Alert Rules
Link to resource definition: Microsoft.SecurityInsights/alertRules
| Default Path | Alias |
|---|---|
properties.alertRuleTemplateName |
Microsoft.SecurityInsights/alertRules/Scheduled.alertRuleTemplateName |
properties.description |
Microsoft.SecurityInsights/alertRules/Scheduled.description |
properties.displayName |
Microsoft.SecurityInsights/alertRules/Scheduled.displayName |
properties.displayNamesExcludeFilter |
Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.displayNamesExcludeFilter |
properties.displayNamesExcludeFilter[*] |
Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.displayNamesExcludeFilter[*] |
properties.displayNamesFilter |
Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.displayNamesFilter |
properties.displayNamesFilter[*] |
Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.displayNamesFilter[*] |
properties.enabled |
Microsoft.SecurityInsights/alertRules/Scheduled.enabled |
properties.eventGroupingSettings |
Microsoft.SecurityInsights/alertRules/Scheduled.eventGroupingSettings |
properties.eventGroupingSettings.aggregationKind |
Microsoft.SecurityInsights/alertRules/Scheduled.eventGroupingSettings.aggregationKind |
properties.incidentConfiguration |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration |
properties.incidentConfiguration.createIncident |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.createIncident |
properties.incidentConfiguration.groupingConfiguration |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration |
properties.incidentConfiguration.groupingConfiguration.enabled |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.enabled |
properties.incidentConfiguration.groupingConfiguration.entitiesMatchingMethod |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.entitiesMatchingMethod |
properties.incidentConfiguration.groupingConfiguration.groupByEntities |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.groupByEntities |
properties.incidentConfiguration.groupingConfiguration.groupByEntities[*] |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.groupByEntities[*] |
properties.incidentConfiguration.groupingConfiguration.lookbackDuration |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.lookbackDuration |
properties.incidentConfiguration.groupingConfiguration.reopenClosedIncident |
Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.reopenClosedIncident |
properties.lastModifiedUtc |
Microsoft.SecurityInsights/alertRules/Scheduled.lastModifiedUtc |
properties.productFilter |
Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.productFilter |
properties.query |
Microsoft.SecurityInsights/alertRules/Scheduled.query |
properties.queryFrequency |
Microsoft.SecurityInsights/alertRules/Scheduled.queryFrequency |
properties.queryPeriod |
Microsoft.SecurityInsights/alertRules/Scheduled.queryPeriod |
properties.severitiesFilter |
Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.severitiesFilter |
properties.severitiesFilter[*] |
Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.severitiesFilter[*] |
properties.severity |
Microsoft.SecurityInsights/alertRules/Scheduled.severity |
properties.suppressionDuration |
Microsoft.SecurityInsights/alertRules/Scheduled.suppressionDuration |
properties.suppressionEnabled |
Microsoft.SecurityInsights/alertRules/Scheduled.suppressionEnabled |
properties.tactics |
Microsoft.SecurityInsights/alertRules/Scheduled.tactics |
properties.tactics[*] |
Microsoft.SecurityInsights/alertRules/Scheduled.tactics[*] |
properties.triggerOperator |
Microsoft.SecurityInsights/alertRules/Scheduled.triggerOperator |
properties.triggerThreshold |
Microsoft.SecurityInsights/alertRules/Scheduled.triggerThreshold |