Creating a Forensic Rule
POST /openapi/v1/inventory_config/forensic_rules
Parameters:
|
Name |
Type |
Description |
|---|---|---|
|
root_app_scope_id |
string |
id of the root scope to which this rule belongs |
|
name |
string |
name of the rule |
|
description |
string |
description of the rule |
|
eval_group_type |
string |
type of the rule |
|
severity |
string |
severity of the rule |
|
actions |
array |
array or ALERT or REPORT strings |
|
clause |
string |
the query clause of the rule. |
Returns a forensic rule object.