KnownMatchingMethod enum

Package:
@azure/arm-securityinsight

Grouping matching method. When method is Selected at least one of groupByEntities, groupByAlertDetails, groupByCustomDetails must be provided and not empty.

Fields

AllEntities

Grouping alerts into a single incident if all the entities match
AnyAlert

Grouping any alerts triggered by this rule into a single incident
Selected

Grouping alerts into a single incident if the selected entities, custom details and alert details match