elasticstack.KibanaAlertingRule

Example coming soon!

name string

The unique name of the resource.

args KibanaAlertingRuleArgs

The arguments to resource properties.

opts CustomResourceOptions

Bag of options to control resource's behavior.

resource_name str

The unique name of the resource.

args KibanaAlertingRuleArgs

The arguments to resource properties.

opts ResourceOptions

Bag of options to control resource's behavior.

ctx Context

Context object for the current deployment.

name string

The unique name of the resource.

args KibanaAlertingRuleArgs

The arguments to resource properties.

opts ResourceOption

Bag of options to control resource's behavior.

name string

The unique name of the resource.

args KibanaAlertingRuleArgs

The arguments to resource properties.

opts CustomResourceOptions

Bag of options to control resource's behavior.

name String

The unique name of the resource.

args KibanaAlertingRuleArgs

The arguments to resource properties.

options CustomResourceOptions

Bag of options to control resource's behavior.

Consumer string

The name of the application or feature that owns the rule.

Interval string

The check interval, which specifies how frequently the rule conditions are checked. The interval must be specified in seconds, minutes, hours or days.

Params string

The rule parameters, which differ for each rule type.

RuleTypeId string

The ID of the rule type that you want to call when the rule is scheduled to run. For more information about the valid values, list the rule types using Get rule types API or refer to the Rule types documentation.

Actions List<KibanaAlertingRuleAction>

An action that runs under defined conditions.

AlertDelay double

A number that indicates how many consecutive runs need to meet the rule conditions for an alert to occur.

Enabled bool

Indicates if you want to run the rule on an interval basis.

Flapping KibanaAlertingRuleFlapping

KibanaConnections List<KibanaAlertingRuleKibanaConnection>

Kibana connection configuration block.

Name string

The name of the rule. While this name does not have to be unique, a distinctive name can help you identify a rule.

NotifyWhen string

Required until v8.6.0. Deprecated in v8.13.0. Use the notify_when property in the action frequency object instead. Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific notify_when values.

RuleId string

The identifier for the rule. Until Kibana version 8.17.0 this should be a UUID v1 or v4, for later versions any format can be used. If it is omitted, an ID is randomly generated.

SpaceId string

An identifier for the space. If space_id is not provided, the default space is used.

Tags List<string>

A list of tag names that are applied to the rule.

Throttle string

Deprecated in 8.13.0. Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific throttle values.

Consumer string

The name of the application or feature that owns the rule.

Interval string

The check interval, which specifies how frequently the rule conditions are checked. The interval must be specified in seconds, minutes, hours or days.

Params string

The rule parameters, which differ for each rule type.

RuleTypeId string

The ID of the rule type that you want to call when the rule is scheduled to run. For more information about the valid values, list the rule types using Get rule types API or refer to the Rule types documentation.

Actions []KibanaAlertingRuleActionArgs

An action that runs under defined conditions.

AlertDelay float64

A number that indicates how many consecutive runs need to meet the rule conditions for an alert to occur.

Enabled bool

Indicates if you want to run the rule on an interval basis.

Flapping KibanaAlertingRuleFlappingArgs

KibanaConnections []KibanaAlertingRuleKibanaConnectionArgs

Kibana connection configuration block.

Name string

The name of the rule. While this name does not have to be unique, a distinctive name can help you identify a rule.

NotifyWhen string

Required until v8.6.0. Deprecated in v8.13.0. Use the notify_when property in the action frequency object instead. Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific notify_when values.

RuleId string

The identifier for the rule. Until Kibana version 8.17.0 this should be a UUID v1 or v4, for later versions any format can be used. If it is omitted, an ID is randomly generated.

SpaceId string

An identifier for the space. If space_id is not provided, the default space is used.

Tags []string

A list of tag names that are applied to the rule.

