AgentSettings

This message represents the agent settings for an instance

JSON representation 
{
  "name": string,
  "autoInvestigationEnabled": boolean,
  "alertFilter": string,
  "autoInvestigationDelay": string,
  "quotaInfo": {
    object (QuotaInfo)
  }
}
Fields
name

string

Identifier. The resource name of the AgentSettings. Format: projects/{project}/locations/{location}/instances/{instance}/agentSettings
autoInvestigationEnabled

boolean

Optional. Whether auto investigation is enabled for the instance.
alertFilter

string

Optional. A single AIP-160 string representing the instance provided alert filters used for auto investigation when default settings are disabled, e.g. "detection.rule_name = /enumeration/ AND detection.detection.rule_id != 1234 AND udm.metadata.event_type = /USER_LOGIN/".
autoInvestigationDelay

string (Duration format)

Optional. The delay after which auto investigation will be triggered for an alert when default settings are disabled. This is only applied if autoInvestigationEnabled is true.

A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
quotaInfo

object (QuotaInfo)

Output only. The quota information for the instance.

QuotaInfo

Represents the information about an instance's quota status.

JSON representation 
{
  "autoInvestigationsQuotaLimit": string,
  "manualInvestigationsQuotaLimit": string
}
Fields
autoInvestigationsQuotaLimit

string (int64 format)

Output only. The quota limit for auto investigations for the instance.
manualInvestigationsQuotaLimit

string (int64 format)

Output only. The quota limit for manual investigations for the instance.