Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions specification/securityinsights/cspell.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,7 @@ overrides:
- usgrpuser
- usracl
- usrstamp
- mdti
- filename: >-
**/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/stable/**/*.json
words:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{

Check notice on line 1 in specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2025-07-01-preview/AlertRules.json

View workflow job for this annotation

GitHub Actions / TypeSpec Requirement

Your service description will soon be required to convert from OpenAPI to TypeSpec. See https://aka.ms/azsdk/typespec.
"swagger": "2.0",
"info": {
"title": "Security Insights",
Expand Down Expand Up @@ -642,7 +642,8 @@
"properties": {
"kind": {
"$ref": "#/definitions/AlertRuleKindEnum",
"description": "The kind of the alert rule"
"description": "The kind of the alert rule",
"type": "string"
}
},
"required": [
Expand All @@ -661,7 +662,8 @@
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object"
Expand All @@ -670,7 +672,7 @@
"description": "Base alert rule template property bag.",
"properties": {
"alertRulesCreatedByTemplateCount": {
"description": "the number of alert rules that were created by this template",
"description": "The number of alert rules that were created by this template",
"type": "integer",
"format": "int32"
},
Expand Down Expand Up @@ -818,7 +820,8 @@
"items": {
"$ref": "#/definitions/AlertRuleTemplate"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down Expand Up @@ -853,7 +856,8 @@
"items": {
"$ref": "#/definitions/AlertRule"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down Expand Up @@ -916,7 +920,8 @@
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"readOnly": true,
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"techniques": {
"description": "The techniques of the alert rule",
Expand Down Expand Up @@ -1047,7 +1052,8 @@
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"readOnly": true,
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"techniques": {
"description": "The techniques of the alert rule",
Expand Down Expand Up @@ -1210,7 +1216,7 @@
"description": "Fusion alert rule template properties",
"properties": {
"alertRulesCreatedByTemplateCount": {
"description": "the number of alert rules that were created by this template",
"description": "The number of alert rules that were created by this template",
"format": "int32",
"type": "integer"
},
Expand Down Expand Up @@ -1282,8 +1288,7 @@
"type": "array"
}
},
"type": "object",
"x-ms-client-flatten": true
"type": "object"
},
"FusionTemplateSourceSetting": {
"description": "Represents a source signal consumed in Fusion detection.",
Expand Down Expand Up @@ -1491,14 +1496,16 @@
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"displayNamesExcludeFilter": {
"description": "the alerts' displayNames on which the cases will not be generated",
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"productFilter": {
"$ref": "#/definitions/MicrosoftSecurityProductName",
Expand All @@ -1509,7 +1516,8 @@
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"required": [
Expand Down Expand Up @@ -1610,14 +1618,16 @@
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"displayNamesExcludeFilter": {
"description": "the alerts' displayNames on which the cases will not be generated",
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"productFilter": {
"$ref": "#/definitions/MicrosoftSecurityProductName",
Expand All @@ -1628,11 +1638,11 @@
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
"x-ms-client-flatten": true
"type": "object"
},
"ScheduledAlertRuleProperties": {
"allOf": [
Expand Down Expand Up @@ -1682,7 +1692,8 @@
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"techniques": {
"description": "The techniques of the alert rule",
Expand Down Expand Up @@ -1715,8 +1726,7 @@
"suppressionEnabled",
"suppressionDuration"
],
"type": "object",
"x-ms-client-flatten": true
"type": "object"
},
"NrtAlertRuleProperties": {
"description": "Nrt alert rule base property bag.",
Expand Down Expand Up @@ -1829,7 +1839,7 @@
"description": "Scheduled alert rule template properties",
"properties": {
"alertRulesCreatedByTemplateCount": {
"description": "the number of alert rules that were created by this template",
"description": "The number of alert rules that were created by this template",
"format": "int32",
"type": "integer"
},
Expand Down Expand Up @@ -2288,7 +2298,8 @@
"items": {
"$ref": "#/definitions/EntityMappingType"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"groupByAlertDetails": {
"description": "A list of alert details to group by (when matchingMethod is Selected)",
Expand All @@ -2314,14 +2325,16 @@
]
}
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"groupByCustomDetails": {
"description": "A list of custom details keys to group by (when matchingMethod is Selected). Only keys defined in the current alert rule may be used.",
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down Expand Up @@ -2383,11 +2396,15 @@
"ActionResponse": {
"allOf": [
{
"$ref": "../../../common/2.0/types.json#/definitions/ResourceWithEtag"
"$ref": "../../../../../common-types/resource-management/v5/types.json#/definitions/Resource"
}
],
"description": "Action for alert rule.",
"properties": {
"etag": {
"description": "ETag of the action.",
"type": "string"
},
"properties": {
"$ref": "#/definitions/ActionResponseProperties",
"description": "Action properties for get request",
Expand Down Expand Up @@ -2424,7 +2441,8 @@
"items": {
"$ref": "#/definitions/ActionResponse"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down
Loading
Loading