Interface AlertConfig

Window for collating Signals into security alerts. Duration string — compact day/hour/minute/second components, e.g. 1d, 12h (see Schedule.at_least_every in common.proto for the grammar). Reads return the value as supplied. When unset or empty, the window is 1h; the window in effect is reported in effective_default_security_alert_collation_window.

Window for collating SystemEvents into system alerts. Duration string — compact day/hour/minute/second components, e.g. 1d, 12h (see Schedule.at_least_every in common.proto for the grammar). Reads return the value as supplied. When unset or empty, the window is 1d; the window in effect is reported in effective_default_system_alert_collation_window.

The security alert collation window in effect: default_security_alert_collation_window when set, otherwise 1h.

The system alert collation window in effect: default_system_alert_collation_window when set, otherwise 1d.

Opaque entity tag for optimistic concurrency. Returned on every read; pass it back as the Update request's etag to make the update conditional on the resource being unchanged.

Export destination for security alerts. When unset, export is off and reads return {"enabled": false}.

Export destination for system alerts. When unset, export is off and reads return {"enabled": false}.

Monotonic version, bumped on each update. Informational; use etag for optimistic concurrency.