Chronicle Rule Type

Whether the rule generating this detection is a single event or multi-event rule.

Details

ID	`incident_chronicleruletype`
CLI Name	`chronicleruletype`
Type	singleSelect
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	Yes

Select Values

SINGLE_EVENT
MULTI_EVENT

Associated Incident Types

Source

incidentfield-Chronicle_Rule_Type.json

Download History Raw

{
    "id": "incident_chronicleruletype",
    "version": -1,
    "modified": "2021-01-18T14:04:51.689824094+05:30",
    "name": "Chronicle Rule Type",
    "ownerOnly": false,
    "description": "Whether the rule generating this detection is a single event or multi-event rule.",
    "cliName": "chronicleruletype",
    "type": "singleSelect",
    "closeForm": false,
    "editForm": false,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "selectValues": [
        "SINGLE_EVENT",
        "MULTI_EVENT"
    ],
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "associatedTypes": [
        "Chronicle Rule Detection",
        "Chronicle Curated Rule Detection"
    ],
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "5.0.0"
}