Google Cloud Chronicle V1 Client - Class DataSource (0.4.0)

Reference documentation and code samples for the Google Cloud Chronicle V1 Client class DataSource.

LINT.IfChange(data_sources)

Protobuf type google.cloud.chronicle.v1.DataSource

  Value: 0 
 

Generated from protobuf enum DATA_SOURCE_UNSPECIFIED = 0;

  Value: 1 
 

Generated from protobuf enum UDM = 1;

  Value: 2 
 

Generated from protobuf enum ENTITY = 2;

  Value: 3 
 

Generated from protobuf enum INGESTION_METRICS = 3;

  Value: 4 
 

RULE_DETECTIONS is used for detections datasource.

Generated from protobuf enum RULE_DETECTIONS = 4;

  Value: 5 
 

RULESETS is used for ruleset with detections datasource.

Generated from protobuf enum RULESETS = 5;

  Value: 6 
 

GLOBAL is used for standard time range filter.

Generated from protobuf enum GLOBAL = 6;

  Value: 7 
 

IOC_MATCHES is used for ioc_matches datasource.

Generated from protobuf enum IOC_MATCHES = 7;

  Value: 8 
 

RULES is used for rules datasource.

Generated from protobuf enum RULES = 8;

  Value: 9 
 

SOAR Cases - identified as case .

Generated from protobuf enum SOAR_CASES = 9;

  Value: 10 
 

SOAR Playbooks - identified as playbook .

Generated from protobuf enum SOAR_PLAYBOOKS = 10;

  Value: 11 
 

SOAR Case History - identified as case_history .

Generated from protobuf enum SOAR_CASE_HISTORY = 11;

  Value: 12 
 

DATA_TABLE is used for data tables source.

Generated from protobuf enum DATA_TABLE = 12;

  Value: 13 
 

INVESTIGATION is used as the data source for triage agent investigations.

Identified as gemini_investigation .

Generated from protobuf enum INVESTIGATION = 13;

  Value: 14 
 

INVESTIGATION_FEEDBACK is used as the data source for user feedback on triage agent investigations. Identified as gemini_investigation_feedback .

Generated from protobuf enum INVESTIGATION_FEEDBACK = 14;