Kibana Post Alerting Rules

• namestring

  Required
  The name of the rule. While not required to be unique, a distinctive name can help identify a rule.
• tagsarray
  The tags for the rule. Default is an empty array.
• paramsobject

  Required
  The parameters for the rule.
• actionsarray
  An array of action objects. Default is an empty array.
• enabledboolean
  Indicates whether to run the rule on an interval basis after it is created. Default is true.
• rule_idstring
  The identifier for the rule. If omitted, an ID is randomly generated.
• consumerstring

  Required
  The name of the application or feature that owns the rule. Examples include `alerts`, `apm`, `discover`, `infrastructure`, `logs`, `metrics`, `ml`, `monitoring`, `securitySolution`, `siem`, `stackAlerts`, or `uptime`.
• scheduleobject

  Required
  The check interval, specifying how frequently the rule conditions are checked.
• throttlestring
  Defines how often an alert generates repeated actions. Applicable only if notify_when is set to onThrottleInterval. Examples: '''10s''', '''5m''', '''1h'''.
• notify_whenstring

  Required
  Indicates how often alerts generate actions. Valid values include `onActionGroupChange`, `onActiveAlert`, or `onThrottleInterval`.
• rule_type_idstring

  Required
  The rule type identifier.

• data

  Required
  Data from the action execution
• errorstring
  Error if any occurred during the execution of the action
• successfulboolean

  Required
  Whether or not the action execution was successful or not

No verified related use cases are linked yet.

No published Skills explicitly reference this Action yet.