### YamlMime:PythonClass
uid: azure.mgmt.securityinsight.models.MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties
name: MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties
fullName: azure.mgmt.securityinsight.models.MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties
module: azure.mgmt.securityinsight.models
summary: 'MicrosoftSecurityIncidentCreation rule template properties.


  Variables are only populated by the server, and will be ignored when sending a request.'
constructor:
  syntax: 'MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties(*, alert_rules_created_by_template_count:
    int | None = None, description: str | None = None, display_name: str | None =
    None, required_data_connectors: List[_models.AlertRuleTemplateDataSource] | None
    = None, status: str | _models.TemplateStatus | None = None, display_names_filter:
    List[str] | None = None, display_names_exclude_filter: List[str] | None = None,
    product_filter: str | _models.MicrosoftSecurityProductName | None = None, severities_filter:
    List[str | _models.AlertSeverity] | None = None, **kwargs)'
  keywordOnlyParameters:
  - name: alert_rules_created_by_template_count
    description: 'the number of alert rules that were created by

      this template.'
    defaultValue: None
    types:
    - <xref:int>
  - name: description
    description: The description of the alert rule template.
    defaultValue: None
    types:
    - <xref:str>
  - name: display_name
    description: The display name for alert rule template.
    defaultValue: None
    types:
    - <xref:str>
  - name: required_data_connectors
    description: The required data sources for this template.
    defaultValue: None
    types:
    - <xref:list>[<xref:azure.mgmt.securityinsight.models.AlertRuleTemplateDataSource>]
  - name: status
    description: 'The alert rule template status. Known values are: "Installed", "Available",

      and "NotAvailable".'
    defaultValue: None
    types:
    - <xref:str>
    - <xref:azure.mgmt.securityinsight.models.TemplateStatus>
  - name: display_names_filter
    description: the alerts' displayNames on which the cases will be generated.
    defaultValue: None
    types:
    - <xref:list>[<xref:str>]
  - name: display_names_exclude_filter
    description: 'the alerts'' displayNames on which the cases will not be

      generated.'
    defaultValue: None
    types:
    - <xref:list>[<xref:str>]
  - name: product_filter
    description: 'The alerts'' productName on which the cases will be generated. Known

      values are: "Microsoft Cloud App Security", "Azure Security Center", "Azure
      Advanced Threat

      Protection", "Azure Active Directory Identity Protection", "Azure Security Center
      for IoT",

      "Office 365 Advanced Threat Protection", and "Microsoft Defender Advanced Threat
      Protection".'
    defaultValue: None
    types:
    - <xref:str>
    - <xref:azure.mgmt.securityinsight.models.MicrosoftSecurityProductName>
  - name: severities_filter
    description: the alerts' severities on which the cases will be generated.
    defaultValue: None
    types:
    - <xref:list>[<xref:str>
    - <xref:azure.mgmt.securityinsight.models.AlertSeverity>]
variables:
- description: 'the number of alert rules that were created by

    this template.'
  name: alert_rules_created_by_template_count
  types:
  - <xref:int>
- description: The last time that this alert rule template has been updated.
  name: last_updated_date_utc
  types:
  - <xref:datetime.datetime>
- description: The time that this alert rule template has been added.
  name: created_date_utc
  types:
  - <xref:datetime.datetime>
- description: The description of the alert rule template.
  name: description
  types:
  - <xref:str>
- description: The display name for alert rule template.
  name: display_name
  types:
  - <xref:str>
- description: The required data sources for this template.
  name: required_data_connectors
  types:
  - <xref:list>[<xref:azure.mgmt.securityinsight.models.AlertRuleTemplateDataSource>]
- description: 'The alert rule template status. Known values are: "Installed", "Available",
    and

    "NotAvailable".'
  name: status
  types:
  - <xref:str>
  - <xref:azure.mgmt.securityinsight.models.TemplateStatus>
- description: the alerts' displayNames on which the cases will be generated.
  name: display_names_filter
  types:
  - <xref:list>[<xref:str>]
- description: 'the alerts'' displayNames on which the cases will not be

    generated.'
  name: display_names_exclude_filter
  types:
  - <xref:list>[<xref:str>]
- description: 'The alerts'' productName on which the cases will be generated. Known

    values are: "Microsoft Cloud App Security", "Azure Security Center", "Azure Advanced
    Threat

    Protection", "Azure Active Directory Identity Protection", "Azure Security Center
    for IoT",

    "Office 365 Advanced Threat Protection", and "Microsoft Defender Advanced Threat
    Protection".'
  name: product_filter
  types:
  - <xref:str>
  - <xref:azure.mgmt.securityinsight.models.MicrosoftSecurityProductName>
- description: the alerts' severities on which the cases will be generated.
  name: severities_filter
  types:
  - <xref:list>[<xref:str>
  - <xref:azure.mgmt.securityinsight.models.AlertSeverity>]