Optional additionalA container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.
Optional descriptionThe description of the resource.
The source query or natural language description to translate. Must not be blank.
The type of the source rule: spl for a Splunk SPL search or saved search definition,
natural_language for a plain-English description of the behavior to detect, or kql
for a Microsoft KQL query. SPL inputs must be self-contained, with search macros expanded.
Optional nameThe name of the resource.
Generated using TypeDoc
A source rule to translate into a Cloud SIEM detection rule.