Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Sysdig Provider
  3. API Docs
  4. MonitorAlertAnomaly
sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs
sysdiglabs/terraform-provider-sysdig

sysdig.MonitorAlertAnomaly

Explore with Pulumi AI

sysdig logo
sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs
sysdiglabs/terraform-provider-sysdig

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as sysdig from "@pulumi/sysdig";

const sample = new sysdig.MonitorAlertAnomaly("sample", {
    description: "Detects an anomaly in the cluster",
    monitors: [
        "cpu.used.percent",
        "memory.bytes.used",
    ],
    multipleAlertsBies: [
        "kubernetes.cluster.name",
        "kubernetes.namespace.name",
        "kubernetes.deployment.name",
        "kubernetes.pod.name",
    ],
    severity: 6,
    triggerAfterMinutes: 10,
});

    import pulumi
import pulumi_sysdig as sysdig

sample = sysdig.MonitorAlertAnomaly("sample",
    description="Detects an anomaly in the cluster",
    monitors=[
        "cpu.used.percent",
        "memory.bytes.used",
    ],
    multiple_alerts_bies=[
        "kubernetes.cluster.name",
        "kubernetes.namespace.name",
        "kubernetes.deployment.name",
        "kubernetes.pod.name",
    ],
    severity=6,
    trigger_after_minutes=10)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/sysdig/sysdig"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sysdig.NewMonitorAlertAnomaly(ctx, "sample", &sysdig.MonitorAlertAnomalyArgs{
			Description: pulumi.String("Detects an anomaly in the cluster"),
			Monitors: pulumi.StringArray{
				pulumi.String("cpu.used.percent"),
				pulumi.String("memory.bytes.used"),
			},
			MultipleAlertsBies: pulumi.StringArray{
				pulumi.String("kubernetes.cluster.name"),
				pulumi.String("kubernetes.namespace.name"),
				pulumi.String("kubernetes.deployment.name"),
				pulumi.String("kubernetes.pod.name"),
			},
			Severity:            pulumi.Float64(6),
			TriggerAfterMinutes: pulumi.Float64(10),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sysdig = Pulumi.Sysdig;

return await Deployment.RunAsync(() => 
{
    var sample = new Sysdig.MonitorAlertAnomaly("sample", new()
    {
        Description = "Detects an anomaly in the cluster",
        Monitors = new[]
        {
            "cpu.used.percent",
            "memory.bytes.used",
        },
        MultipleAlertsBies = new[]
        {
            "kubernetes.cluster.name",
            "kubernetes.namespace.name",
            "kubernetes.deployment.name",
            "kubernetes.pod.name",
        },
        Severity = 6,
        TriggerAfterMinutes = 10,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sysdig.MonitorAlertAnomaly;
import com.pulumi.sysdig.MonitorAlertAnomalyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var sample = new MonitorAlertAnomaly("sample", MonitorAlertAnomalyArgs.builder()
            .description("Detects an anomaly in the cluster")
            .monitors(            
                "cpu.used.percent",
                "memory.bytes.used")
            .multipleAlertsBies(            
                "kubernetes.cluster.name",
                "kubernetes.namespace.name",
                "kubernetes.deployment.name",
                "kubernetes.pod.name")
            .severity(6)
            .triggerAfterMinutes(10)
            .build());

    }
}

    resources:
  sample:
    type: sysdig:MonitorAlertAnomaly
    properties:
      description: Detects an anomaly in the cluster
      monitors:
        - cpu.used.percent
        - memory.bytes.used
      multipleAlertsBies:
        - kubernetes.cluster.name
        - kubernetes.namespace.name
        - kubernetes.deployment.name
        - kubernetes.pod.name
      severity: 6
      triggerAfterMinutes: 10

    Create MonitorAlertAnomaly Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new MonitorAlertAnomaly(name: string, args: MonitorAlertAnomalyArgs, opts?: CustomResourceOptions);
    @overload
def MonitorAlertAnomaly(resource_name: str,
                        args: MonitorAlertAnomalyArgs,
                        opts: Optional[ResourceOptions] = None)

