Class SecurityMonitoringRuleAnomalyDetectionOptions

Options on anomaly detection method.

Hierarchy

  • SecurityMonitoringRuleAnomalyDetectionOptions

Constructors

Properties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any

Duration in seconds of the time buckets used to aggregate events matched by the rule. Must be greater than or equal to 300.

An optional parameter that sets how permissive anomaly detection is. Higher values require higher deviations before triggering a signal.

instantaneousBaseline?: boolean

When set to true, Datadog uses previous values that fall within the defined learning window to construct the baseline, enabling the system to establish an accurate baseline more rapidly rather than relying solely on gradual learning over time.

Learning duration in hours. Anomaly detection waits for at least this amount of historical data before it starts evaluating.

learningPeriodBaseline?: number

An optional override baseline to apply while the rule is in the learning period. Must be greater than or equal to 0.

Generated using TypeDoc