MCP Tools Reference: chronicle.googleapis.com

 { 
 "feedSourceType" 
 : 
 enum ( FeedSourceType 
) 
 , 
 "logType" 
 : 
 string 
 , 
 "assetNamespace" 
 : 
 string 
 , 
 "labels" 
 : 
 { 
 string 
 : 
 string 
 , 
 ... 
 } 
 , 
 "stsMigrationReadiness" 
 : 
 enum ( STSMigrationReadiness 
) 
 , 
 // Union field details 
can be only one of the following: 
 "anomaliSettings" 
 : 
 { 
 object (  AnomaliIocSettings 
 
) 
 } 
 , 
 "azureAdContextSettings" 
 : 
 { 
 object (  AzureADContextSettings 
 
) 
 } 
 , 
 "cloudPassageSettings" 
 : 
 { 
 object (  CloudPassageSettings 
 
) 
 } 
 , 
 "cortexXdrSettings" 
 : 
 { 
 object (  CortexXDRSettings 
 
) 
 } 
 , 
 "duoAuthSettings" 
 : 
 { 
 object (  DuoAuthSettings 
 
) 
 } 
 , 
 "duoUserContextSettings" 
 : 
 { 
 object (  DuoUserContextSettings 
 
) 
 } 
 , 
 "microsoftGraphAlertSettings" 
 : 
 { 
 object (  MicrosoftGraphAlertSettings 
 
) 
 } 
 , 
 "microsoftSecurityCenterAlertSettings" 
 : 
 { 
 object (  MicrosoftSecurityCenterAlertSettings 
 
) 
 } 
 , 
 "mimecastMailSettings" 
 : 
 { 
 object (  MimecastMailSettings 
 
) 
 } 
 , 
 "office365Settings" 
 : 
 { 
 object (  Office365Settings 
 
) 
 } 
 , 
 "proofpointMailSettings" 
 : 
 { 
 object (  ProofpointMailSettings 
 
) 
 } 
 , 
 "recordedFutureIocSettings" 
 : 
 { 
 object (  RecordedFutureIocSettings 
 
) 
 } 
 , 
 "workdaySettings" 
 : 
 { 
 object (  WorkdaySettings 
 
) 
 } 
 , 
 "panIocSettings" 
 : 
 { 
 object (  PanIocSettings 
 
) 
 } 
 , 
 "oktaSettings" 
 : 
 { 
 object (  OktaSettings 
 
) 
 } 
 , 
 "oktaUserContextSettings" 
 : 
 { 
 object (  OktaUserContextSettings 
 
) 
 } 
 , 
 "foxItStixSettings" 
 : 
 { 
 object (  FoxITStixSettings 
 
) 
 } 
 , 
 "threatConnectIocSettings" 
 : 
 { 
 object (  ThreatConnectIoCSettings 
 
) 
 } 
 , 
 "serviceNowCmdbSettings" 
 : 
 { 
 object (  ServiceNowCMDBSettings 
 
) 
 } 
 , 
 "impervaWafSettings" 
 : 
 { 
 object (  ImpervaWAFSettings 
 
) 
 } 
 , 
 "thinkstCanarySettings" 
 : 
 { 
 object (  ThinkstCanarySettings 
 
) 
 } 
 , 
 "rhIsacIocSettings" 
 : 
 { 
 object (  RHIsacIocSettings 
 
) 
 } 
 , 
 "rapid7InsightSettings" 
 : 
 { 
 object (  Rapid7InsightSettings 
 
) 
 } 
 , 
 "salesforceSettings" 
 : 
 { 
 object (  SalesforceSettings 
 
) 
 } 
 , 
 "netskopeAlertSettings" 
 : 
 { 
 object (  NetskopeAlertSettings 
 
) 
 } 
 , 
 "azureMdmIntuneSettings" 
 : 
 { 
 object (  AzureMDMIntuneSettings 
 
) 
 } 
 , 
 "azureAdSettings" 
 : 
 { 
 object (  AzureADSettings 
 
) 
 } 
 , 
 "proofpointOnDemandSettings" 
 : 
 { 
 object (  ProofpointOnDemandSettings 
 