@overload
def MonitorAlertAnomaly(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        monitors: Optional[Sequence[str]] = None,
                        trigger_after_minutes: Optional[float] = None,
                        enabled: Optional[bool] = None,
                        capture: Optional[MonitorAlertAnomalyCaptureArgs] = None,
                        group_name: Optional[str] = None,
                        monitor_alert_anomaly_id: Optional[str] = None,
                        description: Optional[str] = None,
                        multiple_alerts_bies: Optional[Sequence[str]] = None,
                        name: Optional[str] = None,
                        notification_channels: Optional[Sequence[float]] = None,
                        renotification_minutes: Optional[float] = None,
                        scope: Optional[str] = None,
                        severity: Optional[float] = None,
                        timeouts: Optional[MonitorAlertAnomalyTimeoutsArgs] = None,
                        custom_notification: Optional[MonitorAlertAnomalyCustomNotificationArgs] = None)
    func NewMonitorAlertAnomaly(ctx *Context, name string, args MonitorAlertAnomalyArgs, opts ...ResourceOption) (*MonitorAlertAnomaly, error)
    public MonitorAlertAnomaly(string name, MonitorAlertAnomalyArgs args, CustomResourceOptions? opts = null)
    public MonitorAlertAnomaly(String name, MonitorAlertAnomalyArgs args)
public MonitorAlertAnomaly(String name, MonitorAlertAnomalyArgs args, CustomResourceOptions options)

    type: sysdig:MonitorAlertAnomaly
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args MonitorAlertAnomalyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args MonitorAlertAnomalyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args MonitorAlertAnomalyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args MonitorAlertAnomalyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args MonitorAlertAnomalyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var monitorAlertAnomalyResource = new Sysdig.MonitorAlertAnomaly("monitorAlertAnomalyResource", new()
{
    Monitors = new[]
    {
        "string",
    },
    TriggerAfterMinutes = 0,
    Enabled = false,
    Capture = new Sysdig.Inputs.MonitorAlertAnomalyCaptureArgs
    {
        Duration = 0,
        Filename = "string",
        Filter = "string",
    },
    GroupName = "string",
    MonitorAlertAnomalyId = "string",
    Description = "string",
    MultipleAlertsBies = new[]
    {
        "string",
    },
    Name = "string",
    NotificationChannels = new[]
    {
        0,
    },
    RenotificationMinutes = 0,
    Scope = "string",
    Severity = 0,
    Timeouts = new Sysdig.Inputs.MonitorAlertAnomalyTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Read = "string",
        Update = "string",
    },
    CustomNotification = new Sysdig.Inputs.MonitorAlertAnomalyCustomNotificationArgs
    {
        Title = "string",
        Append = "string",
        Prepend = "string",
    },
});

    example, err := sysdig.NewMonitorAlertAnomaly(ctx, "monitorAlertAnomalyResource", &sysdig.MonitorAlertAnomalyArgs{
	Monitors: pulumi.StringArray{
		pulumi.String("string"),
	},
	TriggerAfterMinutes: pulumi.Float64(0),
	Enabled:             pulumi.Bool(false),
	Capture: &sysdig.MonitorAlertAnomalyCaptureArgs{
		Duration: pulumi.Float64(0),
		Filename: pulumi.String("string"),
		Filter:   pulumi.String("string"),
	},
	GroupName:             pulumi.String("string"),
	MonitorAlertAnomalyId: pulumi.String("string"),
	Description:           pulumi.String("string"),
	MultipleAlertsBies: pulumi.StringArray{
		pulumi.String("string"),
	},
	Name: pulumi.String("string"),
	NotificationChannels: pulumi.Float64Array{
		pulumi.Float64(0),
	},
	RenotificationMinutes: pulumi.Float64(0),
	Scope:                 pulumi.String("string"),
	Severity:              pulumi.Float64(0),
	Timeouts: &sysdig.MonitorAlertAnomalyTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Read:   pulumi.String("string"),
		Update: pulumi.String("string"),
	},
	CustomNotification: &sysdig.MonitorAlertAnomalyCustomNotificationArgs{
		Title:   pulumi.String("string"),
		Append:  pulumi.String("string"),
		Prepend: pulumi.String("string"),
	},
})

