pulumi-azure-kotlin/com.pulumi.azure.sentinel.kotlin.inputs/AutomationRuleActionIncidentArgs

AutomationRuleActionIncidentArgs

data class AutomationRuleActionIncidentArgs(val classification: Output<String>? = null, val classificationComment: Output<String>? = null, val labels: Output<List<String>>? = null, val order: Output<Int>, val ownerId: Output<String>? = null, val severity: Output<String>? = null, val status: Output<String>? = null) : ConvertibleToJava<AutomationRuleActionIncidentArgs>

Constructors

Link copied to clipboard
constructor(classification: Output<String>? = null, classificationComment: Output<String>? = null, labels: Output<List<String>>? = null, order: Output<Int>, ownerId: Output<String>? = null, severity: Output<String>? = null, status: Output<String>? = null)

Properties

Link copied to clipboard
val classification: Output<String>? = null

The classification of the incident, when closing it. Possible values are: BenignPositive_SuspiciousButExpected, FalsePositive_InaccurateData, FalsePositive_IncorrectAlertLogic, TruePositive_SuspiciousActivity and Undetermined.

Link copied to clipboard
val classificationComment: Output<String>? = null

The comment why the incident is to be closed.

Link copied to clipboard
val labels: Output<List<String>>? = null

Specifies a list of labels to add to the incident.

Link copied to clipboard
val order: Output<Int>

The execution order of this action.

Link copied to clipboard
val ownerId: Output<String>? = null

The object ID of the entity this incident is assigned to.

Link copied to clipboard
val severity: Output<String>? = null

The severity to add to the incident. Possible values are High, Informational, Low and Medium.

Link copied to clipboard
val status: Output<String>? = null

The status to set to the incident. Possible values are: Active, Closed, New.

Functions

Link copied to clipboard
open override fun toJava(): AutomationRuleActionIncidentArgs