mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
divious1
1.1 KiB
1.1 KiB
Untitled string in Baseline Schema Schema
#/properties/description#/properties/description
A detailed description of the baseline
| Abstract | Extensible | Status | Identifiable | Custom Properties | Additional Properties | Access Restrictions | Defined In |
|---|---|---|---|---|---|---|---|
| Can be instantiated | No | Unknown status | Unknown identifiability | Forbidden | Allowed | none | baselines.spec.json* |
description Type
string
description Examples
>-
This search looks for CloudTrail events where an AWS instance is started and
creates a baseline of most recent time (latest) and the first time (earliest)
we've seen this region in our dataset grouped by the value awsRegion for the
last 30 days