Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Sysdig Provider
  3. API Docs
  4. MonitorAlertV2GroupOutlier
sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs
sysdiglabs/terraform-provider-sysdig

sysdig.MonitorAlertV2GroupOutlier

Explore with Pulumi AI

sysdig logo
sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs
sysdiglabs/terraform-provider-sysdig

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as sysdig from "@pulumi/sysdig";

const sample = new sysdig.MonitorAlertV2GroupOutlier("sample", {
    algorithm: "MAD",
    groupAggregation: "avg",
    groupBies: [
        "kube_pod_name",
        "container_name",
    ],
    madThreshold: 10.1,
    madTolerance: 5.5,
    metric: "sysdig_container_cpu_used_percent",
    notificationChannels: [{
        id: 1234,
        renotifyEveryMinutes: 60,
    }],
    observationWindowMinutes: 15,
    scopes: [
        {
            label: "kube_cluster_name",
            operator: "in",
            values: [
                "my_cluster_1",
                "my_cluster_2",
            ],
        },
        {
            label: "kube_deployment_name",
            operator: "equals",
            values: ["my_deployment"],
        },
    ],
    severity: "high",
    timeAggregation: "avg",
});

    import pulumi
import pulumi_sysdig as sysdig

sample = sysdig.MonitorAlertV2GroupOutlier("sample",
    algorithm="MAD",
    group_aggregation="avg",
    group_bies=[
        "kube_pod_name",
        "container_name",
    ],
    mad_threshold=10.1,
    mad_tolerance=5.5,
    metric="sysdig_container_cpu_used_percent",
    notification_channels=[{
        "id": 1234,
        "renotify_every_minutes": 60,
    }],
    observation_window_minutes=15,
    scopes=[
        {
            "label": "kube_cluster_name",
            "operator": "in",
            "values": [
                "my_cluster_1",
                "my_cluster_2",
            ],
        },
        {
            "label": "kube_deployment_name",
            "operator": "equals",
            "values": ["my_deployment"],
        },
    ],
    severity="high",
    time_aggregation="avg")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/sysdig/sysdig"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sysdig.NewMonitorAlertV2GroupOutlier(ctx, "sample", &sysdig.MonitorAlertV2GroupOutlierArgs{
			Algorithm:        pulumi.String("MAD"),
			GroupAggregation: pulumi.String("avg"),
			GroupBies: pulumi.StringArray{
				pulumi.String("kube_pod_name"),
				pulumi.String("container_name"),
			},
			MadThreshold: pulumi.Float64(10.1),
			MadTolerance: pulumi.Float64(5.5),
			Metric:       pulumi.String("sysdig_container_cpu_used_percent"),
			NotificationChannels: sysdig.MonitorAlertV2GroupOutlierNotificationChannelArray{
				&sysdig.MonitorAlertV2GroupOutlierNotificationChannelArgs{
					Id:                   pulumi.Float64(1234),
					RenotifyEveryMinutes: pulumi.Float64(60),
				},
			},
			ObservationWindowMinutes: pulumi.Float64(15),
			Scopes: sysdig.MonitorAlertV2GroupOutlierScopeArray{
				&sysdig.MonitorAlertV2GroupOutlierScopeArgs{
					Label:    pulumi.String("kube_cluster_name"),
					Operator: pulumi.String("in"),
					Values: pulumi.StringArray{
						pulumi.String("my_cluster_1"),
						pulumi.String("my_cluster_2"),
					},
				},
				&sysdig.MonitorAlertV2GroupOutlierScopeArgs{
					Label:    pulumi.String("kube_deployment_name"),
					Operator: pulumi.String("equals"),
					Values: pulumi.StringArray{
						pulumi.String("my_deployment"),
					},
				},
			},
			Severity:        pulumi.String("high"),
			TimeAggregation: pulumi.String("avg"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sysdig = Pulumi.Sysdig;

