{
"id": "Cloud_Alerts_rule",
"name": "Cloud Alerts Layout Rule",
"rule_id": "Cloud_Alerts_rule",
"layout_id": "Cloud Alerts",
"description": "Default display for Cloud Alerts generated by XDR Analytics.",
"rule_name": "Cloud Alerts Layout Rule",
"alerts_filter": {
"filter": {
"AND": [
{
"OR": [
{
"SEARCH_FIELD": "cloud_provider",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "AWS"
},
{
"SEARCH_FIELD": "cloud_provider",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "AZURE"
},
{
"SEARCH_FIELD": "cloud_provider",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "GCP"
}
]
},
{
"OR": [
{
"SEARCH_FIELD": "alert_source",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "ANALYTICS_BIOC"
},
{
"SEARCH_FIELD": "alert_source",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "MAGNIFIER"
}
]
}
]
}
},
"fromVersion": "6.10.0"
}