) 
 } 
 , 
 "workspaceUsersSettings" 
 : 
 { 
 object (  WorkspaceUsersSettings 
 
) 
 } 
 , 
 "workspaceActivitySettings" 
 : 
 { 
 object (  WorkspaceActivitySettings 
 
) 
 } 
 , 
 "workspaceAlertsSettings" 
 : 
 { 
 object (  WorkspaceAlertsSettings 
 
) 
 } 
 , 
 "workspacePrivilegesSettings" 
 : 
 { 
 object (  WorkspacePrivilegesSettings 
 
) 
 } 
 , 
 "workspaceMobileSettings" 
 : 
 { 
 object (  WorkspaceMobileSettings 
 
) 
 } 
 , 
 "workspaceChromeOsSettings" 
 : 
 { 
 object (  WorkspaceChromeOSSettings 
 
) 
 } 
 , 
 "workspaceGroupsSettings" 
 : 
 { 
 object (  WorkspaceGroupsSettings 
 
) 
 } 
 , 
 "azureAdAuditSettings" 
 : 
 { 
 object (  AzureADAuditSettings 
 
) 
 } 
 , 
 "symantecEventExportSettings" 
 : 
 { 
 object (  SymantecEventExportSettings 
 
) 
 } 
 , 
 "qualysVmSettings" 
 : 
 { 
 object (  QualysVMSettings 
 
) 
 } 
 , 
 "panPrismaCloudSettings" 
 : 
 { 
 object (  PanPrismaCloudSettings 
 
) 
 } 
 , 
 "gcsSettings" 
 : 
 { 
 object (  GoogleCloudStorageSettings 
 
) 
 } 
 , 
 "httpSettings" 
 : 
 { 
 object (  HttpSettings 
 
) 
 } 
 , 
 "sftpSettings" 
 : 
 { 
 object (  SftpSettings 
 
) 
 } 
 , 
 "amazonS3Settings" 
 : 
 { 
 object (  AmazonS3Settings 
 
) 
 } 
 , 
 "azureBlobStoreSettings" 
 : 
 { 
 object (  AzureBlobStoreSettings 
 
) 
 } 
 , 
 "amazonSqsSettings" 
 : 
 { 
 object (  AmazonSQSSettings 
 
) 
 } 
 , 
 "googleCloudIdentityDevicesSettings" 
 : 
 { 
 object (  GoogleCloudIdentityDevicesSettings 
 
) 
 } 
 , 
 "googleCloudIdentityDeviceUsersSettings" 
 : 
 { 
 object (  GoogleCloudIdentityDeviceUsersSettings 
 
) 
 } 
 , 
 "crowdstrikeDetectsSettings" 
 : 
 { 
 object (  CrowdStrikeDetectsSettings 
 
) 
 } 
 , 
 "mandiantIocSettings" 
 : 
 { 
 object (  MandiantIoCSettings 
 
) 
 } 
 , 
 "sentineloneAlertSettings" 
 : 
 { 
 object (  SentineloneAlertSettings 
 
) 
 } 
 , 
 "qualysScanSettings" 
 : 
 { 
 object (  QualysScanSettings 
 
) 
 } 
 , 
 "pubsubSettings" 
 : 
 { 
 object (  PubsubSettings 
 
) 
 } 
 , 
 "amazonKinesisFirehoseSettings" 
 : 
 { 
 object ( AmazonKinesisFirehoseSettings 
) 
 } 
 , 
 "webhookSettings" 
 : 
 { 
 object ( WebhookSettings 
) 
 } 
 , 
 "dummyLogTypeSettings" 
 : 
 { 
 object (  DummyLogTypeSettings 
 
) 
 } 
 , 
 "httpsPushGoogleCloudPubsubSettings" 
 : 
 { 
 object (  HttpsPushGoogleCloudPubSubSettings 
 
) 
 } 
 , 
 "httpsPushAmazonKinesisFirehoseSettings" 
 : 
 { 
 object (  HttpsPushAmazonKinesisFirehoseSettings 
 