    var monitorAlertAnomalyResource = new MonitorAlertAnomaly("monitorAlertAnomalyResource", MonitorAlertAnomalyArgs.builder()
    .monitors("string")
    .triggerAfterMinutes(0)
    .enabled(false)
    .capture(MonitorAlertAnomalyCaptureArgs.builder()
        .duration(0)
        .filename("string")
        .filter("string")
        .build())
    .groupName("string")
    .monitorAlertAnomalyId("string")
    .description("string")
    .multipleAlertsBies("string")
    .name("string")
    .notificationChannels(0)
    .renotificationMinutes(0)
    .scope("string")
    .severity(0)
    .timeouts(MonitorAlertAnomalyTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .read("string")
        .update("string")
        .build())
    .customNotification(MonitorAlertAnomalyCustomNotificationArgs.builder()
        .title("string")
        .append("string")
        .prepend("string")
        .build())
    .build());

    monitor_alert_anomaly_resource = sysdig.MonitorAlertAnomaly("monitorAlertAnomalyResource",
    monitors=["string"],
    trigger_after_minutes=0,
    enabled=False,
    capture={
        "duration": 0,
        "filename": "string",
        "filter": "string",
    },
    group_name="string",
    monitor_alert_anomaly_id="string",
    description="string",
    multiple_alerts_bies=["string"],
    name="string",
    notification_channels=[0],
    renotification_minutes=0,
    scope="string",
    severity=0,
    timeouts={
        "create": "string",
        "delete": "string",
        "read": "string",
        "update": "string",
    },
    custom_notification={
        "title": "string",
        "append": "string",
        "prepend": "string",
    })

    const monitorAlertAnomalyResource = new sysdig.MonitorAlertAnomaly("monitorAlertAnomalyResource", {
    monitors: ["string"],
    triggerAfterMinutes: 0,
    enabled: false,
    capture: {
        duration: 0,
        filename: "string",
        filter: "string",
    },
    groupName: "string",
    monitorAlertAnomalyId: "string",
    description: "string",
    multipleAlertsBies: ["string"],
    name: "string",
    notificationChannels: [0],
    renotificationMinutes: 0,
    scope: "string",
    severity: 0,
    timeouts: {
        create: "string",
        "delete": "string",
        read: "string",
        update: "string",
    },
    customNotification: {
        title: "string",
        append: "string",
        prepend: "string",
    },
});

    type: sysdig:MonitorAlertAnomaly
properties:
    capture:
        duration: 0
        filename: string
        filter: string
    customNotification:
        append: string
        prepend: string
        title: string
    description: string
    enabled: false
    groupName: string
    monitorAlertAnomalyId: string
    monitors:
        - string
    multipleAlertsBies:
        - string
    name: string
    notificationChannels:
        - 0
    renotificationMinutes: 0
    scope: string
    severity: 0
    timeouts:
        create: string
        delete: string
        read: string
        update: string
    triggerAfterMinutes: 0

    MonitorAlertAnomaly Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The MonitorAlertAnomaly resource accepts the following input properties:

    Outputs

    All input properties are implicitly available as output properties. Additionally, the MonitorAlertAnomaly resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Team double
    Team ID that owns the alert.
    Version double
    Current version of the resource in Sysdig Monitor.
    Id string
    The provider-assigned unique ID for this managed resource.
    Team float64
    Team ID that owns the alert.
    Version float64
    Current version of the resource in Sysdig Monitor.
    id String
    The provider-assigned unique ID for this managed resource.
    team Double
    Team ID that owns the alert.
    version Double
    Current version of the resource in Sysdig Monitor.
    id string
    The provider-assigned unique ID for this managed resource.
    team number
    Team ID that owns the alert.
    version number
    Current version of the resource in Sysdig Monitor.
    id str
    The provider-assigned unique ID for this managed resource.
    team float
    Team ID that owns the alert.
    version float
    Current version of the resource in Sysdig Monitor.
    id String
    The provider-assigned unique ID for this managed resource.
    team Number
    Team ID that owns the alert.
    version Number
    Current version of the resource in Sysdig Monitor.