return await Deployment.RunAsync(() => 
{
    var sample = new Sysdig.MonitorAlertV2GroupOutlier("sample", new()
    {
        Algorithm = "MAD",
        GroupAggregation = "avg",
        GroupBies = new[]
        {
            "kube_pod_name",
            "container_name",
        },
        MadThreshold = 10.1,
        MadTolerance = 5.5,
        Metric = "sysdig_container_cpu_used_percent",
        NotificationChannels = new[]
        {
            new Sysdig.Inputs.MonitorAlertV2GroupOutlierNotificationChannelArgs
            {
                Id = 1234,
                RenotifyEveryMinutes = 60,
            },
        },
        ObservationWindowMinutes = 15,
        Scopes = new[]
        {
            new Sysdig.Inputs.MonitorAlertV2GroupOutlierScopeArgs
            {
                Label = "kube_cluster_name",
                Operator = "in",
                Values = new[]
                {
                    "my_cluster_1",
                    "my_cluster_2",
                },
            },
            new Sysdig.Inputs.MonitorAlertV2GroupOutlierScopeArgs
            {
                Label = "kube_deployment_name",
                Operator = "equals",
                Values = new[]
                {
                    "my_deployment",
                },
            },
        },
        Severity = "high",
        TimeAggregation = "avg",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sysdig.MonitorAlertV2GroupOutlier;
import com.pulumi.sysdig.MonitorAlertV2GroupOutlierArgs;
import com.pulumi.sysdig.inputs.MonitorAlertV2GroupOutlierNotificationChannelArgs;
import com.pulumi.sysdig.inputs.MonitorAlertV2GroupOutlierScopeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var sample = new MonitorAlertV2GroupOutlier("sample", MonitorAlertV2GroupOutlierArgs.builder()
            .algorithm("MAD")
            .groupAggregation("avg")
            .groupBies(            
                "kube_pod_name",
                "container_name")
            .madThreshold(10.1)
            .madTolerance(5.5)
            .metric("sysdig_container_cpu_used_percent")
            .notificationChannels(MonitorAlertV2GroupOutlierNotificationChannelArgs.builder()
                .id(1234)
                .renotifyEveryMinutes(60)
                .build())
            .observationWindowMinutes(15)
            .scopes(            
                MonitorAlertV2GroupOutlierScopeArgs.builder()
                    .label("kube_cluster_name")
                    .operator("in")
                    .values(                    
                        "my_cluster_1",
                        "my_cluster_2")
                    .build(),
                MonitorAlertV2GroupOutlierScopeArgs.builder()
                    .label("kube_deployment_name")
                    .operator("equals")
                    .values("my_deployment")
                    .build())
            .severity("high")
            .timeAggregation("avg")
            .build());

    }
}

    resources:
  sample:
    type: sysdig:MonitorAlertV2GroupOutlier
    properties:
      algorithm: MAD
      groupAggregation: avg
      groupBies:
        - kube_pod_name
        - container_name
      madThreshold: 10.1
      madTolerance: 5.5
      metric: sysdig_container_cpu_used_percent
      notificationChannels:
        - id: 1234
          renotifyEveryMinutes: 60
      observationWindowMinutes: 15
      scopes:
        - label: kube_cluster_name
          operator: in
          values:
            - my_cluster_1
            - my_cluster_2
        - label: kube_deployment_name
          operator: equals
          values:
            - my_deployment
      severity: high
      timeAggregation: avg

    Create MonitorAlertV2GroupOutlier Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new MonitorAlertV2GroupOutlier(name: string, args: MonitorAlertV2GroupOutlierArgs, opts?: CustomResourceOptions);
    @overload
def MonitorAlertV2GroupOutlier(resource_name: str,
                               args: MonitorAlertV2GroupOutlierArgs,
                               opts: Optional[ResourceOptions] = None)

@overload
def MonitorAlertV2GroupOutlier(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               algorithm: Optional[str] = None,
                               time_aggregation: Optional[str] = None,
                               observation_window_minutes: Optional[float] = None,
                               metric: Optional[str] = None,
                               group_bies: Optional[Sequence[str]] = None,
                               group_aggregation: Optional[str] = None,
                               group: Optional[str] = None,
                               name: Optional[str] = None,
                               description: Optional[str] = None,
                               labels: Optional[Mapping[str, str]] = None,
                               links: Optional[Sequence[MonitorAlertV2GroupOutlierLinkArgs]] = None,
                               mad_threshold: Optional[float] = None,
                               mad_tolerance: Optional[float] = None,
                               dbscan_tolerance: Optional[float] = None,
                               monitor_alert_v2_group_outlier_id: Optional[str] = None,
                               enabled: Optional[bool] = None,
                               no_data_behaviour: Optional[str] = None,
                               notification_channels: Optional[Sequence[MonitorAlertV2GroupOutlierNotificationChannelArgs]] = None,
                               custom_notification: Optional[MonitorAlertV2GroupOutlierCustomNotificationArgs] = None,
                               scopes: Optional[Sequence[MonitorAlertV2GroupOutlierScopeArgs]] = None,
                               severity: Optional[str] = None,
                               capture: Optional[MonitorAlertV2GroupOutlierCaptureArgs] = None,
                               timeouts: Optional[MonitorAlertV2GroupOutlierTimeoutsArgs] = None,
                               unreported_alert_notifications_retention_seconds: Optional[float] = None)
    func NewMonitorAlertV2GroupOutlier(ctx *Context, name string, args MonitorAlertV2GroupOutlierArgs, opts ...ResourceOption) (*MonitorAlertV2GroupOutlier, error)
    public MonitorAlertV2GroupOutlier(string name, MonitorAlertV2GroupOutlierArgs args, CustomResourceOptions? opts = null)
    public MonitorAlertV2GroupOutlier(String name, MonitorAlertV2GroupOutlierArgs args)
public MonitorAlertV2GroupOutlier(String name, MonitorAlertV2GroupOutlierArgs args, CustomResourceOptions options)

