|
3127 | 3127 | ], |
3128 | 3128 | "type": "object" |
3129 | 3129 | }, |
| 3130 | + "ScheduledAlertRuleTemplateProperties": { |
| 3131 | + "allOf": [ |
| 3132 | + { |
| 3133 | + "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
| 3134 | + } |
| 3135 | + ], |
| 3136 | + "description": "Scheduled alert rule template properties", |
| 3137 | + "properties": { |
| 3138 | + "query": { |
| 3139 | + "description": "The query that creates alerts for this rule.", |
| 3140 | + "type": "string" |
| 3141 | + }, |
| 3142 | + "queryFrequency": { |
| 3143 | + "description": "The frequency (in ISO 8601 duration format) for this alert rule to run.", |
| 3144 | + "format": "duration", |
| 3145 | + "type": "string" |
| 3146 | + }, |
| 3147 | + "queryPeriod": { |
| 3148 | + "description": "The period (in ISO 8601 duration format) that this alert rule looks at.", |
| 3149 | + "format": "duration", |
| 3150 | + "type": "string" |
| 3151 | + }, |
| 3152 | + "severity": { |
| 3153 | + "$ref": "#/definitions/AlertSeverity", |
| 3154 | + "description": "The severity for alerts created by this alert rule." |
| 3155 | + }, |
| 3156 | + "triggerOperator": { |
| 3157 | + "$ref": "#/definitions/AlertRuleTriggerOperator", |
| 3158 | + "description": "The operation against the threshold that triggers alert rule." |
| 3159 | + }, |
| 3160 | + "triggerThreshold": { |
| 3161 | + "description": "The threshold triggers this alert rule.", |
| 3162 | + "format": "int32", |
| 3163 | + "type": "integer" |
| 3164 | + }, |
| 3165 | + "tactics": { |
| 3166 | + "description": "The tactics of the alert rule template", |
| 3167 | + "items": { |
| 3168 | + "$ref": "#/definitions/AttackTactic" |
| 3169 | + }, |
| 3170 | + "type": "array" |
| 3171 | + } |
| 3172 | + }, |
| 3173 | + "type": "object" |
| 3174 | + }, |
3130 | 3175 | "ScheduledAlertRuleTemplate": { |
3131 | 3176 | "allOf": [ |
3132 | 3177 | { |
|
3136 | 3181 | "description": "Represents scheduled alert rule template.", |
3137 | 3182 | "properties": { |
3138 | 3183 | "properties": { |
3139 | | - "allOf": [ |
3140 | | - { |
3141 | | - "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
3142 | | - }, |
3143 | | - { |
3144 | | - "$ref": "#/definitions/ScheduledAlertRuleCommonProperties" |
3145 | | - } |
3146 | | - ], |
| 3184 | + "$ref": "#/definitions/ScheduledAlertRuleTemplateProperties", |
3147 | 3185 | "description": "Scheduled alert rule template properties", |
3148 | | - "properties": { |
3149 | | - "tactics": { |
3150 | | - "description": "The tactics of the alert rule template", |
3151 | | - "items": { |
3152 | | - "$ref": "#/definitions/AttackTactic" |
3153 | | - }, |
3154 | | - "type": "array" |
3155 | | - } |
3156 | | - }, |
3157 | 3186 | "required": [ |
3158 | 3187 | "displayName", |
3159 | 3188 | "description", |
|
0 commit comments