pulumi-azure-native-kotlin/com.pulumi.azurenative.securityinsights.kotlin.outputs/GroupingConfigurationResponse

GroupingConfigurationResponse

data class GroupingConfigurationResponse(val enabled: Boolean, val groupByAlertDetails: List<String>? = null, val groupByCustomDetails: List<String>? = null, val groupByEntities: List<String>? = null, val lookbackDuration: String, val matchingMethod: String, val reopenClosedIncident: Boolean)

Grouping configuration property bag.

Constructors

fun GroupingConfigurationResponse(enabled: Boolean, groupByAlertDetails: List<String>? = null, groupByCustomDetails: List<String>? = null, groupByEntities: List<String>? = null, lookbackDuration: String, matchingMethod: String, reopenClosedIncident: Boolean)

Types

Companion

object Companion

Properties

enabled

val enabled: Boolean

Grouping enabled

groupByAlertDetails

val groupByAlertDetails: List<String>? = null

A list of alert details to group by (when matchingMethod is Selected)

groupByCustomDetails

val groupByCustomDetails: List<String>? = null

A list of custom details keys to group by (when matchingMethod is Selected). Only keys defined in the current alert rule may be used.

groupByEntities

val groupByEntities: List<String>? = null

A list of entity types to group by (when matchingMethod is Selected). Only entities defined in the current alert rule may be used.

lookbackDuration

val lookbackDuration: String

Limit the group to alerts created within the lookback duration (in ISO 8601 duration format)

matchingMethod

val matchingMethod: String

Grouping matching method. When method is Selected at least one of groupByEntities, groupByAlertDetails, groupByCustomDetails must be provided and not empty.

reopenClosedIncident

val reopenClosedIncident: Boolean

Re-open closed matching incidents