Throttle string

Deprecated in 8.13.0. Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific throttle values.

consumer string

The name of the application or feature that owns the rule.

interval string

The check interval, which specifies how frequently the rule conditions are checked. The interval must be specified in seconds, minutes, hours or days.

params string

The rule parameters, which differ for each rule type.

rule_type_id string

The ID of the rule type that you want to call when the rule is scheduled to run. For more information about the valid values, list the rule types using Get rule types API or refer to the Rule types documentation.

actions list(object)

An action that runs under defined conditions.

alert_delay number

A number that indicates how many consecutive runs need to meet the rule conditions for an alert to occur.

enabled bool

Indicates if you want to run the rule on an interval basis.

flapping object

kibana_connections list(object)

Kibana connection configuration block.

name string

The name of the rule. While this name does not have to be unique, a distinctive name can help you identify a rule.

notify_when string

Required until v8.6.0. Deprecated in v8.13.0. Use the notify_when property in the action frequency object instead. Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific notify_when values.

rule_id string

The identifier for the rule. Until Kibana version 8.17.0 this should be a UUID v1 or v4, for later versions any format can be used. If it is omitted, an ID is randomly generated.

space_id string

An identifier for the space. If space_id is not provided, the default space is used.

tags list(string)

A list of tag names that are applied to the rule.

throttle string

Deprecated in 8.13.0. Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific throttle values.

consumer String

The name of the application or feature that owns the rule.

interval String

The check interval, which specifies how frequently the rule conditions are checked. The interval must be specified in seconds, minutes, hours or days.

params String

The rule parameters, which differ for each rule type.

ruleTypeId String

The ID of the rule type that you want to call when the rule is scheduled to run. For more information about the valid values, list the rule types using Get rule types API or refer to the Rule types documentation.

actions List<KibanaAlertingRuleAction>

An action that runs under defined conditions.

alertDelay Double

A number that indicates how many consecutive runs need to meet the rule conditions for an alert to occur.

enabled Boolean

Indicates if you want to run the rule on an interval basis.

flapping KibanaAlertingRuleFlapping

kibanaConnections List<KibanaAlertingRuleKibanaConnection>

Kibana connection configuration block.

name String

The name of the rule. While this name does not have to be unique, a distinctive name can help you identify a rule.

notifyWhen String

Required until v8.6.0. Deprecated in v8.13.0. Use the notify_when property in the action frequency object instead. Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific notify_when values.

ruleId String

The identifier for the rule. Until Kibana version 8.17.0 this should be a UUID v1 or v4, for later versions any format can be used. If it is omitted, an ID is randomly generated.

spaceId String

An identifier for the space. If space_id is not provided, the default space is used.

tags List<String>

A list of tag names that are applied to the rule.

throttle String

Deprecated in 8.13.0. Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific throttle values.

consumer string

The name of the application or feature that owns the rule.

interval string

The check interval, which specifies how frequently the rule conditions are checked. The interval must be specified in seconds, minutes, hours or days.

params string

The rule parameters, which differ for each rule type.

ruleTypeId string

The ID of the rule type that you want to call when the rule is scheduled to run. For more information about the valid values, list the rule types using Get rule types API or refer to the Rule types documentation.

actions KibanaAlertingRuleAction[]

An action that runs under defined conditions.

alertDelay number

A number that indicates how many consecutive runs need to meet the rule conditions for an alert to occur.

enabled boolean

Indicates if you want to run the rule on an interval basis.

flapping KibanaAlertingRuleFlapping

kibanaConnections KibanaAlertingRuleKibanaConnection[]

Kibana connection configuration block.

name string

The name of the rule. While this name does not have to be unique, a distinctive name can help you identify a rule.

notifyWhen string

Required until v8.6.0. Deprecated in v8.13.0. Use the notify_when property in the action frequency object instead. Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific notify_when values.

ruleId string

The identifier for the rule. Until Kibana version 8.17.0 this should be a UUID v1 or v4, for later versions any format can be used. If it is omitted, an ID is randomly generated.

spaceId string

An identifier for the space. If space_id is not provided, the default space is used.

tags string[]

A list of tag names that are applied to the rule.

throttle string

Deprecated in 8.13.0. Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific throttle values.

consumer str

The name of the application or feature that owns the rule.

interval str

The check interval, which specifies how frequently the rule conditions are checked. The interval must be specified in seconds, minutes, hours or days.

params str

The rule parameters, which differ for each rule type.

