ArmSecurityInsightsModelFactory.NrtAlertRuleTemplate Method

Definition

Namespace:

Azure.ResourceManager.SecurityInsights.Models

Assembly:

Azure.ResourceManager.SecurityInsights.dll

Package:

Azure.ResourceManager.SecurityInsights v1.2.0-beta.1

Source:

ArmSecurityInsightsModelFactory.cs

Initializes a new instance of NrtAlertRuleTemplate.

public static Azure.ResourceManager.SecurityInsights.Models.NrtAlertRuleTemplate NrtAlertRuleTemplate (Azure.Core.ResourceIdentifier id = default, string name = default, Azure.Core.ResourceType resourceType = default, Azure.ResourceManager.Models.SystemData systemData = default, int? alertRulesCreatedByTemplateCount = default, DateTimeOffset? lastUpdatedOn = default, DateTimeOffset? createdOn = default, string description = default, string displayName = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.AlertRuleTemplateDataSource> requiredDataConnectors = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertRuleTemplateStatus? status = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAttackTactic> tactics = default, System.Collections.Generic.IEnumerable<string> techniques = default, string query = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertSeverity? severity = default, string version = default, System.Collections.Generic.IDictionary<string,string> customDetails = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertRuleEntityMapping> entityMappings = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertDetailsOverride alertDetailsOverride = default, Azure.ResourceManager.SecurityInsights.Models.EventGroupingAggregationKind? eventGroupingAggregationKind = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.SentinelEntityMapping> sentinelEntitiesMappings = default);

static member NrtAlertRuleTemplate : Azure.Core.ResourceIdentifier * string * Azure.Core.ResourceType * Azure.ResourceManager.Models.SystemData * Nullable<int> * Nullable<DateTimeOffset> * Nullable<DateTimeOffset> * string * string * seq<Azure.ResourceManager.SecurityInsights.Models.AlertRuleTemplateDataSource> * Nullable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertRuleTemplateStatus> * seq<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAttackTactic> * seq<string> * string * Nullable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertSeverity> * string * System.Collections.Generic.IDictionary<string, string> * seq<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertRuleEntityMapping> * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertDetailsOverride * Nullable<Azure.ResourceManager.SecurityInsights.Models.EventGroupingAggregationKind> * seq<Azure.ResourceManager.SecurityInsights.Models.SentinelEntityMapping> -> Azure.ResourceManager.SecurityInsights.Models.NrtAlertRuleTemplate

Public Shared Function NrtAlertRuleTemplate (Optional id As ResourceIdentifier = Nothing, Optional name As String = Nothing, Optional resourceType As ResourceType = Nothing, Optional systemData As SystemData = Nothing, Optional alertRulesCreatedByTemplateCount As Nullable(Of Integer) = Nothing, Optional lastUpdatedOn As Nullable(Of DateTimeOffset) = Nothing, Optional createdOn As Nullable(Of DateTimeOffset) = Nothing, Optional description As String = Nothing, Optional displayName As String = Nothing, Optional requiredDataConnectors As IEnumerable(Of AlertRuleTemplateDataSource) = Nothing, Optional status As Nullable(Of SecurityInsightsAlertRuleTemplateStatus) = Nothing, Optional tactics As IEnumerable(Of SecurityInsightsAttackTactic) = Nothing, Optional techniques As IEnumerable(Of String) = Nothing, Optional query As String = Nothing, Optional severity As Nullable(Of SecurityInsightsAlertSeverity) = Nothing, Optional version As String = Nothing, Optional customDetails As IDictionary(Of String, String) = Nothing, Optional entityMappings As IEnumerable(Of SecurityInsightsAlertRuleEntityMapping) = Nothing, Optional alertDetailsOverride As SecurityInsightsAlertDetailsOverride = Nothing, Optional eventGroupingAggregationKind As Nullable(Of EventGroupingAggregationKind) = Nothing, Optional sentinelEntitiesMappings As IEnumerable(Of SentinelEntityMapping) = Nothing) As NrtAlertRuleTemplate

Parameters

id

ResourceIdentifier

The id.

name

String

The name.

resourceType

ResourceType

The resourceType.

systemData

SystemData

The systemData.

alertRulesCreatedByTemplateCount

Nullable<Int32>

the number of alert rules that were created by this template.

lastUpdatedOn

Nullable<DateTimeOffset>

The last time that this alert rule template has been updated.

createdOn

Nullable<DateTimeOffset>

The time that this alert rule template has been added.

description

String

The description of the alert rule template.

displayName

String

The display name for alert rule template.

requiredDataConnectors

IEnumerable<AlertRuleTemplateDataSource>

The required data sources for this template.

status

Nullable<SecurityInsightsAlertRuleTemplateStatus>

The alert rule template status.

tactics

IEnumerable<SecurityInsightsAttackTactic>

The tactics of the alert rule.

techniques

IEnumerable<String>

The techniques of the alert rule.

query

String

The query that creates alerts for this rule.

severity

Nullable<SecurityInsightsAlertSeverity>

The severity for alerts created by this alert rule.

version

String

The version of this template - in format <a.b.c>, where all are numbers. For example <1.0.2>.

customDetails

IDictionary<String,String>

Dictionary of string key-value pairs of columns to be attached to the alert.

entityMappings

IEnumerable<SecurityInsightsAlertRuleEntityMapping>

Array of the entity mappings of the alert rule.

alertDetailsOverride

SecurityInsightsAlertDetailsOverride

The alert details override settings.

eventGroupingAggregationKind

Nullable<EventGroupingAggregationKind>

The event grouping settings.

sentinelEntitiesMappings

IEnumerable<SentinelEntityMapping>

Array of the sentinel entity mappings of the alert rule.

Returns

NrtAlertRuleTemplate

A new NrtAlertRuleTemplate instance for mocking.