Class SecurityMonitoringRuleAnomalyDetectionOptions

Options on anomaly detection method.

Hierarchy

  • SecurityMonitoringRuleAnomalyDetectionOptions

Constructors

Properties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any

Duration in seconds of the time buckets used to aggregate events matched by the rule. Must be greater than or equal to 300.

An optional parameter that sets how permissive anomaly detection is. Higher values require higher deviations before triggering a signal.

Learning duration in hours. Anomaly detection waits for at least this amount of historical data before it starts evaluating.

learningPeriodBaseline?: number

An optional override baseline to apply while the rule is in the learning period. Must be greater than or equal to 0.

Generated using TypeDoc