|
1533 | 1533 | ] |
1534 | 1534 | } |
1535 | 1535 | }, |
| 1536 | + "AlertRuleTemplateStatus": { |
| 1537 | + "description": "The alert rule template status.", |
| 1538 | + "enum": [ |
| 1539 | + "Installed", |
| 1540 | + "Available", |
| 1541 | + "NotAvailable" |
| 1542 | + ], |
| 1543 | + "type": "string", |
| 1544 | + "x-ms-enum": { |
| 1545 | + "modelAsString": true, |
| 1546 | + "name": "TemplateStatus", |
| 1547 | + "values": [ |
| 1548 | + { |
| 1549 | + "description": "Alert rule template installed. and can not use more then once", |
| 1550 | + "value": "Installed" |
| 1551 | + }, |
| 1552 | + { |
| 1553 | + "description": "Alert rule template is available.", |
| 1554 | + "value": "Available" |
| 1555 | + }, |
| 1556 | + { |
| 1557 | + "description": "Alert rule template is not available", |
| 1558 | + "value": "NotAvailable" |
| 1559 | + } |
| 1560 | + ] |
| 1561 | + } |
| 1562 | + }, |
1536 | 1563 | "AlertRuleTemplate": { |
1537 | 1564 | "allOf": [ |
1538 | 1565 | { |
|
1547 | 1574 | "properties": { |
1548 | 1575 | "kind": { |
1549 | 1576 | "$ref": "#/definitions/AlertRuleKind", |
1550 | | - "description": "The alert rule kind" |
| 1577 | + "description": "The alert rule kind", |
| 1578 | + "type": "string" |
1551 | 1579 | } |
1552 | 1580 | }, |
1553 | 1581 | "type": "object" |
|
1569 | 1597 | }, |
1570 | 1598 | "type": "object" |
1571 | 1599 | }, |
1572 | | - "AlertRuleTemplatePropertiesBase": { |
1573 | | - "description": "Base alert rule template property bag.", |
1574 | | - "properties": { |
1575 | | - "alertRulesCreatedByTemplateCount": { |
1576 | | - "description": "the number of alert rules that were created by this template", |
1577 | | - "format": "int32", |
1578 | | - "type": "integer" |
1579 | | - }, |
1580 | | - "createdDateUTC": { |
1581 | | - "description": "The time that this alert rule template has been added.", |
1582 | | - "format": "date-time", |
1583 | | - "readOnly": true, |
1584 | | - "type": "string" |
1585 | | - }, |
1586 | | - "description": { |
1587 | | - "description": "The description of the alert rule template.", |
1588 | | - "type": "string" |
1589 | | - }, |
1590 | | - "displayName": { |
1591 | | - "description": "The display name for alert rule template.", |
1592 | | - "type": "string" |
1593 | | - }, |
1594 | | - "requiredDataConnectors": { |
1595 | | - "description": "The required data connectors for this template", |
1596 | | - "items": { |
1597 | | - "$ref": "#/definitions/AlertRuleTemplateDataSource" |
1598 | | - }, |
1599 | | - "type": "array" |
1600 | | - }, |
1601 | | - "status": { |
1602 | | - "description": "The alert rule template status.", |
1603 | | - "enum": [ |
1604 | | - "Installed", |
1605 | | - "Available", |
1606 | | - "NotAvailable" |
1607 | | - ], |
1608 | | - "type": "string", |
1609 | | - "x-ms-enum": { |
1610 | | - "modelAsString": true, |
1611 | | - "name": "TemplateStatus", |
1612 | | - "values": [ |
1613 | | - { |
1614 | | - "description": "Alert rule template installed. and can not use more then once", |
1615 | | - "value": "Installed" |
1616 | | - }, |
1617 | | - { |
1618 | | - "description": "Alert rule template is available.", |
1619 | | - "value": "Available" |
1620 | | - }, |
1621 | | - { |
1622 | | - "description": "Alert rule template is not available", |
1623 | | - "value": "NotAvailable" |
1624 | | - } |
1625 | | - ] |
1626 | | - } |
1627 | | - } |
1628 | | - }, |
1629 | | - "type": "object" |
1630 | | - }, |
1631 | 1600 | "AlertRuleTemplatesList": { |
1632 | 1601 | "description": "List all the alert rule templates.", |
1633 | 1602 | "properties": { |
|
2149 | 2118 | "x-ms-discriminator-value": "Fusion" |
2150 | 2119 | }, |
2151 | 2120 | "FusionAlertRuleTemplateProperties": { |
2152 | | - "allOf": [ |
2153 | | - { |
2154 | | - "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
2155 | | - } |
2156 | | - ], |
2157 | 2121 | "description": "Represents Fusion alert rule template properties", |
2158 | 2122 | "properties": { |
| 2123 | + "alertRulesCreatedByTemplateCount": { |
| 2124 | + "description": "the number of alert rules that were created by this template", |
| 2125 | + "format": "int32", |
| 2126 | + "type": "integer" |
| 2127 | + }, |
| 2128 | + "createdDateUTC": { |
| 2129 | + "description": "The time that this alert rule template has been added.", |
| 2130 | + "format": "date-time", |
| 2131 | + "readOnly": true, |
| 2132 | + "type": "string" |
| 2133 | + }, |
