Edit

Share via


alertTrigger resource type (deprecated)

Namespace: microsoft.graph

Note

The legacy alerts API is deprecated and will be removed by April 2026. We recommend that you migrate to the new alerts and incidents API.

Contains information about the properties that triggered a detection (properties exist in the alert entity).

Properties

Property Type Description
name String Name of the property serving as a detection trigger.
type String Type of the property in the key:value pair for interpretation. For example, String, Boolean etc.
value String Value of the property serving as a detection trigger.

JSON representation

The following JSON representation shows the resource type.

{
  "name": "String",
  "type": "String",
  "value": "String"
}

Example

{
  "name": "hostState.privateIpAddress",
  "type": "String",
  "value": "10.154.9.40"
}