// ID uint // `json:"-" gorm:"primary_key,AUTO_INCREMENT"`
MapKeystring//for Delete
Scenariostring`json:"scenario,omitempty"`//The unique name of the scenario, ie. ssh_bruteforce_multi-user
Bucket_idstring`json:"bucket_id,omitempty"`//The 'runtime' bucket-name (mostly for debug), ie. `sunny-flower`
Alert_messagestring`json:"alert_message,omitempty"`//Human-friendly label (to be displayed)
Events_countint`json:"events_count,omitempty" yaml:"Events_count,omitempty"`//Number of events between first occurence and ban
Events_sequence[]EventSequence`json:"-" gorm:"foreignkey:SignalOccurenceID;association_foreignkey:ID"`//When adapted, a unique list of string representing the individual events that lead to the overflow