) 
 } 
 , 
 "httpsPushWebhookSettings" 
 : 
 { 
 object (  HttpsPushWebhookSettings 
 
) 
 } 
 , 
 "awsEc2HostsSettings" 
 : 
 { 
 object (  AWSEC2HostsSettings 
 
) 
 } 
 , 
 "awsEc2InstancesSettings" 
 : 
 { 
 object (  AWSEC2InstancesSettings 
 
) 
 } 
 , 
 "awsEc2VpcsSettings" 
 : 
 { 
 object (  AWSEC2VpcsSettings 
 
) 
 } 
 , 
 "awsIamSettings" 
 : 
 { 
 object (  AWSIAMSettings 
 
) 
 } 
 , 
 "netskopeAlertV2Settings" 
 : 
 { 
 object (  NetskopeAlertV2Settings 
 
) 
 } 
 , 
 "gcsV2Settings" 
 : 
 { 
 object (  GoogleCloudStorageV2Settings 
 
) 
 } 
 , 
 "amazonS3V2Settings" 
 : 
 { 
 object (  AmazonS3V2Settings 
 
) 
 } 
 , 
 "amazonSqsV2Settings" 
 : 
 { 
 object (  AmazonSQSV2Settings 
 
) 
 } 
 , 
 "azureEventHubSettings" 
 : 
 { 
 object (  AzureEventHubSettings 
 
) 
 } 
 , 
 "trellixHxHostsSettings" 
 : 
 { 
 object (  TrellixHxHostsSettings 
 
) 
 } 
 , 
 "azureBlobStoreV2Settings" 
 : 
 { 
 object (  AzureBlobStoreV2Settings 
 
) 
 } 
 , 
 "trellixHxAlertsSettings" 
 : 
 { 
 object (  TrellixHxAlertsSettings 
 
) 
 } 
 , 
 "googleCloudStorageEventDrivenSettings" 
 : 
 { 
 object (  GoogleCloudStorageEventDrivenSettings 
 
) 
 } 
 , 
 "crowdstrikeAlertsSettings" 
 : 
 { 
 object (  CrowdStrikeAlertsSettings 
 
) 
 } 
 , 
 "trellixHxBulkAcqsSettings" 
 : 
 { 
 object (  TrellixHxBulkAcqsSettings 
 
) 
 } 
 , 
 "mimecastMailV2Settings" 
 : 
 { 
 object (  MimecastMailV2Settings 
 
) 
 } 
 , 
 "threatConnectIocV3Settings" 
 : 
 { 
 object (  ThreatConnectIoCV3Settings 
 
) 
 } 
 // End of list of possible types for union field details 
. 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 } 

 { 
 "user" 
 : 
 string 
 , 
 "secret" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  MicrosoftOAuthClientCredentials 
 
) 
 } 
 , 
 "retrieveDevices" 
 : 
 boolean 
 , 
 "retrieveGroups" 
 : 
 boolean 
 , 
 "tenantId" 
 : 
 string 
 , 
 "hostname" 
 : 
 string 
 , 
 "authEndpoint" 
 : 
 string 
 } 

 { 
 "clientId" 
 : 
 string 
 , 
 "clientSecret" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "eventTypes" 
 : 
 [ 
 string 
 ] 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "endpoint" 
 : 
 string 
 } 

 { 
 "headerKeyValues" 
 : 
 [ 
 { 
 object (  HeaderKeyValue 
 
) 
 } 
 ] 
 } 

 { 
 "key" 
 : 
 string 
 , 
 "value" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  MicrosoftOAuthClientCredentials 
 
) 
 } 
 , 
 "tenantId" 
 : 
 string 
 , 
 "hostname" 
 : 
 string 
 , 
 "authEndpoint" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  MicrosoftOAuthClientCredentials 
 
) 
 } 
 , 
 "subscriptionId" 
 : 
 string 
 , 
 "tenantId" 
 : 
 string 
 , 
 "hostname" 
 : 
 string 
 , 
 "authEndpoint" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  MicrosoftOAuthClientCredentials 
 
