriggerOperator

Property Value

triggerThreshold

The threshold triggers this alert rule.

triggerThreshold?: number

Property Value

number