Cloudtools

Link to resource definition: Microsoft.SecurityInsights/alertRules

Default PathAlias
properties.alertRuleTemplateNameMicrosoft.SecurityInsights/alertRules/Scheduled.alertRuleTemplateName
properties.descriptionMicrosoft.SecurityInsights/alertRules/Scheduled.description
properties.displayNameMicrosoft.SecurityInsights/alertRules/Scheduled.displayName
properties.displayNamesExcludeFilterMicrosoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.displayNamesExcludeFilter
properties.displayNamesExcludeFilter[*]Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.displayNamesExcludeFilter[*]
properties.displayNamesFilterMicrosoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.displayNamesFilter
properties.displayNamesFilter[*]Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.displayNamesFilter[*]
properties.enabledMicrosoft.SecurityInsights/alertRules/Scheduled.enabled
properties.eventGroupingSettingsMicrosoft.SecurityInsights/alertRules/Scheduled.eventGroupingSettings
properties.eventGroupingSettings.aggregationKindMicrosoft.SecurityInsights/alertRules/Scheduled.eventGroupingSettings.aggregationKind
properties.incidentConfigurationMicrosoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration
properties.incidentConfiguration.createIncidentMicrosoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.createIncident
properties.incidentConfiguration.groupingConfigurationMicrosoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration
properties.incidentConfiguration.groupingConfiguration.enabledMicrosoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.enabled
properties.incidentConfiguration.groupingConfiguration.entitiesMatchingMethodMicrosoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.entitiesMatchingMethod
properties.incidentConfiguration.groupingConfiguration.groupByEntitiesMicrosoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.groupByEntities
properties.incidentConfiguration.groupingConfiguration.groupByEntities[*]Microsoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.groupByEntities[*]
properties.incidentConfiguration.groupingConfiguration.lookbackDurationMicrosoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.lookbackDuration
properties.incidentConfiguration.groupingConfiguration.reopenClosedIncidentMicrosoft.SecurityInsights/alertRules/Scheduled.incidentConfiguration.groupingConfiguration.reopenClosedIncident
properties.lastModifiedUtcMicrosoft.SecurityInsights/alertRules/Scheduled.lastModifiedUtc
properties.productFilterMicrosoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.productFilter
properties.queryMicrosoft.SecurityInsights/alertRules/Scheduled.query
properties.queryFrequencyMicrosoft.SecurityInsights/alertRules/Scheduled.queryFrequency
properties.queryPeriodMicrosoft.SecurityInsights/alertRules/Scheduled.queryPeriod
properties.severitiesFilterMicrosoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.severitiesFilter
properties.severitiesFilter[*]Microsoft.SecurityInsights/alertRules/MicrosoftSecurityIncidentCreation.severitiesFilter[*]
properties.severityMicrosoft.SecurityInsights/alertRules/Scheduled.severity
properties.suppressionDurationMicrosoft.SecurityInsights/alertRules/Scheduled.suppressionDuration
properties.suppressionEnabledMicrosoft.SecurityInsights/alertRules/Scheduled.suppressionEnabled
properties.tacticsMicrosoft.SecurityInsights/alertRules/Scheduled.tactics
properties.tactics[*]Microsoft.SecurityInsights/alertRules/Scheduled.tactics[*]
properties.triggerOperatorMicrosoft.SecurityInsights/alertRules/Scheduled.triggerOperator
properties.triggerThresholdMicrosoft.SecurityInsights/alertRules/Scheduled.triggerThreshold