) 
 } 
 , 
 "tenantId" 
 : 
 string 
 , 
 "contentType" 
 : 
 enum ( ContentType 
) 
 , 
 "hostname" 
 : 
 string 
 , 
 "authEndpoint" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  WorkdayAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "tenantId" 
 : 
 string 
 } 

 { 
 "user" 
 : 
 string 
 , 
 "secret" 
 : 
 string 
 , 
 "tokenEndpoint" 
 : 
 string 
 , 
 "clientId" 
 : 
 string 
 , 
 "clientSecret" 
 : 
 string 
 , 
 "refreshToken" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "feedId" 
 : 
 string 
 , 
 "feed" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "managerIdReferenceField" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "ssl" 
 : 
 { 
 object (  SSLClientKeypair 
 
) 
 } 
 , 
 "pollServiceUri" 
 : 
 string 
 , 
 "collection" 
 : 
 string 
 } 

 { 
 "encodedPrivateKey" 
 : 
 string 
 , 
 "sslCertificate" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "owners" 
 : 
 [ 
 string 
 ] 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "feedname" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthClientCredentials 
 
) 
 } 
 } 

 { 
 "tokenEndpoint" 
 : 
 string 
 , 
 "clientId" 
 : 
 string 
 , 
 "clientSecret" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "endpoint" 
 : 
 string 
 , 
 "hostname" 
 : 
 string 
 } 

 { 
 "hostname" 
 : 
 string 
 , 
 // Union field authentication 
can be only one of the following: 
 "oauthPasswordGrantAuth" 
 : 
 { 
 object (  OAuthPasswordGrantCredentials 
 
) 
 } 
 , 
 "oauthJwtCredentials" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 // End of list of possible types for union field authentication 
. 
 } 

 { 
 "tokenEndpoint" 
 : 
 string 
 , 
 "clientId" 
 : 
 string 
 , 
 "clientSecret" 
 : 
 string 
 , 
 "user" 
 : 
 string 
 , 
 "password" 
 : 
 string 
 } 

 { 
 "tokenEndpoint" 
 : 
 string 
 , 
 "claims" 
 : 
 { 
 object (  Claims 
 
) 
 } 
 , 
 // Union field credentials 
can be only one of the following: 
 "rsCredentials" 
 : 
 { 
 object (  RSCredentials 
 
) 
 } 
 // End of list of possible types for union field credentials 
. 
 } 

 { 
 "privateKey" 
 : 
 string 
 } 

 { 
 "issuer" 
 : 
 string 
 , 
 "subject" 
 : 
 string 
 , 
 "audience" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "feedname" 
 : 
 string 
 , 
 "contentType" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  MicrosoftOAuthClientCredentials 
 
) 
 } 
 , 
 "tenantId" 
 : 
 string 
 , 
 "hostname" 
 : 
 string 
 , 
 "authEndpoint" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  MicrosoftOAuthClientCredentials 
 
) 
 } 
 , 
 "tenantId" 
 : 
 string 
 , 
 "hostname" 
 : 
 string 
 , 
 "authEndpoint" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "clusterId" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 , 
 "workspaceCustomerId" 
 : 
 string 
 , 
 "projectionType" 
 : 
 enum ( ProjectionType 
) 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 , 
 "workspaceCustomerId" 
 : 
 string 
 , 
 "applications" 
 : 
 [ 
 string 
 ] 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 , 
 "workspaceCustomerId" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 , 
 "workspaceCustomerId" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 , 
 "workspaceCustomerId" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 , 
 "workspaceCustomerId" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 , 
 "workspaceCustomerId" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  MicrosoftOAuthClientCredentials 
 
) 
 } 
 , 
 "tenantId" 
 : 
 string 
 , 
 "hostname" 
 : 
 string 
 , 
 "authEndpoint" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthRefreshToken 
 
) 
 } 
 } 

 { 
 "tokenEndpoint" 
 : 
 string 
 , 
 "clientId" 
 : 
 string 
 , 
 "clientSecret" 
 : 
 string 
 , 
 "refreshToken" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  PanPrismaAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 } 

