Class AlertRuleMsSecurityIncidentState

Inheritance
System.Object
InputArgs
ResourceArgs
AlertRuleMsSecurityIncidentState
Inherited Members
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
System.Object.ReferenceEquals(System.Object, System.Object)
System.Object.ToString()
Namespace: Pulumi.Azure.Sentinel
Assembly: Pulumi.Azure.dll
Syntax
public sealed class AlertRuleMsSecurityIncidentState : ResourceArgs

Constructors

View Source

AlertRuleMsSecurityIncidentState()

Declaration
public AlertRuleMsSecurityIncidentState()

Properties

View Source

Description

The description of this Sentinel MS Security Incident Alert Rule.

Declaration
public Input<string> Description { get; set; }
Property Value
Type Description
Input<System.String>
View Source

DisplayName

The friendly name of this Sentinel MS Security Incident Alert Rule.

Declaration
public Input<string> DisplayName { get; set; }
Property Value
Type Description
Input<System.String>
View Source

Enabled

Should this Sentinel MS Security Incident Alert Rule be enabled? Defaults to true.

Declaration
public Input<bool> Enabled { get; set; }
Property Value
Type Description
Input<System.Boolean>
View Source

LogAnalyticsWorkspaceId

The ID of the Log Analytics Workspace this Sentinel MS Security Incident Alert Rule belongs to. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.

Declaration
public Input<string> LogAnalyticsWorkspaceId { get; set; }
Property Value
Type Description
Input<System.String>
View Source

Name

The name which should be used for this Sentinel MS Security Incident Alert Rule. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.

Declaration
public Input<string> Name { get; set; }
Property Value
Type Description
Input<System.String>
View Source

ProductFilter

The Microsoft Security Service from where the alert will be generated. Possible values are Azure Active Directory Identity Protection, Azure Advanced Threat Protection, Azure Security Center, Azure Security Center for IoT and Microsoft Cloud App Security.

Declaration
public Input<string> ProductFilter { get; set; }
Property Value
Type Description
Input<System.String>
View Source

SeverityFilters

Only create incidents from alerts when alert severity level is contained in this list. Possible values are High, Medium, Low and Informational.

Declaration
public InputList<string> SeverityFilters { get; set; }
Property Value
Type Description
InputList<System.String>
View Source

TextWhitelists

Only create incidents from alerts when alert name contain text in this list. No filter will happen if this field is absent.

Declaration
public InputList<string> TextWhitelists { get; set; }
Property Value
Type Description
InputList<System.String>