Resource: LogType
A Log type represents a data label for data customers send to Chronicle.
| JSON representation |
|---|
{
"name"
:
string
,
"customLogTypeLabel"
:
string
,
"displayName"
:
string
,
"golden"
:
boolean
,
"productSource"
:
string
,
"isCustom"
:
boolean
,
"hasCustomParser"
:
boolean
,
"lastIngestedTime"
:
string
,
"feedCount"
:
integer
,
"parserType"
:
enum (
|
| Fields | |
|---|---|
name
|
Output only. The resource name of this log type. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{logType} |
customLogTypeLabel
|
Output only. the custom log type label |
displayName
|
Required. The display name of this log type. This is the tag used in YARA-l rules and search queries. |
golden
|
Output only. Whether a LogType is a 'Golden' log type or not. LogTypes that support rapid customer onboarding are considered 'Golden' log types. |
productSource
|
Required. This is what users see in the UI to identify the logtype while creating feed. |
isCustom
|
Required. Whether the log type is custom or globally available. |
hasCustomParser
|
Required. The log type could be custom logtype but still be using prebuilt parser. If this is set to true that means that there is a custom parser for this log type. ( deprecated ) |
lastIngestedTime
|
Required. The last time the log type was ingested. Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
feedCount
|
Required. The number of feeds that are ingested for this log type. |
parserType
|
Required. The type of parser used for this log type. (custom/prebuilt/-) |
ParserType
enum for getting a ParserType.
| Enums | |
|---|---|
PARSER_TYPE_UNSPECIFIED
|
Unspecified parser type. |
CUSTOM_PARSER
|
Custom parser. |
PREBUILT_PARSER
|
Prebuilt parser. |
Methods |
|
|---|---|
|
Create LogType. |
|
GenerateEventTypesSuggestions generates event types suggestions that can be mapped by a lowcode parser. |
|
Gets a LogTypeSetting. |
|
LegacySubmitParserExtension creates validates and then makes the extension live. |
|
Lists all LogTypes. |
|
RunParser runs the parser against a log and returns normalized events or any error that occurred during the normalization. |
|
UpdateLogTypeSetting updates the log type setting for a log type. |
