pulumi-azure-native-kotlin/com.pulumi.azurenative.securityinsights.kotlin.inputs/GroupingConfigurationArgs

GroupingConfigurationArgs

data class GroupingConfigurationArgs(val enabled: Output<Boolean>, val groupByAlertDetails: Output<List<Either<String, AlertDetail>>>? = null, val groupByCustomDetails: Output<List<String>>? = null, val groupByEntities: Output<List<Either<String, EntityMappingType>>>? = null, val lookbackDuration: Output<String>, val matchingMethod: Output<Either<String, MatchingMethod>>, val reopenClosedIncident: Output<Boolean>) : ConvertibleToJava<GroupingConfigurationArgs>

Grouping configuration property bag.

Constructors

Link copied to clipboard
fun GroupingConfigurationArgs(enabled: Output<Boolean>, groupByAlertDetails: Output<List<Either<String, AlertDetail>>>? = null, groupByCustomDetails: Output<List<String>>? = null, groupByEntities: Output<List<Either<String, EntityMappingType>>>? = null, lookbackDuration: Output<String>, matchingMethod: Output<Either<String, MatchingMethod>>, reopenClosedIncident: Output<Boolean>)

Functions

Link copied to clipboard
open override fun toJava(): GroupingConfigurationArgs

Properties

Link copied to clipboard
val enabled: Output<Boolean>

Grouping enabled

Link copied to clipboard
val groupByAlertDetails: Output<List<Either<String, AlertDetail>>>? = null

A list of alert details to group by (when matchingMethod is Selected)

Link copied to clipboard
val groupByCustomDetails: Output<List<String>>? = null

A list of custom details keys to group by (when matchingMethod is Selected). Only keys defined in the current alert rule may be used.

Link copied to clipboard
val groupByEntities: Output<List<Either<String, EntityMappingType>>>? = null

A list of entity types to group by (when matchingMethod is Selected). Only entities defined in the current alert rule may be used.

Link copied to clipboard
val lookbackDuration: Output<String>

Limit the group to alerts created within the lookback duration (in ISO 8601 duration format)

Link copied to clipboard
val matchingMethod: Output<Either<String, MatchingMethod>>

Grouping matching method. When method is Selected at least one of groupByEntities, groupByAlertDetails, groupByCustomDetails must be provided and not empty.

Link copied to clipboard
val reopenClosedIncident: Output<Boolean>

Re-open closed matching incidents