| 2134 | + "description": { |
| 2135 | + "description": "The description of the alert rule template.", |
| 2136 | + "type": "string" |
| 2137 | + }, |
| 2138 | + "displayName": { |
| 2139 | + "description": "The display name for alert rule template.", |
| 2140 | + "type": "string" |
| 2141 | + }, |
| 2142 | + "requiredDataConnectors": { |
| 2143 | + "description": "The required data connectors for this template", |
| 2144 | + "items": { |
| 2145 | + "$ref": "#/definitions/AlertRuleTemplateDataSource" |
| 2146 | + }, |
| 2147 | + "type": "array" |
| 2148 | + }, |
| 2149 | + "status": { |
| 2150 | + "$ref": "#/definitions/AlertRuleTemplateStatus", |
| 2151 | + "description": "The alert rule template status.", |
| 2152 | + "type": "string" |
| 2153 | + }, |
2159 | 2154 | "severity": { |
2160 | 2155 | "$ref": "#/definitions/AlertSeverity", |
2161 | 2156 | "description": "The severity for alerts created by this alert rule." |
|
2748 | 2743 | "type": "object" |
2749 | 2744 | }, |
2750 | 2745 | "MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties": { |
2751 | | - "allOf": [ |
2752 | | - { |
2753 | | - "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
2754 | | - } |
2755 | | - ], |
2756 | 2746 | "description": "MicrosoftSecurityIncidentCreation rule template properties", |
2757 | 2747 | "properties": { |
| 2748 | + "alertRulesCreatedByTemplateCount": { |
| 2749 | + "description": "the number of alert rules that were created by this template", |
| 2750 | + "format": "int32", |
| 2751 | + "type": "integer" |
| 2752 | + }, |
| 2753 | + "createdDateUTC": { |
| 2754 | + "description": "The time that this alert rule template has been added.", |
| 2755 | + "format": "date-time", |
| 2756 | + "readOnly": true, |
| 2757 | + "type": "string" |
| 2758 | + }, |
| 2759 | + "description": { |
| 2760 | + "description": "The description of the alert rule template.", |
| 2761 | + "type": "string" |
| 2762 | + }, |
| 2763 | + "displayName": { |
| 2764 | + "description": "The display name for alert rule template.", |
| 2765 | + "type": "string" |
| 2766 | + }, |
| 2767 | + "requiredDataConnectors": { |
| 2768 | + "description": "The required data connectors for this template", |
| 2769 | + "items": { |
| 2770 | + "$ref": "#/definitions/AlertRuleTemplateDataSource" |
| 2771 | + }, |
| 2772 | + "type": "array" |
| 2773 | + }, |
| 2774 | + "status": { |
| 2775 | + "$ref": "#/definitions/AlertRuleTemplateStatus", |
| 2776 | + "description": "The alert rule template status.", |
| 2777 | + "type": "string" |
| 2778 | + }, |
2758 | 2779 | "displayNamesFilter": { |
2759 | 2780 | "description": "the alerts' displayNames on which the cases will be generated", |
2760 | 2781 | "items": { |
|
3125 | 3146 | "type": "object" |
3126 | 3147 | }, |
3127 | 3148 | "ScheduledAlertRuleTemplateProperties": { |
3128 | | - "allOf": [ |
3129 | | - { |
3130 | | - "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
3131 | | - } |
3132 | | - ], |
3133 | 3149 | "description": "Scheduled alert rule template properties", |
3134 | 3150 | "properties": { |
| 3151 | + "alertRulesCreatedByTemplateCount": { |
| 3152 | + "description": "the number of alert rules that were created by this template", |
| 3153 | + "format": "int32", |
| 3154 | + "type": "integer" |
| 3155 | + }, |
| 3156 | + "createdDateUTC": { |
| 3157 | + "description": "The time that this alert rule template has been added.", |
| 3158 | + "format": "date-time", |
| 3159 | + "readOnly": true, |
| 3160 | + "type": "string" |
| 3161 | + }, |
| 3162 | + "description": { |
| 3163 | + "description": "The description of the alert rule template.", |
| 3164 | + "type": "string" |
| 3165 | + }, |
| 3166 | + "displayName": { |
| 3167 | + "description": "The display name for alert rule template.", |
| 3168 | + "type": "string" |
| 3169 | + }, |
| 3170 | + "requiredDataConnectors": { |
| 3171 | + "description": "The required data connectors for this template", |
| 3172 | + "items": { |
| 3173 | + "$ref": "#/definitions/AlertRuleTemplateDataSource" |
| 3174 | + }, |
| 3175 | + "type": "array" |
| 3176 | + }, |
| 3177 | + "status": { |
| 3178 | + "$ref": "#/definitions/AlertRuleTemplateStatus", |
| 3179 | + "description": "The alert rule template status.", |
| 3180 | + "type": "string" |
| 3181 | + }, |
3135 | 3182 | "query": { |
3136 | 3183 | "description": "The query that creates alerts for this rule.", |
3137 | 3184 | "type": "string" |
|
0 commit comments