zero-day-vulnerability-alert.gql

mutation {
  alertsNrqlConditionStaticCreate(
    accountId: NEW_RELIC_ACCOUNT_ID
    policyId: 1234567890
    condition: {
      enabled: true
      name:  "New Zero Day Library Vulnerability"
      description:  null
      nrql: {
        query:  "SELECT count(*) FROM Vulnerability where issueType = 'Library Vulnerability'"
      }
      expiration: null
      runbookUrl:  null
      signal: {
        aggregationWindow: 60
        fillOption: NONE
        aggregationDelay: 120
        aggregationMethod: EVENT_FLOW
        aggregationTimer: null
        fillValue: null
        slideBy: null
        evaluationDelay: null
      }
      terms: [
        {
          operator: ABOVE
          threshold: 0
          priority: CRITICAL
          thresholdDuration: 300
          thresholdOccurrences: AT_LEAST_ONCE
        }
      ]
      violationTimeLimitSeconds: 259200
    }
  ) {
    id
  }
}