Added the incidentConfiguration property to the detectionAction resource and the incidentConfiguration complex type. Use this setting to exclude alerts generated by a custom detection rule from automatic incident correlation and create standalone, single-alert incidents.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.