rule_type_id str

The ID of the rule type that you want to call when the rule is scheduled to run. For more information about the valid values, list the rule types using Get rule types API or refer to the Rule types documentation.

actions Sequence[KibanaAlertingRuleActionArgs]

An action that runs under defined conditions.

alert_delay float

A number that indicates how many consecutive runs need to meet the rule conditions for an alert to occur.

enabled bool

Indicates if you want to run the rule on an interval basis.

flapping KibanaAlertingRuleFlappingArgs

kibana_connections Sequence[KibanaAlertingRuleKibanaConnectionArgs]

Kibana connection configuration block.

name str

The name of the rule. While this name does not have to be unique, a distinctive name can help you identify a rule.

notify_when str

Required until v8.6.0. Deprecated in v8.13.0. Use the notify_when property in the action frequency object instead. Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific notify_when values.

rule_id str

The identifier for the rule. Until Kibana version 8.17.0 this should be a UUID v1 or v4, for later versions any format can be used. If it is omitted, an ID is randomly generated.

space_id str

An identifier for the space. If space_id is not provided, the default space is used.

tags Sequence[str]

A list of tag names that are applied to the rule.

throttle str

Deprecated in 8.13.0. Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific throttle values.

consumer String

The name of the application or feature that owns the rule.

interval String

The check interval, which specifies how frequently the rule conditions are checked. The interval must be specified in seconds, minutes, hours or days.

params String

The rule parameters, which differ for each rule type.

ruleTypeId String

The ID of the rule type that you want to call when the rule is scheduled to run. For more information about the valid values, list the rule types using Get rule types API or refer to the Rule types documentation.

actions List<Property Map>

An action that runs under defined conditions.

alertDelay Number

A number that indicates how many consecutive runs need to meet the rule conditions for an alert to occur.

enabled Boolean

Indicates if you want to run the rule on an interval basis.

flapping Property Map

kibanaConnections List<Property Map>

Kibana connection configuration block.

name String

The name of the rule. While this name does not have to be unique, a distinctive name can help you identify a rule.

notifyWhen String

Required until v8.6.0. Deprecated in v8.13.0. Use the notify_when property in the action frequency object instead. Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific notify_when values.

ruleId String

The identifier for the rule. Until Kibana version 8.17.0 this should be a UUID v1 or v4, for later versions any format can be used. If it is omitted, an ID is randomly generated.

spaceId String

An identifier for the space. If space_id is not provided, the default space is used.

tags List<String>

A list of tag names that are applied to the rule.

throttle String

Deprecated in 8.13.0. Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval. NOTE: This is a rule level property; if you update the rule in Kibana, it is automatically changed to use action-specific throttle values.

Id string

The provider-assigned unique ID for this managed resource.

LastExecutionDate string

Date of the last execution of this rule.

LastExecutionStatus string

Status of the last execution of this rule.

ScheduledTaskId string

ID of the scheduled task that will execute the alert.

Id string

The provider-assigned unique ID for this managed resource.

LastExecutionDate string

Date of the last execution of this rule.

LastExecutionStatus string

Status of the last execution of this rule.

ScheduledTaskId string

ID of the scheduled task that will execute the alert.

id string

The provider-assigned unique ID for this managed resource.

last_execution_date string

Date of the last execution of this rule.

last_execution_status string

Status of the last execution of this rule.

scheduled_task_id string

ID of the scheduled task that will execute the alert.

id String

The provider-assigned unique ID for this managed resource.

lastExecutionDate String

Date of the last execution of this rule.

lastExecutionStatus String

Status of the last execution of this rule.

scheduledTaskId String

ID of the scheduled task that will execute the alert.

id string

The provider-assigned unique ID for this managed resource.

lastExecutionDate string

Date of the last execution of this rule.

lastExecutionStatus string

Status of the last execution of this rule.

scheduledTaskId string

ID of the scheduled task that will execute the alert.

id str

The provider-assigned unique ID for this managed resource.

last_execution_date str

Date of the last execution of this rule.

last_execution_status str

Status of the last execution of this rule.

scheduled_task_id str

ID of the scheduled task that will execute the alert.

id String

The provider-assigned unique ID for this managed resource.

lastExecutionDate String

Date of the last execution of this rule.

lastExecutionStatus String

Status of the last execution of this rule.

scheduledTaskId String

ID of the scheduled task that will execute the alert.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

resource_name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

Id string

The identifier for the connector saved object.

