Variable RuleDeduplication`Const`

RuleDeduplication: {
    DEDUPLICATION_DEFAULT: "DEDUPLICATION_DEFAULT";
    DEDUPLICATION_DISABLED: "DEDUPLICATION_DISABLED";
    DEDUPLICATION_ENABLED: "DEDUPLICATION_ENABLED";
} = ...

Signal deduplication mode for a detection rule.

Type Declaration

ReadonlyDEDUPLICATION_DEFAULT: "DEDUPLICATION_DEFAULT"
Use the default behavior, which deduplicates this rule's signals.
ReadonlyDEDUPLICATION_DISABLED: "DEDUPLICATION_DISABLED"
Never deduplicate this rule's signals.
ReadonlyDEDUPLICATION_ENABLED: "DEDUPLICATION_ENABLED"
Always deduplicate this rule's signals.

Variable RuleDeduplication`Const`

Type Declaration

`Readonly`DEDUPLICATION_DEFAULT: "DEDUPLICATION_DEFAULT"

`Readonly`DEDUPLICATION_DISABLED: "DEDUPLICATION_DISABLED"

`Readonly`DEDUPLICATION_ENABLED: "DEDUPLICATION_ENABLED"

Settings

Variable RuleDeduplicationConst

Type Declaration

ReadonlyDEDUPLICATION_DEFAULT: "DEDUPLICATION_DEFAULT"

ReadonlyDEDUPLICATION_DISABLED: "DEDUPLICATION_DISABLED"

ReadonlyDEDUPLICATION_ENABLED: "DEDUPLICATION_ENABLED"

Settings

Variable RuleDeduplication`Const`

`Readonly`DEDUPLICATION_DEFAULT: "DEDUPLICATION_DEFAULT"

`Readonly`DEDUPLICATION_DISABLED: "DEDUPLICATION_DISABLED"

`Readonly`DEDUPLICATION_ENABLED: "DEDUPLICATION_ENABLED"