Class SecurityMonitoringStandardRuleResponse

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Calculated fields. Only allowed for scheduled rules - in other words, when schedulingOptions is also defined.

Cases for generating signals.

How to generate compliance signals. Useful for cloud_configuration rules only.

When the rule was created, timestamp in milliseconds.

User ID of the user who created the rule.

Custom/Overridden message for generated signals (used in case of Default rule update).

Custom/Overridden name of the rule (used in case of Default rule update).

Default Tags for default rules (included in tags)

When the rule will be deprecated, timestamp in milliseconds.

Additional queries to filter matched events before they are processed. This field is deprecated for log detection, signal correlation, and workload security rules.

Additional grouping to perform on top of the existing groups in the query section. Must be a subset of the existing groups.

Whether the notifications include the triggering group-by values in their title.

The ID of the rule.

Whether the rule is included by default.

Whether the rule has been deleted.

Whether the rule is enabled.

Message for generated signals.

The name of the rule.

Options.

Queries for selecting logs which are part of the rule.

Reference tables for the rule.

Options for scheduled rules. When this field is present, the rule runs based on the schedule. When absent, it runs real-time on ingested logs.

Tags for generated signals.

Cases for generating signals from third-party rules. Only available for third-party rules.

The rule type.

User ID of the user who updated the rule.

The date the rule was last updated, in milliseconds.

The version of the rule.