mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
6de58bce6a
latestCount is needed in detection search
6 lines
251 B
YAML
6 lines
251 B
YAML
description: A collection that will contain the baseline information for number of
|
|
AWS API calls per user
|
|
collection: api_call_by_user_baseline
|
|
name: api_call_by_user_baseline
|
|
fields_list: arn, latestCount, numDataPoints, avgApiCalls, stdevApiCalls
|