Params string

The parameters for the action, which are sent to the connector.

AlertsFilter KibanaAlertingRuleActionAlertsFilter

Conditions that affect whether the action runs. If you specify multiple conditions, all conditions must be met for the action to run. For example, if an alert occurs within the specified time frame and matches the query, the action runs.

Frequency KibanaAlertingRuleActionFrequency

The properties that affect how often actions are generated. If the rule type supports setting summary to true, the action can be a summary of alerts at the specified notification interval. Otherwise, an action runs for each alert at the specified notification interval. NOTE: You cannot specify these parameters when notify_when or throttle are defined at the rule level.

Group string

The group name, which affects when the action runs (for example, when the threshold is met or when the alert is recovered). Each rule type has a list of valid action group names.

Id string

The identifier for the connector saved object.

Params string

The parameters for the action, which are sent to the connector.

AlertsFilter KibanaAlertingRuleActionAlertsFilter

Conditions that affect whether the action runs. If you specify multiple conditions, all conditions must be met for the action to run. For example, if an alert occurs within the specified time frame and matches the query, the action runs.

Frequency KibanaAlertingRuleActionFrequency

The properties that affect how often actions are generated. If the rule type supports setting summary to true, the action can be a summary of alerts at the specified notification interval. Otherwise, an action runs for each alert at the specified notification interval. NOTE: You cannot specify these parameters when notify_when or throttle are defined at the rule level.

Group string

The group name, which affects when the action runs (for example, when the threshold is met or when the alert is recovered). Each rule type has a list of valid action group names.

id string

The identifier for the connector saved object.

params string

The parameters for the action, which are sent to the connector.

alerts_filter object

Conditions that affect whether the action runs. If you specify multiple conditions, all conditions must be met for the action to run. For example, if an alert occurs within the specified time frame and matches the query, the action runs.

frequency object

The properties that affect how often actions are generated. If the rule type supports setting summary to true, the action can be a summary of alerts at the specified notification interval. Otherwise, an action runs for each alert at the specified notification interval. NOTE: You cannot specify these parameters when notify_when or throttle are defined at the rule level.

group string

The group name, which affects when the action runs (for example, when the threshold is met or when the alert is recovered). Each rule type has a list of valid action group names.

id String

The identifier for the connector saved object.

params String

The parameters for the action, which are sent to the connector.

alertsFilter KibanaAlertingRuleActionAlertsFilter

Conditions that affect whether the action runs. If you specify multiple conditions, all conditions must be met for the action to run. For example, if an alert occurs within the specified time frame and matches the query, the action runs.

frequency KibanaAlertingRuleActionFrequency

The properties that affect how often actions are generated. If the rule type supports setting summary to true, the action can be a summary of alerts at the specified notification interval. Otherwise, an action runs for each alert at the specified notification interval. NOTE: You cannot specify these parameters when notify_when or throttle are defined at the rule level.

group String

The group name, which affects when the action runs (for example, when the threshold is met or when the alert is recovered). Each rule type has a list of valid action group names.

id string

The identifier for the connector saved object.

params string

The parameters for the action, which are sent to the connector.

alertsFilter KibanaAlertingRuleActionAlertsFilter

Conditions that affect whether the action runs. If you specify multiple conditions, all conditions must be met for the action to run. For example, if an alert occurs within the specified time frame and matches the query, the action runs.

frequency KibanaAlertingRuleActionFrequency

The properties that affect how often actions are generated. If the rule type supports setting summary to true, the action can be a summary of alerts at the specified notification interval. Otherwise, an action runs for each alert at the specified notification interval. NOTE: You cannot specify these parameters when notify_when or throttle are defined at the rule level.

group string

The group name, which affects when the action runs (for example, when the threshold is met or when the alert is recovered). Each rule type has a list of valid action group names.

id str

The identifier for the connector saved object.

params str

The parameters for the action, which are sent to the connector.

