安全云脑 SecMaster-更新告警规则:请求示例

时间：2025-02-12 14:58:32

安全云脑 SecMaster

请求示例

更新一条告警规则，告警规则名称为Alert rule，查询类型为SQL，状态为启用，严重程度为提示。

{  "rule_name" : "Alert rule",  "query" : "* | select status, count(*) as count group by status",  "query_type" : "SQL",  "status" : "ENABLED",  "severity" : "TIPS",  "custom_properties" : {    "references" : "https://localhost/references",    "maintainer" : "isap"  },  "event_grouping" : true,  "schedule" : {    "frequency_interval" : 5,    "frequency_unit" : "MINUTE",    "period_interval" : 5,    "period_unit" : "MINUTE",    "delay_interval" : 2,    "overtime_interval" : 10  },  "triggers" : [ {    "mode" : "COUNT",    "operator" : "GT",    "expression" : 10,    "severity" : "TIPS"  } ]}

上一篇：安全云脑 SecMaster-更新告警规则:响应示例

下一篇：安全云脑 SecMaster-更新告警规则:URI