 { 
 "user" 
 : 
 string 
 , 
 "password" 
 : 
 string 
 } 

 { 
 "bucketUri" 
 : 
 string 
 , 
 "sourceType" 
 : 
 enum ( URISourceType 
) 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOption 
) 
 , 
 "chronicleServiceAccount" 
 : 
 string 
 } 

 { 
 "uri" 
 : 
 string 
 , 
 "sourceType" 
 : 
 enum ( URISourceType 
) 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOption 
) 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  SftpAuth 
 
) 
 } 
 , 
 "uri" 
 : 
 string 
 , 
 "sourceType" 
 : 
 enum ( URISourceType 
) 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOption 
) 
 } 

 { 
 "username" 
 : 
 string 
 , 
 "password" 
 : 
 string 
 , 
 "privateKey" 
 : 
 string 
 , 
 "privateKeyPassphrase" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  S3Auth 
 
) 
 } 
 , 
 "s3Uri" 
 : 
 string 
 , 
 "sourceType" 
 : 
 enum ( URISourceType 
) 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOption 
) 
 } 

 { 
 "accessKeyId" 
 : 
 string 
 , 
 "secretAccessKey" 
 : 
 string 
 , 
 "clientId" 
 : 
 string 
 , 
 "clientSecret" 
 : 
 string 
 , 
 "refreshUri" 
 : 
 string 
 , 
 "region" 
 : 
 enum ( S3Region 
) 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  AzureAuth 
 
) 
 } 
 , 
 "azureUri" 
 : 
 string 
 , 
 "sourceType" 
 : 
 enum ( URISourceType 
) 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOption 
) 
 } 

 { 
 // Union field auth_type 
can be only one of the following: 
 "sharedKey" 
 : 
 string 
 , 
 "sasToken" 
 : 
 string 
 // End of list of possible types for union field auth_type 
. 
 } 

 { 
 "region" 
 : 
 enum ( S3Region 
) 
 , 
 "queue" 
 : 
 string 
 , 
 "accountNumber" 
 : 
 string 
 , 
 "authentication" 
 : 
 { 
 object (  SQSAuth 
 
) 
 } 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOption 
) 
 } 

 { 
 "sqsAccessKeySecretAuth" 
 : 
 { 
 object (  SQSAccessKeySecretAuth 
 
) 
 } 
 , 
 "additionalS3AccessKeySecretAuth" 
 : 
 { 
 object (  AdditionalS3AccessKeySecretAuth 
 
) 
 } 
 } 

 { 
 "accessKeyId" 
 : 
 string 
 , 
 "secretAccessKey" 
 : 
 string 
 } 

 { 
 "accessKeyId" 
 : 
 string 
 , 
 "secretAccessKey" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 , 
 "apiVersion" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthJWTCredentials 
 
) 
 } 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  OAuthClientCredentials 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "ingestionType" 
 : 
 enum ( IngestionType 
) 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "startTime" 
 : 
 string 
 } 

 { 
 "seconds" 
 : 
 string 
 , 
 "nanos" 
 : 
 integer 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "initialStartTime" 
 : 
 string 
 , 
 "isAlertApiSubscribed" 
 : 
 boolean 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "apiType" 
 : 
 enum ( ApiType 
) 
 } 

 { 
 "googleServiceAccountEmail" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "apiEndpoint" 
 : 
 string 
 } 

 { 
 "splitDelimiter" 
 : 
 string 
 } 

 { 
 "splitDelimiter" 
 : 
 string 
 } 

 { 
 "splitDelimiter" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  UsernameSecretAuth 
 
) 
 } 
 , 
 "apiType" 
 : 
 enum ( ApiType 
) 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  HttpHeaderAuth 
 
) 
 } 
 , 
 "hostname" 
 : 
 string 
 , 
 "contentCategory" 
 : 
 string 
 , 
 "contentTypes" 
 : 
 [ 
 string 
 ] 
 } 

 { 
 "bucketUri" 
 : 
 string 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOptionV2 
) 
 , 
 "chronicleServiceAccount" 
 : 
 string 
 , 
 "maxLookbackDays" 
 : 
 integer 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  S3AuthV2 
 
