You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-`actions` (Attributes List) Array of automated actions taken when alerts are generated by the rule. (see [below for nested schema](#nestedatt--actions))
123
+
-`alert_suppression` (Attributes) Defines alert suppression configuration to reduce duplicate alerts. (see [below for nested schema](#nestedatt--alert_suppression))
123
124
-`anomaly_threshold` (Number) Anomaly score threshold above which the rule creates an alert. Valid values are from 0 to 100. Required for machine_learning rules.
124
125
-`author` (List of String) The rule's author.
125
126
-`building_block_type` (String) Determines if the rule acts as a building block. If set, value must be `default`. Building-block alerts are not displayed in the UI by default and are used as a foundation for other rules.
@@ -209,6 +210,28 @@ Required:
209
210
210
211
211
212
213
+
<aid="nestedatt--alert_suppression"></a>
214
+
### Nested Schema for `alert_suppression`
215
+
216
+
Required:
217
+
218
+
-`group_by` (List of String) Array of field names to group alerts by for suppression.
219
+
220
+
Optional:
221
+
222
+
-`duration` (Attributes) Duration for which alerts are suppressed. (see [below for nested schema](#nestedatt--alert_suppression--duration))
223
+
-`missing_fields_strategy` (String) Strategy for handling missing fields in suppression grouping: 'suppress' - only one alert will be created per suppress by bucket, 'doNotSuppress' - per each document a separate alert will be created.
0 commit comments