This message represents the agent settings for an instance
| JSON representation |
|---|
{
"name"
:
string
,
"autoInvestigationEnabled"
:
boolean
,
"alertFilter"
:
string
,
"autoInvestigationDelay"
:
string
,
"quotaInfo"
:
{
object (
|
| Fields | |
|---|---|
name
|
Identifier. The resource name of the AgentSettings. Format: projects/{project}/locations/{location}/instances/{instance}/agentSettings |
autoInvestigationEnabled
|
Optional. Whether auto investigation is enabled for the instance. |
alertFilter
|
Optional. A single AIP-160 string representing the instance provided alert filters used for auto investigation when default settings are disabled, e.g. "detection.rule_name = /enumeration/ AND detection.detection.rule_id != 1234 AND udm.metadata.event_type = /USER_LOGIN/". |
autoInvestigationDelay
|
Optional. The delay after which auto investigation will be triggered for an alert when default settings are disabled. This is only applied if A duration in seconds with up to nine fractional digits, ending with ' |
quotaInfo
|
Output only. The quota information for the instance. |
QuotaInfo
Represents the information about an instance's quota status.
| JSON representation |
|---|
{ "autoInvestigationsQuotaLimit" : string , "manualInvestigationsQuotaLimit" : string } |
| Fields | |
|---|---|
autoInvestigationsQuotaLimit
|
Output only. The quota limit for auto investigations for the instance. |
manualInvestigationsQuotaLimit
|
Output only. The quota limit for manual investigations for the instance. |