    Look up Existing MonitorAlertAnomaly Resource

    Get an existing MonitorAlertAnomaly resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: MonitorAlertAnomalyState, opts?: CustomResourceOptions): MonitorAlertAnomaly
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        capture: Optional[MonitorAlertAnomalyCaptureArgs] = None,
        custom_notification: Optional[MonitorAlertAnomalyCustomNotificationArgs] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        group_name: Optional[str] = None,
        monitor_alert_anomaly_id: Optional[str] = None,
        monitors: Optional[Sequence[str]] = None,
        multiple_alerts_bies: Optional[Sequence[str]] = None,
        name: Optional[str] = None,
        notification_channels: Optional[Sequence[float]] = None,
        renotification_minutes: Optional[float] = None,
        scope: Optional[str] = None,
        severity: Optional[float] = None,
        team: Optional[float] = None,
        timeouts: Optional[MonitorAlertAnomalyTimeoutsArgs] = None,
        trigger_after_minutes: Optional[float] = None,
        version: Optional[float] = None) -> MonitorAlertAnomaly
    func GetMonitorAlertAnomaly(ctx *Context, name string, id IDInput, state *MonitorAlertAnomalyState, opts ...ResourceOption) (*MonitorAlertAnomaly, error)
    public static MonitorAlertAnomaly Get(string name, Input<string> id, MonitorAlertAnomalyState? state, CustomResourceOptions? opts = null)
    public static MonitorAlertAnomaly get(String name, Output<String> id, MonitorAlertAnomalyState state, CustomResourceOptions options)
    resources:  _:    type: sysdig:MonitorAlertAnomaly    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Capture MonitorAlertAnomalyCapture
    CustomNotification MonitorAlertAnomalyCustomNotification
    Description string
    Enabled bool
    GroupName string
    MonitorAlertAnomalyId string
    ID of the alert created.
    Monitors List<string>
    MultipleAlertsBies List<string>
    Name string
    NotificationChannels List<double>
    RenotificationMinutes double
    Scope string
    Severity double
    Team double
    Team ID that owns the alert.
    Timeouts MonitorAlertAnomalyTimeouts
    TriggerAfterMinutes double
    Version double
    Current version of the resource in Sysdig Monitor.
    Capture MonitorAlertAnomalyCaptureArgs
    CustomNotification MonitorAlertAnomalyCustomNotificationArgs
    Description string
    Enabled bool
    GroupName string
    MonitorAlertAnomalyId string
    ID of the alert created.
    Monitors []string
    MultipleAlertsBies []string
    Name string
    NotificationChannels []float64
    RenotificationMinutes float64
    Scope string
    Severity float64
    Team float64
    Team ID that owns the alert.
    Timeouts MonitorAlertAnomalyTimeoutsArgs
    TriggerAfterMinutes float64
    Version float64
    Current version of the resource in Sysdig Monitor.
    capture MonitorAlertAnomalyCapture
    customNotification MonitorAlertAnomalyCustomNotification
    description String
    enabled Boolean
    groupName String
    monitorAlertAnomalyId String
    ID of the alert created.
    monitors List<String>
    multipleAlertsBies List<String>
    name String
    notificationChannels List<Double>
    renotificationMinutes Double
    scope String
    severity Double
    team Double
    Team ID that owns the alert.
    timeouts MonitorAlertAnomalyTimeouts
    triggerAfterMinutes Double
    version Double
    Current version of the resource in Sysdig Monitor.
    capture MonitorAlertAnomalyCapture
    customNotification MonitorAlertAnomalyCustomNotification
    description string
    enabled boolean
    groupName string
    monitorAlertAnomalyId string
    ID of the alert created.
    monitors string[]
    multipleAlertsBies string[]
    name string
    notificationChannels number[]
    renotificationMinutes number
    scope string
    severity number
    team number
    Team ID that owns the alert.
    timeouts MonitorAlertAnomalyTimeouts
    triggerAfterMinutes number
    version number
    Current version of the resource in Sysdig Monitor.
    capture Property Map
    customNotification Property Map
    description String
    enabled Boolean
    groupName String
    monitorAlertAnomalyId String
    ID of the alert created.
    monitors List<String>
    multipleAlertsBies List<String>
    name String
    notificationChannels List<Number>
    renotificationMinutes Number
    scope String
    severity Number
    team Number
    Team ID that owns the alert.
    timeouts Property Map
    triggerAfterMinutes Number
    version Number
    Current version of the resource in Sysdig Monitor.

