SeverityCountsByCategory
Groups alarm severity counts by a specific category (e.g., feature name or event type). This provides a hierarchical view of alarm distribution, first by category and then by severity within each category. By default, alarms are grouped by feature name.
{
"category": "string",
"severity_counts": {
"severity_counts": [
{
"severity": "CRITICAL",
"count": 1
}
]
}
}
The name of the category used for grouping alarms. This is typically a feature name (e.g., "network_security") or event type, depending on the grouping criteria.
Provides a breakdown of alarm instances by their severity levels. Contains an array of severity count entries, each mapping a severity level to its instance count.