Type alias SecurityMonitoringRuleMaxSignalDuration
SecurityMonitoringRuleMaxSignalDuration: typeof ZERO_MINUTES | typeof ONE_MINUTE | typeof FIVE_MINUTES | typeof TEN_MINUTES | typeof FIFTEEN_MINUTES | typeof THIRTY_MINUTES | typeof ONE_HOUR | typeof TWO_HOURS | typeof THREE_HOURS | typeof SIX_HOURS | typeof TWELVE_HOURS | typeof ONE_DAY | UnparsedObject
A signal will “close” regardless of the query being matched once the time exceeds the maximum duration. This time is calculated from the first seen timestamp.