ActivityRule

{
  "name": string,
  "displayName": string,
  "description": string,
  "windowSize": string,
  "threshold": string,
  "createTime": string,
  "updateTime": string,
  "triggerSource": string,
  "supersededAlerts": [
    string
  ],
  "supersedingAlert": string,
  "actionNames": [
    string
  ],
  "query": string
}

string

Rule name.

string

Alert display name.

string

Description of the rule.

string (Duration format)

Rule window size. Possible values are 1 hour or 24 hours.

string

Alert threshold is for example “COUNT > 5”.

string (Timestamp format)

Rule create timestamp.

string (Timestamp format)

The timestamp of the last update to the rule.

string

The trigger sources for this rule.

• GMAIL_EVENTS
• DEVICE_EVENTS
• USER_EVENTS

string

List of alert IDs superseded by this alert. It is used to indicate that this alert is essentially extension of superseded alerts and we found the relationship after creating these alerts.

string

Alert ID superseding this alert. It is used to indicate that superseding alert is essentially extension of this alert and we found the relationship after creating both alerts.

string

List of action names associated with the rule threshold.

string

Query that is used to get the data from the associated source.