Chronicle Detection State

Indicates whether the rule generating this detection currently has alerting enabled or disabled.

Google SecOps singleSelect

Details

IDincident_chronicledetectionstate
CLI Namechronicledetectionstate
TypesingleSelect
Version-1
RequiredNo
Read OnlyNo
Use as KPINo
SearchableYes

Select Values

  • ALERTING
  • NOT_ALERTING

Associated Incident Types

Source

incidentfield-Chronicle_Detection_State.json
Download History Raw 
{
    "id": "incident_chronicledetectionstate",
    "version": -1,
    "modified": "2021-01-18T14:04:51.191002117+05:30",
    "name": "Chronicle Detection State",
    "ownerOnly": false,
    "description": "Indicates whether the rule generating this detection currently has alerting enabled or disabled.",
    "cliName": "chronicledetectionstate",
    "type": "singleSelect",
    "closeForm": false,
    "editForm": false,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "selectValues": [
        "ALERTING",
        "NOT_ALERTING"
    ],
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "associatedTypes": [
        "Chronicle Rule Detection",
        "Chronicle Curated Rule Detection"
    ],
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "5.0.0"
}