[SEC-14142]evaluationWindow and keepAlive doc (#2093)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>
Co-authored-by: api-clients-generation-pipeline[bot] <54105614+api-clients-generation-pipeline[bot]@users.noreply.github.com>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2024-08-08 20:00:58.505321",
-            "spec_repo_commit": "643e3eaf"
+            "regenerated": "2024-08-09 12:06:48.409820",
+            "spec_repo_commit": "a21ba287"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2024-08-08 20:00:58.522985",
-            "spec_repo_commit": "643e3eaf"
+            "regenerated": "2024-08-09 12:06:48.426734",
+            "spec_repo_commit": "a21ba287"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -18054,8 +18054,7 @@ components:
       description: 'A time window is specified to match when at least one of the cases
         matches true. This is a sliding window
 
-        and evaluates in real time. For third party rules, it should equal max signal
-        duration.'
+        and evaluates in real time. For third party rules, this field is not used.'
       enum:
       - 0
       - 60
@@ -18100,7 +18099,7 @@ components:
     SecurityMonitoringRuleKeepAlive:
       description: "Once a signal is generated, the signal will remain \u201Copen\u201D
         if a case is matched at least once within\nthis keep alive window. For third
-        party rules, it should equal max signal duration."
+        party rules, this field is not used."
       enum:
       - 0
       - 60

src/datadog_api_client/v2/model/security_monitoring_rule_evaluation_window.py

@@ -15,7 +15,7 @@
 class SecurityMonitoringRuleEvaluationWindow(ModelSimple):
     """
     A time window is specified to match when at least one of the cases matches true. This is a sliding window
-        and evaluates in real time. For third party rules, it should equal max signal duration.
+        and evaluates in real time. For third party rules, this field is not used.
 
     :param value: Must be one of [0, 60, 300, 600, 900, 1800, 3600, 7200].
     :type value: int

src/datadog_api_client/v2/model/security_monitoring_rule_keep_alive.py

@@ -15,7 +15,7 @@
 class SecurityMonitoringRuleKeepAlive(ModelSimple):
     """
     Once a signal is generated, the signal will remain “open” if a case is matched at least once within
-        this keep alive window. For third party rules, it should equal max signal duration.
+        this keep alive window. For third party rules, this field is not used.
 
     :param value: Must be one of [0, 60, 300, 600, 900, 1800, 3600, 7200, 10800, 21600].
     :type value: int

src/datadog_api_client/v2/model/security_monitoring_rule_options.py

@@ -126,7 +126,7 @@ def __init__(
         :type detection_method: SecurityMonitoringRuleDetectionMethod, optional
 
         :param evaluation_window: A time window is specified to match when at least one of the cases matches true. This is a sliding window
-            and evaluates in real time. For third party rules, it should equal max signal duration.
+            and evaluates in real time. For third party rules, this field is not used.
         :type evaluation_window: SecurityMonitoringRuleEvaluationWindow, optional
 
         :param hardcoded_evaluator_type: Hardcoded evaluator type.
@@ -136,7 +136,7 @@ def __init__(
         :type impossible_travel_options: SecurityMonitoringRuleImpossibleTravelOptions, optional
 
         :param keep_alive: Once a signal is generated, the signal will remain “open” if a case is matched at least once within
-            this keep alive window. For third party rules, it should equal max signal duration.
+            this keep alive window. For third party rules, this field is not used.
         :type keep_alive: SecurityMonitoringRuleKeepAlive, optional
 
         :param max_signal_duration: A signal will “close” regardless of the query being matched once the time exceeds the maximum duration.