Optional additionalA container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.
The natural-language description or rule to generate the proposed rule from, in the
format given by inputType.
The type of input to generate the proposed rule from: natural_language for a
plain-English description of the behavior to detect, spl for a Splunk SPL search or
saved search definition, or kql for a Microsoft KQL query. SPL inputs must be
self-contained, with search macros expanded.
Generated using TypeDoc
Attributes of the rule proposal to start.