) 
 } 
 , 
 "s3Uri" 
 : 
 string 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOptionV2 
) 
 , 
 "maxLookbackDays" 
 : 
 integer 
 , 
 "chronicleServiceAccount" 
 : 
 string 
 } 

 { 
 // Union field auth_type 
can be only one of the following: 
 "accessKeySecretAuth" 
 : 
 { 
 object (  S3V2AccessKeySecretAuth 
 
) 
 } 
 , 
 "awsIamRoleAuth" 
 : 
 { 
 object (  S3V2AwsIamRoleAuth 
 
) 
 } 
 // End of list of possible types for union field auth_type 
. 
 } 

 { 
 "accessKeyId" 
 : 
 string 
 , 
 "secretAccessKey" 
 : 
 string 
 } 

 { 
 "awsIamRoleArn" 
 : 
 string 
 , 
 "subjectId" 
 : 
 string 
 } 

 { 
 "queue" 
 : 
 string 
 , 
 "s3Uri" 
 : 
 string 
 , 
 "authentication" 
 : 
 { 
 object (  SQSAuthV2 
 
) 
 } 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOptionV2 
) 
 , 
 "maxLookbackDays" 
 : 
 integer 
 , 
 "chronicleServiceAccount" 
 : 
 string 
 } 

 { 
 // Union field auth_type 
can be only one of the following: 
 "sqsV2AccessKeySecretAuth" 
 : 
 { 
 object (  SQSV2AccessKeySecretAuth 
 
) 
 } 
 , 
 "awsIamRoleAuth" 
 : 
 { 
 object (  SQSV2AwsIamRoleAuth 
 
) 
 } 
 // End of list of possible types for union field auth_type 
. 
 } 

 { 
 "accessKeyId" 
 : 
 string 
 , 
 "secretAccessKey" 
 : 
 string 
 } 

 { 
 "awsIamRoleArn" 
 : 
 string 
 , 
 "subjectId" 
 : 
 string 
 } 

 { 
 "name" 
 : 
 string 
 , 
 "consumerGroup" 
 : 
 string 
 , 
 "eventHubConnectionString" 
 : 
 string 
 , 
 "azureStorageConnectionString" 
 : 
 string 
 , 
 "azureStorageContainer" 
 : 
 string 
 , 
 "azureSasToken" 
 : 
 string 
 , 
 "eventHubNamespace" 
 : 
 string 
 } 

 { 
 "authentication" 
 : 
 { 
 object (  TrellixStarXAuthentication 
 
) 
 } 
 , 
 "endpoint" 
 : 
 string 
 } 

 { 
 // Union field auth_type 
can be only one of the following: 
 "msso" 
 : 
 { 
 object (  MssoAuthentication 
 
) 
 } 
 , 
 "trellixIam" 
 : 
 { 
 object (  TrellixIAMAuthentication 
 
) 
 } 
 , 
 "trellixLocal" 
 : 
 { 
 object (  TrellixLocalAuthentication 
 
) 
 } 
 // End of list of possible types for union field auth_type 
. 
 } 

 { 
 "username" 
 : 
 string 
 , 
 "password" 
 : 
 string 
 , 
 "apiEndpoint" 
 : 
 string 
 } 

 { 
 "clientId" 
 : 
 string 
 , 
 "clientSecret" 
 : 
 string 
 , 
 "scope" 
 : 
 string 
 } 

 { 
 "username" 
 : 
 string 
 , 
 "password" 
 : 
 string 
 , 
 "tokenEndpoint" 
 : 
 string 
 , 
 "tokenHeader" 
 : 
 string 
 } 

 { 
 "azureUri" 
 : 
 string 
 , 
 "authentication" 
 : 
 { 
 object (  AzureAuthV2 
 
) 
 } 
 , 
 "sourceDeletionOption" 
 : 
 enum ( SourceDeletionOptionV2 
) 
 , 
 "maxLookbackDays" 
 : 
 integer 
 , 
 "chronicleServiceAccount" 
 : 
 string 
 }