    Supporting Types

    MonitorAlertAnomalyCapture, MonitorAlertAnomalyCaptureArgs

    Duration double
    Time frame in seconds of the capture.
    Filename string
    Defines the name of the capture file.
    Filter string
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    Duration float64
    Time frame in seconds of the capture.
    Filename string
    Defines the name of the capture file.
    Filter string
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    duration Double
    Time frame in seconds of the capture.
    filename String
    Defines the name of the capture file.
    filter String
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    duration number
    Time frame in seconds of the capture.
    filename string
    Defines the name of the capture file.
    filter string
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    duration float
    Time frame in seconds of the capture.
    filename str
    Defines the name of the capture file.
    filter str
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    duration Number
    Time frame in seconds of the capture.
    filename String
    Defines the name of the capture file.
    filter String
    Additional filter to apply to the capture. For example: proc.name contains nginx.

    MonitorAlertAnomalyCustomNotification, MonitorAlertAnomalyCustomNotificationArgs

    Title string
    Sets the title of the alert. It is commonly defined as {{__alert_name__}} is {{__alert_status__}}.
    Append string
    Text to add after the alert template.
    Prepend string
    Text to add before the alert template.
    Title string
    Sets the title of the alert. It is commonly defined as {{__alert_name__}} is {{__alert_status__}}.
    Append string
    Text to add after the alert template.
    Prepend string
    Text to add before the alert template.
    title String
    Sets the title of the alert. It is commonly defined as {{__alert_name__}} is {{__alert_status__}}.
    append String
    Text to add after the alert template.
    prepend String
    Text to add before the alert template.
    title string
    Sets the title of the alert. It is commonly defined as {{__alert_name__}} is {{__alert_status__}}.
    append string
    Text to add after the alert template.
    prepend string
    Text to add before the alert template.
    title str
    Sets the title of the alert. It is commonly defined as {{__alert_name__}} is {{__alert_status__}}.
    append str
    Text to add after the alert template.
    prepend str
    Text to add before the alert template.
    title String
    Sets the title of the alert. It is commonly defined as {{__alert_name__}} is {{__alert_status__}}.
    append String
    Text to add after the alert template.
    prepend String
    Text to add before the alert template.

    MonitorAlertAnomalyTimeouts, MonitorAlertAnomalyTimeoutsArgs

    Create string
    Delete string
    Read string
    Update string
    Create string
    Delete string
    Read string
    Update string
    create String
    delete String
    read String
    update String
    create string
    delete string
    read string
    update string
    create str
    delete str
    read str
    update str
    create String
    delete String
    read String
    update String

    Import

    Anomaly Monitor alerts can be imported using the alert ID, e.g.

    $ pulumi import sysdig:index/monitorAlertAnomaly:MonitorAlertAnomaly example 12345

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sysdig sysdiglabs/terraform-provider-sysdig
    License
    Notes
    This Pulumi package is based on the sysdig Terraform Provider.
    sysdig logo
    sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs
    sysdiglabs/terraform-provider-sysdig