assertions
An assertion represents an automatic check against other query sources.
| query | The query that is run as basis of the assertion |
| result | True if the assertion is satisfied, false if it is failing |
| name | Name of the assertion |
| failed_since | Time of since failure, in epoch milliseconds |
| id | Primary key of this query source |
| can_send_alert | True if the assertion will raise alerts |
| has_sent_alert | True if the assertion has sent alerts in the past |
| bpf_filter | Berkeley Packet Filter (BPF) filter used to capture traffic on failure |
| failures_count | Number of failures |
| time | Timestamp in epoch milliseconds when this entity was created or updated |
| alert_delay | Delay in seconds before an alert is raised. Can be used as soft limit to handle flipping-states situations. |
| can_request_trace | True if a trace will be requested on failure |
| alert_risk | Risk of raised alerts |
| is_security | True if the assertion is a Cybersecurity assertion. False otherwise (e.g. a network monitoring one) |
| group_id | (Internal use) |
| note | Note about the assertion |
| deleted_at | Time the entity was cancelled |
| replicated | This is true if the record has been replicated on the replica machine |
| synchronized | True if this entity has been synchronized with the upper Central Management Console (CMC) or Vantage or Vantage |
| propagate_to_appliances | (Internal use) |
| propagated | (Internal use) |