You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
/// The rule query of the suppression rule, with the same syntax as the search bar for detection rules.
39
39
#[serde(rename = "rule_query")]
40
40
pubrule_query:Option<String>,
41
+
/// A Unix millisecond timestamp giving a start date for the suppression rule. After this date, it will start suppressing signals.
42
+
#[serde(rename = "start_date")]
43
+
pubstart_date:Option<i64>,
41
44
/// The suppression query of the suppression rule. If a signal matches this query, it is suppressed and not triggered. Same syntax as the queries to search signals in the signal explorer.
/// The rule query of the suppression rule, with the same syntax as the search bar for detection rules.
30
30
#[serde(rename = "rule_query")]
31
31
pubrule_query:String,
32
+
/// A Unix millisecond timestamp giving a start date for the suppression rule. After this date, it will start suppressing signals.
33
+
#[serde(rename = "start_date")]
34
+
pubstart_date:Option<i64>,
32
35
/// The suppression query of the suppression rule. If a signal matches this query, it is suppressed and is not triggered. It uses the same syntax as the queries to search signals in the Signals Explorer.
/// The rule query of the suppression rule, with the same syntax as the search bar for detection rules.
34
34
#[serde(rename = "rule_query")]
35
35
pubrule_query:Option<String>,
36
+
/// A Unix millisecond timestamp giving a start date for the suppression rule. After this date, it will start suppressing signals. If unset, the start date of the suppression rule is left untouched. If set to `null`, the start date is removed.
37
+
#[serde(
38
+
rename = "start_date",
39
+
default,
40
+
with = "::serde_with::rust::double_option"
41
+
)]
42
+
pubstart_date:Option<Option<i64>>,
36
43
/// The suppression query of the suppression rule. If a signal matches this query, it is suppressed and not triggered. Same syntax as the queries to search signals in the signal explorer.
Copy file name to clipboardexpand all lines: tests/scenarios/cassettes/v2/security_monitoring/Create-a-suppression-rule-with-an-exclusion-query-returns-OK-response.json
+7-11
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@
3
3
{
4
4
"request": {
5
5
"body": {
6
-
"string": "{\"data\":{\"attributes\":{\"data_exclusion_query\":\"account_id:12345\",\"description\":\"This rule suppresses low-severity signals in staging environments.\",\"enabled\":true,\"expiration_date\":1718039232000,\"name\":\"Test-Create_a_suppression_rule_with_an_exclusion_query_returns_OK_response-1716224832\",\"rule_query\":\"type:log_detection source:cloudtrail\"},\"type\":\"suppressions\"}}",
6
+
"string": "{\"data\":{\"attributes\":{\"data_exclusion_query\":\"account_id:12345\",\"description\":\"This rule suppresses low-severity signals in staging environments.\",\"enabled\":true,\"expiration_date\":1734535475000,\"name\":\"Test-Create_a_suppression_rule_with_an_exclusion_query_returns_OK_response-1732721075\",\"rule_query\":\"type:log_detection source:cloudtrail\",\"start_date\":1733585075000},\"type\":\"suppressions\"}}",
0 commit comments