alerts_filter KibanaAlertingRuleActionAlertsFilter

Conditions that affect whether the action runs. If you specify multiple conditions, all conditions must be met for the action to run. For example, if an alert occurs within the specified time frame and matches the query, the action runs.

frequency KibanaAlertingRuleActionFrequency

The properties that affect how often actions are generated. If the rule type supports setting summary to true, the action can be a summary of alerts at the specified notification interval. Otherwise, an action runs for each alert at the specified notification interval. NOTE: You cannot specify these parameters when notify_when or throttle are defined at the rule level.

group str

The group name, which affects when the action runs (for example, when the threshold is met or when the alert is recovered). Each rule type has a list of valid action group names.

id String

The identifier for the connector saved object.

params String

The parameters for the action, which are sent to the connector.

alertsFilter Property Map

Conditions that affect whether the action runs. If you specify multiple conditions, all conditions must be met for the action to run. For example, if an alert occurs within the specified time frame and matches the query, the action runs.

frequency Property Map

The properties that affect how often actions are generated. If the rule type supports setting summary to true, the action can be a summary of alerts at the specified notification interval. Otherwise, an action runs for each alert at the specified notification interval. NOTE: You cannot specify these parameters when notify_when or throttle are defined at the rule level.

group String

The group name, which affects when the action runs (for example, when the threshold is met or when the alert is recovered). Each rule type has a list of valid action group names.

Kql string

Defines a query filter that determines whether the action runs. Written in Kibana Query Language (KQL).

Timeframe KibanaAlertingRuleActionAlertsFilterTimeframe

Defines a period that limits whether the action runs.

Kql string

Defines a query filter that determines whether the action runs. Written in Kibana Query Language (KQL).

Timeframe KibanaAlertingRuleActionAlertsFilterTimeframe

Defines a period that limits whether the action runs.

kql string

Defines a query filter that determines whether the action runs. Written in Kibana Query Language (KQL).

timeframe object

Defines a period that limits whether the action runs.

kql String

Defines a query filter that determines whether the action runs. Written in Kibana Query Language (KQL).

timeframe KibanaAlertingRuleActionAlertsFilterTimeframe

Defines a period that limits whether the action runs.

kql string

Defines a query filter that determines whether the action runs. Written in Kibana Query Language (KQL).

timeframe KibanaAlertingRuleActionAlertsFilterTimeframe

Defines a period that limits whether the action runs.

kql str

Defines a query filter that determines whether the action runs. Written in Kibana Query Language (KQL).

timeframe KibanaAlertingRuleActionAlertsFilterTimeframe

Defines a period that limits whether the action runs.

kql String

Defines a query filter that determines whether the action runs. Written in Kibana Query Language (KQL).

timeframe Property Map

Defines a period that limits whether the action runs.

Days List<double>

Defines the days of the week that the action can run, represented as an array of numbers. For example, 1 represents Monday. An empty array is equivalent to specifying all the days of the week.

HoursEnd string

Defines the range of time in a day that the action can run. The end of the time frame in 24-hour notation (hh:mm).

HoursStart string

Defines the range of time in a day that the action can run. The start of the time frame in 24-hour notation (hh:mm).

Timezone string

The ISO time zone for the hours values. Values such as UTC and UTC+1 also work but lack built-in daylight savings time support and are not recommended.

Days []float64

Defines the days of the week that the action can run, represented as an array of numbers. For example, 1 represents Monday. An empty array is equivalent to specifying all the days of the week.

HoursEnd string

Defines the range of time in a day that the action can run. The end of the time frame in 24-hour notation (hh:mm).

HoursStart string

Defines the range of time in a day that the action can run. The start of the time frame in 24-hour notation (hh:mm).