    type: sysdig:MonitorAlertV2GroupOutlier
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args MonitorAlertV2GroupOutlierArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args MonitorAlertV2GroupOutlierArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args MonitorAlertV2GroupOutlierArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args MonitorAlertV2GroupOutlierArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args MonitorAlertV2GroupOutlierArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var monitorAlertV2GroupOutlierResource = new Sysdig.MonitorAlertV2GroupOutlier("monitorAlertV2GroupOutlierResource", new()
{
    Algorithm = "string",
    TimeAggregation = "string",
    ObservationWindowMinutes = 0,
    Metric = "string",
    GroupBies = new[]
    {
        "string",
    },
    GroupAggregation = "string",
    Group = "string",
    Name = "string",
    Description = "string",
    Labels = 
    {
        { "string", "string" },
    },
    Links = new[]
    {
        new Sysdig.Inputs.MonitorAlertV2GroupOutlierLinkArgs
        {
            Type = "string",
            Href = "string",
            Id = "string",
        },
    },
    MadThreshold = 0,
    MadTolerance = 0,
    DbscanTolerance = 0,
    MonitorAlertV2GroupOutlierId = "string",
    Enabled = false,
    NoDataBehaviour = "string",
    NotificationChannels = new[]
    {
        new Sysdig.Inputs.MonitorAlertV2GroupOutlierNotificationChannelArgs
        {
            Id = 0,
            MainThreshold = false,
            NotifyOnResolve = false,
            RenotifyEveryMinutes = 0,
            WarningThreshold = false,
        },
    },
    CustomNotification = new Sysdig.Inputs.MonitorAlertV2GroupOutlierCustomNotificationArgs
    {
        Append = "string",
        Prepend = "string",
        Subject = "string",
    },
    Scopes = new[]
    {
        new Sysdig.Inputs.MonitorAlertV2GroupOutlierScopeArgs
        {
            Label = "string",
            Operator = "string",
            Values = new[]
            {
                "string",
            },
        },
    },
    Severity = "string",
    Capture = new Sysdig.Inputs.MonitorAlertV2GroupOutlierCaptureArgs
    {
        Filename = "string",
        DurationSeconds = 0,
        Enabled = false,
        Filter = "string",
        Storage = "string",
    },
    Timeouts = new Sysdig.Inputs.MonitorAlertV2GroupOutlierTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Read = "string",
        Update = "string",
    },
    UnreportedAlertNotificationsRetentionSeconds = 0,
});

    example, err := sysdig.NewMonitorAlertV2GroupOutlier(ctx, "monitorAlertV2GroupOutlierResource", &sysdig.MonitorAlertV2GroupOutlierArgs{
	Algorithm:                pulumi.String("string"),
	TimeAggregation:          pulumi.String("string"),
	ObservationWindowMinutes: pulumi.Float64(0),
	Metric:                   pulumi.String("string"),
	GroupBies: pulumi.StringArray{
		pulumi.String("string"),
	},
	GroupAggregation: pulumi.String("string"),
	Group:            pulumi.String("string"),
	Name:             pulumi.String("string"),
	Description:      pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Links: sysdig.MonitorAlertV2GroupOutlierLinkArray{
		&sysdig.MonitorAlertV2GroupOutlierLinkArgs{
			Type: pulumi.String("string"),
			Href: pulumi.String("string"),
			Id:   pulumi.String("string"),
		},
	},
	MadThreshold:                 pulumi.Float64(0),
	MadTolerance:                 pulumi.Float64(0),
	DbscanTolerance:              pulumi.Float64(0),
	MonitorAlertV2GroupOutlierId: pulumi.String("string"),
	Enabled:                      pulumi.Bool(false),
	NoDataBehaviour:              pulumi.String("string"),
	NotificationChannels: sysdig.MonitorAlertV2GroupOutlierNotificationChannelArray{
		&sysdig.MonitorAlertV2GroupOutlierNotificationChannelArgs{
			Id:                   pulumi.Float64(0),
			MainThreshold:        pulumi.Bool(false),
			NotifyOnResolve:      pulumi.Bool(false),
			RenotifyEveryMinutes: pulumi.Float64(0),
			WarningThreshold:     pulumi.Bool(false),
		},
	},
	CustomNotification: &sysdig.MonitorAlertV2GroupOutlierCustomNotificationArgs{
		Append:  pulumi.String("string"),
		Prepend: pulumi.String("string"),
		Subject: pulumi.String("string"),
	},
	Scopes: sysdig.MonitorAlertV2GroupOutlierScopeArray{
		&sysdig.MonitorAlertV2GroupOutlierScopeArgs{
			Label:    pulumi.String("string"),
			Operator: pulumi.String("string"),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Severity: pulumi.String("string"),
	Capture: &sysdig.MonitorAlertV2GroupOutlierCaptureArgs{
		Filename:        pulumi.String("string"),
		DurationSeconds: pulumi.Float64(0),
		Enabled:         pulumi.Bool(false),
		Filter:          pulumi.String("string"),
		Storage:         pulumi.String("string"),
	},
	Timeouts: &sysdig.MonitorAlertV2GroupOutlierTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Read:   pulumi.String("string"),
		Update: pulumi.String("string"),
	},
	UnreportedAlertNotificationsRetentionSeconds: pulumi.Float64(0),
})

