resource "datadog_security_monitoring_rule" "empty_notification_example" {
  name = "Empty Notification Entry"
  type = "log_detection"

  query {
    query       = "source:test @msg:test"
    aggregation = "count"
  }

  case {
    status        = "low"
    condition     = "a > 0"
    notifications = [""]  # empty entry triggers panic
  }

  message = "message.\n"
}