IoTSecurityAggregatedAlert interface

Package:
@azure/arm-security

Security Solution Aggregated Alert information

Extends
ProxyResource

Properties

actionTaken

IoT Security solution alert response.
aggregatedDateUtc

Date of detection.
alertDisplayName

Display name of the alert type.
alertType

Name of the alert type.
count

Number of alerts occurrences within the aggregated time window.
description

Description of the suspected vulnerability and meaning.
effectedResourceType

Azure resource ID of the resource that received the alerts.
logAnalyticsQuery

Log analytics query for getting the list of affected devices/alerts.
remediationSteps

Recommended steps for remediation.
reportedSeverity

Assessed alert severity.
systemSource

The type of the alerted resource (Azure, Non-Azure).
tags

Resource tags
topDevicesList

10 devices with the highest number of occurrences of this alert type, on this day.
vendorName

Name of the organization that raised the alert.

Inherited Properties

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
name

The name of the resource
systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.
type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Property Details

actionTaken

IoT Security solution alert response.

actionTaken?: string

Property Value

string

aggregatedDateUtc

Date of detection.

aggregatedDateUtc?: Date

Property Value

Date

alertDisplayName

Display name of the alert type.

alertDisplayName?: string

Property Value

string

alertType

Name of the alert type.

alertType?: string

Property Value

string

count

Number of alerts occurrences within the aggregated time window.

count?: number

Property Value

number

description

Description of the suspected vulnerability and meaning.

description?: string

Property Value

string

effectedResourceType

Azure resource ID of the resource that received the alerts.

effectedResourceType?: string

Property Value

string

logAnalyticsQuery

Log analytics query for getting the list of affected devices/alerts.

logAnalyticsQuery?: string

Property Value

string

remediationSteps

Recommended steps for remediation.

remediationSteps?: string

Property Value

string

reportedSeverity

Assessed alert severity.

reportedSeverity?: string

Property Value

string

systemSource

The type of the alerted resource (Azure, Non-Azure).

systemSource?: string

Property Value

string

tags

Resource tags

tags?: Record<string, string>

Property Value

Record<string, string>

topDevicesList

10 devices with the highest number of occurrences of this alert type, on this day.

topDevicesList?: IoTSecurityAggregatedAlertPropertiesTopDevicesListItem[]

Property Value

IoTSecurityAggregatedAlertPropertiesTopDevicesListItem[]

vendorName

Name of the organization that raised the alert.

vendorName?: string

Property Value

string

Inherited Property Details

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

id?: string

Property Value

string

Inherited From ProxyResource.id

name

The name of the resource

name?: string

Property Value

string

Inherited From ProxyResource.name

systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

systemData?: SystemData

Property Value

SystemData

Inherited From ProxyResource.systemData

type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

type?: string

Property Value

string

Inherited From ProxyResource.type