    var monitorAlertV2GroupOutlierResource = new MonitorAlertV2GroupOutlier("monitorAlertV2GroupOutlierResource", MonitorAlertV2GroupOutlierArgs.builder()
    .algorithm("string")
    .timeAggregation("string")
    .observationWindowMinutes(0)
    .metric("string")
    .groupBies("string")
    .groupAggregation("string")
    .group("string")
    .name("string")
    .description("string")
    .labels(Map.of("string", "string"))
    .links(MonitorAlertV2GroupOutlierLinkArgs.builder()
        .type("string")
        .href("string")
        .id("string")
        .build())
    .madThreshold(0)
    .madTolerance(0)
    .dbscanTolerance(0)
    .monitorAlertV2GroupOutlierId("string")
    .enabled(false)
    .noDataBehaviour("string")
    .notificationChannels(MonitorAlertV2GroupOutlierNotificationChannelArgs.builder()
        .id(0)
        .mainThreshold(false)
        .notifyOnResolve(false)
        .renotifyEveryMinutes(0)
        .warningThreshold(false)
        .build())
    .customNotification(MonitorAlertV2GroupOutlierCustomNotificationArgs.builder()
        .append("string")
        .prepend("string")
        .subject("string")
        .build())
    .scopes(MonitorAlertV2GroupOutlierScopeArgs.builder()
        .label("string")
        .operator("string")
        .values("string")
        .build())
    .severity("string")
    .capture(MonitorAlertV2GroupOutlierCaptureArgs.builder()
        .filename("string")
        .durationSeconds(0)
        .enabled(false)
        .filter("string")
        .storage("string")
        .build())
    .timeouts(MonitorAlertV2GroupOutlierTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .read("string")
        .update("string")
        .build())
    .unreportedAlertNotificationsRetentionSeconds(0)
    .build());

    monitor_alert_v2_group_outlier_resource = sysdig.MonitorAlertV2GroupOutlier("monitorAlertV2GroupOutlierResource",
    algorithm="string",
    time_aggregation="string",
    observation_window_minutes=0,
    metric="string",
    group_bies=["string"],
    group_aggregation="string",
    group="string",
    name="string",
    description="string",
    labels={
        "string": "string",
    },
    links=[{
        "type": "string",
        "href": "string",
        "id": "string",
    }],
    mad_threshold=0,
    mad_tolerance=0,
    dbscan_tolerance=0,
    monitor_alert_v2_group_outlier_id="string",
    enabled=False,
    no_data_behaviour="string",
    notification_channels=[{
        "id": 0,
        "main_threshold": False,
        "notify_on_resolve": False,
        "renotify_every_minutes": 0,
        "warning_threshold": False,
    }],
    custom_notification={
        "append": "string",
        "prepend": "string",
        "subject": "string",
    },
    scopes=[{
        "label": "string",
        "operator": "string",
        "values": ["string"],
    }],
    severity="string",
    capture={
        "filename": "string",
        "duration_seconds": 0,
        "enabled": False,
        "filter": "string",
        "storage": "string",
    },
    timeouts={
        "create": "string",
        "delete": "string",
        "read": "string",
        "update": "string",
    },
    unreported_alert_notifications_retention_seconds=0)

    const monitorAlertV2GroupOutlierResource = new sysdig.MonitorAlertV2GroupOutlier("monitorAlertV2GroupOutlierResource", {
    algorithm: "string",
    timeAggregation: "string",
    observationWindowMinutes: 0,
    metric: "string",
    groupBies: ["string"],
    groupAggregation: "string",
    group: "string",
    name: "string",
    description: "string",
    labels: {
        string: "string",
    },
    links: [{
        type: "string",
        href: "string",
        id: "string",
    }],
    madThreshold: 0,
    madTolerance: 0,
    dbscanTolerance: 0,
    monitorAlertV2GroupOutlierId: "string",
    enabled: false,
    noDataBehaviour: "string",
    notificationChannels: [{
        id: 0,
        mainThreshold: false,
        notifyOnResolve: false,
        renotifyEveryMinutes: 0,
        warningThreshold: false,
    }],
    customNotification: {
        append: "string",
        prepend: "string",
        subject: "string",
    },
    scopes: [{
        label: "string",
        operator: "string",
        values: ["string"],
    }],
    severity: "string",
    capture: {
        filename: "string",
        durationSeconds: 0,
        enabled: false,
        filter: "string",
        storage: "string",
    },
    timeouts: {
        create: "string",
        "delete": "string",
        read: "string",
        update: "string",
    },
    unreportedAlertNotificationsRetentionSeconds: 0,
});