Timezone string

The ISO time zone for the hours values. Values such as UTC and UTC+1 also work but lack built-in daylight savings time support and are not recommended.

days list(number)

Defines the days of the week that the action can run, represented as an array of numbers. For example, 1 represents Monday. An empty array is equivalent to specifying all the days of the week.

hours_end string

Defines the range of time in a day that the action can run. The end of the time frame in 24-hour notation (hh:mm).

hours_start string

Defines the range of time in a day that the action can run. The start of the time frame in 24-hour notation (hh:mm).

timezone string

The ISO time zone for the hours values. Values such as UTC and UTC+1 also work but lack built-in daylight savings time support and are not recommended.

days List<Double>

Defines the days of the week that the action can run, represented as an array of numbers. For example, 1 represents Monday. An empty array is equivalent to specifying all the days of the week.

hoursEnd String

Defines the range of time in a day that the action can run. The end of the time frame in 24-hour notation (hh:mm).

hoursStart String

Defines the range of time in a day that the action can run. The start of the time frame in 24-hour notation (hh:mm).

timezone String

The ISO time zone for the hours values. Values such as UTC and UTC+1 also work but lack built-in daylight savings time support and are not recommended.

days number[]

Defines the days of the week that the action can run, represented as an array of numbers. For example, 1 represents Monday. An empty array is equivalent to specifying all the days of the week.

hoursEnd string

Defines the range of time in a day that the action can run. The end of the time frame in 24-hour notation (hh:mm).

hoursStart string

Defines the range of time in a day that the action can run. The start of the time frame in 24-hour notation (hh:mm).

timezone string

The ISO time zone for the hours values. Values such as UTC and UTC+1 also work but lack built-in daylight savings time support and are not recommended.

days Sequence[float]

Defines the days of the week that the action can run, represented as an array of numbers. For example, 1 represents Monday. An empty array is equivalent to specifying all the days of the week.

hours_end str

Defines the range of time in a day that the action can run. The end of the time frame in 24-hour notation (hh:mm).

hours_start str

Defines the range of time in a day that the action can run. The start of the time frame in 24-hour notation (hh:mm).

timezone str

The ISO time zone for the hours values. Values such as UTC and UTC+1 also work but lack built-in daylight savings time support and are not recommended.

days List<Number>

Defines the days of the week that the action can run, represented as an array of numbers. For example, 1 represents Monday. An empty array is equivalent to specifying all the days of the week.

hoursEnd String

Defines the range of time in a day that the action can run. The end of the time frame in 24-hour notation (hh:mm).

hoursStart String

Defines the range of time in a day that the action can run. The start of the time frame in 24-hour notation (hh:mm).

timezone String

The ISO time zone for the hours values. Values such as UTC and UTC+1 also work but lack built-in daylight savings time support and are not recommended.

NotifyWhen string

Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met.

Summary bool

Indicates whether the action is a summary.

Throttle string

Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval.

NotifyWhen string

Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met.

Summary bool

Indicates whether the action is a summary.

Throttle string

Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval.

notify_when string

Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met.

summary bool

Indicates whether the action is a summary.

throttle string

Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval.

notifyWhen String

Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met.

summary Boolean

Indicates whether the action is a summary.

throttle String

Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval.

notifyWhen string

Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met.

summary boolean

Indicates whether the action is a summary.

throttle string

Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval.

notify_when str

Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met.

summary bool

Indicates whether the action is a summary.

throttle str

Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval.

notifyWhen String

Defines how often alerts generate actions. Valid values include: onActionGroupChange: Actions run when the alert status changes; onActiveAlert: Actions run when the alert becomes active and at each check interval while the rule conditions are met; onThrottleInterval: Actions run when the alert becomes active and at the interval specified in the throttle property while the rule conditions are met.

summary Boolean

Indicates whether the action is a summary.

throttle String

Defines how often an alert generates repeated actions. This custom action interval must be specified in seconds, minutes, hours, or days. For example, 10m or 1h. This property is applicable only if notify_when is onThrottleInterval.

Enabled bool

Whether the rule may enter the flapping state. When unset, the Kibana default applies. Supported only from Elastic Stack 9.3 onward.

LookBackWindow double

Minimum number of rule runs in which the status change threshold must be met.

StatusChangeThreshold double

Minimum number of times an alert must switch between active and recovered within the look-back window.

Enabled bool

Whether the rule may enter the flapping state. When unset, the Kibana default applies. Supported only from Elastic Stack 9.3 onward.

LookBackWindow float64

Minimum number of rule runs in which the status change threshold must be met.

StatusChangeThreshold float64

Minimum number of times an alert must switch between active and recovered within the look-back window.