{
  "id": "Cloud_Alerts_rule",
  "name": "Cloud Alerts Layout Rule",
  "rule_id": "Cloud_Alerts_rule",
  "layout_id": "Cloud Alerts",
  "description": "Default display for Cloud Alerts generated by XDR Analytics.",
  "rule_name": "Cloud Alerts Layout Rule",
  "alerts_filter": {
    "filter": {
      "AND": [
        {
          "OR": [
            {
              "SEARCH_FIELD": "cloud_provider",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "AWS"
            },
            {
              "SEARCH_FIELD": "cloud_provider",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "AZURE"
            },
            {
              "SEARCH_FIELD": "cloud_provider",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "GCP"
            }
          ]
        },
        {
          "OR": [
            {
              "SEARCH_FIELD": "alert_source",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "ANALYTICS_BIOC"
            },
            {
              "SEARCH_FIELD": "alert_source",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "MAGNIFIER"
            }
          ]
        }
      ]
    }
  },
  "fromVersion": "6.10.0"
}