    type: sysdig:MonitorAlertV2GroupOutlier
properties:
    algorithm: string
    capture:
        durationSeconds: 0
        enabled: false
        filename: string
        filter: string
        storage: string
    customNotification:
        append: string
        prepend: string
        subject: string
    dbscanTolerance: 0
    description: string
    enabled: false
    group: string
    groupAggregation: string
    groupBies:
        - string
    labels:
        string: string
    links:
        - href: string
          id: string
          type: string
    madThreshold: 0
    madTolerance: 0
    metric: string
    monitorAlertV2GroupOutlierId: string
    name: string
    noDataBehaviour: string
    notificationChannels:
        - id: 0
          mainThreshold: false
          notifyOnResolve: false
          renotifyEveryMinutes: 0
          warningThreshold: false
    observationWindowMinutes: 0
    scopes:
        - label: string
          operator: string
          values:
            - string
    severity: string
    timeAggregation: string
    timeouts:
        create: string
        delete: string
        read: string
        update: string
    unreportedAlertNotificationsRetentionSeconds: 0

    MonitorAlertV2GroupOutlier Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The MonitorAlertV2GroupOutlier resource accepts the following input properties:

    Outputs

    All input properties are implicitly available as output properties. Additionally, the MonitorAlertV2GroupOutlier resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Team double
    Team ID that owns the alert.
    Version double
    Current version of the resource in Sysdig Monitor.
    Id string
    The provider-assigned unique ID for this managed resource.
    Team float64
    Team ID that owns the alert.
    Version float64
    Current version of the resource in Sysdig Monitor.
    id String
    The provider-assigned unique ID for this managed resource.
    team Double
    Team ID that owns the alert.
    version Double
    Current version of the resource in Sysdig Monitor.
    id string
    The provider-assigned unique ID for this managed resource.
    team number
    Team ID that owns the alert.
    version number
    Current version of the resource in Sysdig Monitor.
    id str
    The provider-assigned unique ID for this managed resource.
    team float
    Team ID that owns the alert.
    version float
    Current version of the resource in Sysdig Monitor.
    id String
    The provider-assigned unique ID for this managed resource.
    team Number
    Team ID that owns the alert.
    version Number
    Current version of the resource in Sysdig Monitor.

