pulumi-azure-kotlin/com.pulumi.azure.sentinel.kotlin.outputs/AutomationRuleActionIncident

AutomationRuleActionIncident

data class AutomationRuleActionIncident(val classification: String? = null, val classificationComment: String? = null, val labels: List<String>? = null, val order: Int, val ownerId: String? = null, val severity: String? = null, val status: String? = null)

Constructors

Link copied to clipboard
constructor(classification: String? = null, classificationComment: String? = null, labels: List<String>? = null, order: Int, ownerId: String? = null, severity: String? = null, status: String? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard
val classification: String? = null

The classification of the incident, when closing it. Possible values are: BenignPositive_SuspiciousButExpected, FalsePositive_InaccurateData, FalsePositive_IncorrectAlertLogic, TruePositive_SuspiciousActivity and Undetermined.

Link copied to clipboard
val classificationComment: String? = null

The comment why the incident is to be closed.

Link copied to clipboard
val labels: List<String>? = null

Specifies a list of labels to add to the incident.

Link copied to clipboard
val order: Int

The execution order of this action.

Link copied to clipboard
val ownerId: String? = null

The object ID of the entity this incident is assigned to.

Link copied to clipboard
val severity: String? = null

The severity to add to the incident. Possible values are High, Informational, Low and Medium.

Link copied to clipboard
val status: String? = null

The status to set to the incident. Possible values are: Active, Closed, New.