com.pulumi.azure.sentinel.kotlin.outputs.AlertRuleScheduledIncidentConfigurationGrouping.kt Maven / Gradle / Ivy

Go to download
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.azure.sentinel.kotlin.outputs

import kotlin.Boolean
import kotlin.String
import kotlin.Suppress
import kotlin.collections.List

/**
 *
 * @property enabled Enable grouping incidents created from alerts triggered by this Sentinel Scheduled Alert Rule. Defaults to `true`.
 * @property entityMatchingMethod The method used to group incidents. Possible values are `AnyAlert`, `Selected` and `AllEntities`. Defaults to `AnyAlert`.
 * @property groupByAlertDetails A list of alert details to group by, only when the `entity_matching_method` is `Selected`. Possible values are `DisplayName` and `Severity`.
 * @property groupByCustomDetails A list of custom details keys to group by, only when the `entity_matching_method` is `Selected`. Only keys defined in the `custom_details` may be used.
 * @property groupByEntities A list of entity types to group by, only when the `entity_matching_method` is `Selected`. Possible values are `Account`, `AzureResource`, `CloudApplication`, `DNS`, `File`, `FileHash`, `Host`, `IP`, `Mailbox`, `MailCluster`, `MailMessage`, `Malware`, `Process`, `RegistryKey`, `RegistryValue`, `SecurityGroup`, `SubmissionMail`, `URL`.
 * @property lookbackDuration Limit the group to alerts created within the lookback duration (in ISO 8601 duration format). Defaults to `PT5M`.
 * @property reopenClosedIncidents Whether to re-open closed matching incidents? Defaults to `false`.
 */
public data class AlertRuleScheduledIncidentConfigurationGrouping(
    public val enabled: Boolean? = null,
    public val entityMatchingMethod: String? = null,
    public val groupByAlertDetails: List? = null,
    public val groupByCustomDetails: List? = null,
    public val groupByEntities: List? = null,
    public val lookbackDuration: String? = null,
    public val reopenClosedIncidents: Boolean? = null,
) {
    public companion object {
        public
        fun toKotlin(javaType: com.pulumi.azure.sentinel.outputs.AlertRuleScheduledIncidentConfigurationGrouping):
            AlertRuleScheduledIncidentConfigurationGrouping =
            AlertRuleScheduledIncidentConfigurationGrouping(
                enabled = javaType.enabled().map({ args0 -> args0 }).orElse(null),
                entityMatchingMethod = javaType.entityMatchingMethod().map({ args0 -> args0 }).orElse(null),
                groupByAlertDetails = javaType.groupByAlertDetails().map({ args0 -> args0 }),
                groupByCustomDetails = javaType.groupByCustomDetails().map({ args0 -> args0 }),
                groupByEntities = javaType.groupByEntities().map({ args0 -> args0 }),
                lookbackDuration = javaType.lookbackDuration().map({ args0 -> args0 }).orElse(null),
                reopenClosedIncidents = javaType.reopenClosedIncidents().map({ args0 -> args0 }).orElse(null),
            )
    }
}