    Look up Existing MonitorAlertV2GroupOutlier Resource

    Get an existing MonitorAlertV2GroupOutlier resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: MonitorAlertV2GroupOutlierState, opts?: CustomResourceOptions): MonitorAlertV2GroupOutlier
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        algorithm: Optional[str] = None,
        capture: Optional[MonitorAlertV2GroupOutlierCaptureArgs] = None,
        custom_notification: Optional[MonitorAlertV2GroupOutlierCustomNotificationArgs] = None,
        dbscan_tolerance: Optional[float] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        group: Optional[str] = None,
        group_aggregation: Optional[str] = None,
        group_bies: Optional[Sequence[str]] = None,
        labels: Optional[Mapping[str, str]] = None,
        links: Optional[Sequence[MonitorAlertV2GroupOutlierLinkArgs]] = None,
        mad_threshold: Optional[float] = None,
        mad_tolerance: Optional[float] = None,
        metric: Optional[str] = None,
        monitor_alert_v2_group_outlier_id: Optional[str] = None,
        name: Optional[str] = None,
        no_data_behaviour: Optional[str] = None,
        notification_channels: Optional[Sequence[MonitorAlertV2GroupOutlierNotificationChannelArgs]] = None,
        observation_window_minutes: Optional[float] = None,
        scopes: Optional[Sequence[MonitorAlertV2GroupOutlierScopeArgs]] = None,
        severity: Optional[str] = None,
        team: Optional[float] = None,
        time_aggregation: Optional[str] = None,
        timeouts: Optional[MonitorAlertV2GroupOutlierTimeoutsArgs] = None,
        unreported_alert_notifications_retention_seconds: Optional[float] = None,
        version: Optional[float] = None) -> MonitorAlertV2GroupOutlier
    func GetMonitorAlertV2GroupOutlier(ctx *Context, name string, id IDInput, state *MonitorAlertV2GroupOutlierState, opts ...ResourceOption) (*MonitorAlertV2GroupOutlier, error)
    public static MonitorAlertV2GroupOutlier Get(string name, Input<string> id, MonitorAlertV2GroupOutlierState? state, CustomResourceOptions? opts = null)
    public static MonitorAlertV2GroupOutlier get(String name, Output<String> id, MonitorAlertV2GroupOutlierState state, CustomResourceOptions options)
    resources:  _:    type: sysdig:MonitorAlertV2GroupOutlier    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Algorithm string
    Capture MonitorAlertV2GroupOutlierCapture
    CustomNotification MonitorAlertV2GroupOutlierCustomNotification
    DbscanTolerance double
    Description string
    Enabled bool
    Group string
    GroupAggregation string
    GroupBies List<string>
    Labels Dictionary<string, string>
    Links List<MonitorAlertV2GroupOutlierLink>
    MadThreshold double
    MadTolerance double
    Metric string
    MonitorAlertV2GroupOutlierId string
    ID of the alert created.
    Name string
    NoDataBehaviour string
    NotificationChannels List<MonitorAlertV2GroupOutlierNotificationChannel>
    ObservationWindowMinutes double
    Scopes List<MonitorAlertV2GroupOutlierScope>
    Severity string
    Team double
    Team ID that owns the alert.
    TimeAggregation string
    Timeouts MonitorAlertV2GroupOutlierTimeouts
    UnreportedAlertNotificationsRetentionSeconds double
    Version double
    Current version of the resource in Sysdig Monitor.
    Algorithm string
    Capture MonitorAlertV2GroupOutlierCaptureArgs
    CustomNotification MonitorAlertV2GroupOutlierCustomNotificationArgs
    DbscanTolerance float64
    Description string
    Enabled bool
    Group string
    GroupAggregation string
    GroupBies []string
    Labels map[string]string
    Links []MonitorAlertV2GroupOutlierLinkArgs
    MadThreshold float64
    MadTolerance float64
    Metric string
    MonitorAlertV2GroupOutlierId string
    ID of the alert created.
    Name string
    NoDataBehaviour string
    NotificationChannels []MonitorAlertV2GroupOutlierNotificationChannelArgs
    ObservationWindowMinutes float64
    Scopes []MonitorAlertV2GroupOutlierScopeArgs
    Severity string
    Team float64
    Team ID that owns the alert.
    TimeAggregation string
    Timeouts MonitorAlertV2GroupOutlierTimeoutsArgs
    UnreportedAlertNotificationsRetentionSeconds float64
    Version float64
    Current version of the resource in Sysdig Monitor.
    algorithm String
    capture MonitorAlertV2GroupOutlierCapture
    customNotification MonitorAlertV2GroupOutlierCustomNotification
    dbscanTolerance Double
    description String
    enabled Boolean
    group String
    groupAggregation String
    groupBies List<String>
    labels Map<String,String>
    links List<MonitorAlertV2GroupOutlierLink>
    madThreshold Double
    madTolerance Double
    metric String
    monitorAlertV2GroupOutlierId String
    ID of the alert created.
    name String
    noDataBehaviour String
    notificationChannels List<MonitorAlertV2GroupOutlierNotificationChannel>
    observationWindowMinutes Double
    scopes List<MonitorAlertV2GroupOutlierScope>
    severity String
    team Double
    Team ID that owns the alert.
    timeAggregation String
    timeouts MonitorAlertV2GroupOutlierTimeouts
    unreportedAlertNotificationsRetentionSeconds Double
    version Double
    Current version of the resource in Sysdig Monitor.
    algorithm string
    capture MonitorAlertV2GroupOutlierCapture
    customNotification MonitorAlertV2GroupOutlierCustomNotification
    dbscanTolerance number
    description string
    enabled boolean
    group string
    groupAggregation string
    groupBies string[]
    labels {[key: string]: string}
    links MonitorAlertV2GroupOutlierLink[]
    madThreshold number
    madTolerance number
    metric string
    monitorAlertV2GroupOutlierId string
    ID of the alert created.
    name string
    noDataBehaviour string
    notificationChannels MonitorAlertV2GroupOutlierNotificationChannel[]
    observationWindowMinutes number
    scopes MonitorAlertV2GroupOutlierScope[]
    severity string
    team number
    Team ID that owns the alert.
    timeAggregation string
    timeouts MonitorAlertV2GroupOutlierTimeouts
    unreportedAlertNotificationsRetentionSeconds number
    version number
    Current version of the resource in Sysdig Monitor.
    algorithm str
    capture MonitorAlertV2GroupOutlierCaptureArgs
    custom_notification MonitorAlertV2GroupOutlierCustomNotificationArgs
    dbscan_tolerance float
    description str
    enabled bool
    group str
    group_aggregation str
    group_bies Sequence[str]
    labels Mapping[str, str]
    links Sequence[MonitorAlertV2GroupOutlierLinkArgs]
    mad_threshold float
    mad_tolerance float
    metric str
    monitor_alert_v2_group_outlier_id str
    ID of the alert created.
    name str
    no_data_behaviour str
    notification_channels Sequence[MonitorAlertV2GroupOutlierNotificationChannelArgs]
    observation_window_minutes float
    scopes Sequence[MonitorAlertV2GroupOutlierScopeArgs]
    severity str
    team float
    Team ID that owns the alert.
    time_aggregation str
    timeouts MonitorAlertV2GroupOutlierTimeoutsArgs
    unreported_alert_notifications_retention_seconds float
    version float
    Current version of the resource in Sysdig Monitor.

