[SEC-14142]evaluationWindow and keepAlive doc (#1941)

Co-authored-by: ci.datadog-api-spec <[email protected]>
Co-authored-by: api-clients-generation-pipeline[bot] <54105614+api-clients-generation-pipeline[bot]@users.noreply.github.com>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2024-08-08 20:00:53.893046",
-            "spec_repo_commit": "643e3eaf"
+            "regenerated": "2024-08-09 12:06:49.961468",
+            "spec_repo_commit": "a21ba287"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2024-08-08 20:00:53.919209",
-            "spec_repo_commit": "643e3eaf"
+            "regenerated": "2024-08-09 12:06:49.979811",
+            "spec_repo_commit": "a21ba287"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -18054,8 +18054,7 @@ components:
       description: 'A time window is specified to match when at least one of the cases
         matches true. This is a sliding window
 
-        and evaluates in real time. For third party rules, it should equal max signal
-        duration.'
+        and evaluates in real time. For third party rules, this field is not used.'
       enum:
       - 0
       - 60
@@ -18100,7 +18099,7 @@ components:
     SecurityMonitoringRuleKeepAlive:
       description: "Once a signal is generated, the signal will remain \u201Copen\u201D
         if a case is matched at least once within\nthis keep alive window. For third
-        party rules, it should equal max signal duration."
+        party rules, this field is not used."
       enum:
       - 0
       - 60

lib/datadog_api_client/v2/models/security_monitoring_rule_evaluation_window.rb

@@ -18,7 +18,7 @@
 
 module DatadogAPIClient::V2
   # A time window is specified to match when at least one of the cases matches true. This is a sliding window
-  # and evaluates in real time. For third party rules, it should equal max signal duration.
+  # and evaluates in real time. For third party rules, this field is not used.
   class SecurityMonitoringRuleEvaluationWindow
     include BaseEnumModel
 

lib/datadog_api_client/v2/models/security_monitoring_rule_keep_alive.rb

@@ -18,7 +18,7 @@
 
 module DatadogAPIClient::V2
   # Once a signal is generated, the signal will remain “open” if a case is matched at least once within
-  # this keep alive window. For third party rules, it should equal max signal duration.
+  # this keep alive window. For third party rules, this field is not used.
   class SecurityMonitoringRuleKeepAlive
     include BaseEnumModel
 

lib/datadog_api_client/v2/models/security_monitoring_rule_options.rb

@@ -35,7 +35,7 @@ class SecurityMonitoringRuleOptions
     attr_accessor :detection_method
 
     # A time window is specified to match when at least one of the cases matches true. This is a sliding window
-    # and evaluates in real time. For third party rules, it should equal max signal duration.
+    # and evaluates in real time. For third party rules, this field is not used.
     attr_accessor :evaluation_window
 
     # Hardcoded evaluator type.
@@ -45,7 +45,7 @@ class SecurityMonitoringRuleOptions
     attr_accessor :impossible_travel_options
 
     # Once a signal is generated, the signal will remain “open” if a case is matched at least once within
-    # this keep alive window. For third party rules, it should equal max signal duration.
+    # this keep alive window. For third party rules, this field is not used.
     attr_accessor :keep_alive
 
     # A signal will “close” regardless of the query being matched once the time exceeds the maximum duration.