    Supporting Types

    MonitorAlertV2GroupOutlierCapture, MonitorAlertV2GroupOutlierCaptureArgs

    Filename string
    Defines the name of the capture file. Must have .scap suffix.
    DurationSeconds double
    Time frame of the capture. Default: 15.
    Enabled bool
    Wether to enable captures. Default: true.
    Filter string
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    Storage string
    Custom bucket where to save the capture.
    Filename string
    Defines the name of the capture file. Must have .scap suffix.
    DurationSeconds float64
    Time frame of the capture. Default: 15.
    Enabled bool
    Wether to enable captures. Default: true.
    Filter string
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    Storage string
    Custom bucket where to save the capture.
    filename String
    Defines the name of the capture file. Must have .scap suffix.
    durationSeconds Double
    Time frame of the capture. Default: 15.
    enabled Boolean
    Wether to enable captures. Default: true.
    filter String
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    storage String
    Custom bucket where to save the capture.
    filename string
    Defines the name of the capture file. Must have .scap suffix.
    durationSeconds number
    Time frame of the capture. Default: 15.
    enabled boolean
    Wether to enable captures. Default: true.
    filter string
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    storage string
    Custom bucket where to save the capture.
    filename str
    Defines the name of the capture file. Must have .scap suffix.
    duration_seconds float
    Time frame of the capture. Default: 15.
    enabled bool
    Wether to enable captures. Default: true.
    filter str
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    storage str
    Custom bucket where to save the capture.
    filename String
    Defines the name of the capture file. Must have .scap suffix.
    durationSeconds Number
    Time frame of the capture. Default: 15.
    enabled Boolean
    Wether to enable captures. Default: true.
    filter String
    Additional filter to apply to the capture. For example: proc.name contains nginx.
    storage String
    Custom bucket where to save the capture.

    MonitorAlertV2GroupOutlierCustomNotification, MonitorAlertV2GroupOutlierCustomNotificationArgs

    Append string
    Text to add after the alert template.
    Prepend string
    Text to add before the alert template.
    Subject string
    Sets the title of the alert.
    Append string
    Text to add after the alert template.
    Prepend string
    Text to add before the alert template.
    Subject string
    Sets the title of the alert.
    append String
    Text to add after the alert template.
    prepend String
    Text to add before the alert template.
    subject String
    Sets the title of the alert.
    append string
    Text to add after the alert template.
    prepend string
    Text to add before the alert template.
    subject string
    Sets the title of the alert.
    append str
    Text to add after the alert template.
    prepend str
    Text to add before the alert template.
    subject str
    Sets the title of the alert.
    append String
    Text to add after the alert template.
    prepend String
    Text to add before the alert template.
    subject String
    Sets the title of the alert.
    Type string
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.
    Href string
    When using runbook type, url of the external resource.
    Id string
    When using dashboard type, dashboard id.
    Type string
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.
    Href string
    When using runbook type, url of the external resource.
    Id string
    When using dashboard type, dashboard id.
    type String
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.
    href String
    When using runbook type, url of the external resource.
    id String
    When using dashboard type, dashboard id.
    type string
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.
    href string
    When using runbook type, url of the external resource.
    id string
    When using dashboard type, dashboard id.
    type str
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.
    href str
    When using runbook type, url of the external resource.
    id str
    When using dashboard type, dashboard id.
    type String
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.
    href String
    When using runbook type, url of the external resource.
    id String
    When using dashboard type, dashboard id.

    MonitorAlertV2GroupOutlierNotificationChannel, MonitorAlertV2GroupOutlierNotificationChannelArgs

    Id double
    The ID of the notification channel.
    MainThreshold bool
    Whether this notification channel is used for the main threshold of the alert. Default: true.
    NotifyOnResolve bool
    Wether to send a notification when the alert is resolved. Default: true.
    RenotifyEveryMinutes double
    the amount of minutes to wait before re sending the notification to this channel. 0 means no renotification enabled. Default: 0.
    Type string
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.

    Deprecated: Deprecated

    WarningThreshold bool
    Whether this notification channel is used for the warning threshold of the alert. Default: false.
    Id float64
    The ID of the notification channel.
    MainThreshold bool
    Whether this notification channel is used for the main threshold of the alert. Default: true.
    NotifyOnResolve bool
    Wether to send a notification when the alert is resolved. Default: true.
    RenotifyEveryMinutes float64
    the amount of minutes to wait before re sending the notification to this channel. 0 means no renotification enabled. Default: 0.
    Type string
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.

    Deprecated: Deprecated

    WarningThreshold bool
    Whether this notification channel is used for the warning threshold of the alert. Default: false.
    id Double
    The ID of the notification channel.
    mainThreshold Boolean
    Whether this notification channel is used for the main threshold of the alert. Default: true.
    notifyOnResolve Boolean
    Wether to send a notification when the alert is resolved. Default: true.
    renotifyEveryMinutes Double
    the amount of minutes to wait before re sending the notification to this channel. 0 means no renotification enabled. Default: 0.
    type String
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.

    Deprecated: Deprecated

    warningThreshold Boolean
    Whether this notification channel is used for the warning threshold of the alert. Default: false.
    id number
    The ID of the notification channel.
    mainThreshold boolean
    Whether this notification channel is used for the main threshold of the alert. Default: true.
    notifyOnResolve boolean
    Wether to send a notification when the alert is resolved. Default: true.
    renotifyEveryMinutes number
    the amount of minutes to wait before re sending the notification to this channel. 0 means no renotification enabled. Default: 0.
    type string
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.

    Deprecated: Deprecated

    warningThreshold boolean
    Whether this notification channel is used for the warning threshold of the alert. Default: false.
    id float
    The ID of the notification channel.
    main_threshold bool
    Whether this notification channel is used for the main threshold of the alert. Default: true.
    notify_on_resolve bool
    Wether to send a notification when the alert is resolved. Default: true.
    renotify_every_minutes float
    the amount of minutes to wait before re sending the notification to this channel. 0 means no renotification enabled. Default: 0.
    type str
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.

    Deprecated: Deprecated

    warning_threshold bool
    Whether this notification channel is used for the warning threshold of the alert. Default: false.
    id Number
    The ID of the notification channel.
    mainThreshold Boolean
    Whether this notification channel is used for the main threshold of the alert. Default: true.
    notifyOnResolve Boolean
    Wether to send a notification when the alert is resolved. Default: true.
    renotifyEveryMinutes Number
    the amount of minutes to wait before re sending the notification to this channel. 0 means no renotification enabled. Default: 0.
    type String
    Type of link. Must be runbook, for generic links, or dashboard, for internal links to existing dashboards.

    Deprecated: Deprecated

    warningThreshold Boolean
    Whether this notification channel is used for the warning threshold of the alert. Default: false.

    MonitorAlertV2GroupOutlierScope, MonitorAlertV2GroupOutlierScopeArgs

    Label string
    Label in prometheus notation to select a part of the infrastructure.
    Operator string
    Operator to match the label. It can be equals, notEquals, in, notIn, contains, notContains, startsWith.
    Values List<string>
    List of values to match the scope.
    Label string
    Label in prometheus notation to select a part of the infrastructure.
    Operator string
    Operator to match the label. It can be equals, notEquals, in, notIn, contains, notContains, startsWith.
    Values []string
    List of values to match the scope.
    label String
    Label in prometheus notation to select a part of the infrastructure.
    operator String
    Operator to match the label. It can be equals, notEquals, in, notIn, contains, notContains, startsWith.
    values List<String>
    List of values to match the scope.
    label string
    Label in prometheus notation to select a part of the infrastructure.
    operator string
    Operator to match the label. It can be equals, notEquals, in, notIn, contains, notContains, startsWith.
    values string[]
    List of values to match the scope.
    label str
    Label in prometheus notation to select a part of the infrastructure.
    operator str
    Operator to match the label. It can be equals, notEquals, in, notIn, contains, notContains, startsWith.
    values Sequence[str]
    List of values to match the scope.
    label String
    Label in prometheus notation to select a part of the infrastructure.
    operator String
    Operator to match the label. It can be equals, notEquals, in, notIn, contains, notContains, startsWith.
    values List<String>
    List of values to match the scope.

    MonitorAlertV2GroupOutlierTimeouts, MonitorAlertV2GroupOutlierTimeoutsArgs

    Create string
    Delete string
    Read string
    Update string
    Create string
    Delete string
    Read string
    Update string
    create String
    delete String
    read String
    update String
    create string
    delete string
    read string
    update string
    create str
    delete str
    read str
    update str
    create String
    delete String
    read String
    update String

    Import

    Group Outlier alerts can be imported using the alert ID, e.g.

    $ pulumi import sysdig:index/monitorAlertV2GroupOutlier:MonitorAlertV2GroupOutlier example 12345

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sysdig sysdiglabs/terraform-provider-sysdig
    License
    Notes
    This Pulumi package is based on the sysdig Terraform Provider.
    sysdig logo
    sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs
    sysdiglabs/terraform-provider-sysdig