datadog_api_client 2.40.0 → 2.41.0

data/.generator/schemas/v2/openapi.yaml

@@ -221,7 +221,8 @@ components:
       name: cloud_account_id
       required: true
       schema:
-        type: string
+        format: int64
+        type: integer
     CloudWorkloadSecurityAgentRuleID:
       description: The ID of the Agent rule
       example: 3b5-v82-ns6
@@ -414,6 +415,17 @@ components:
       required: true
       schema:
         type: string
+    GetIssueIncludeQueryParameter:
+      description: Comma-separated list of relationship objects that should be included
+        in the response.
+      explode: false
+      in: query
+      name: include
+      required: false
+      schema:
+        items:
+          $ref: '#/components/schemas/GetIssueIncludeQueryParameterItem'
+        type: array
     HistoricalJobID:
       description: The ID of the job.
       in: path
@@ -421,6 +433,13 @@ components:
       required: true
       schema:
         type: string
+    HistoricalSignalID:
+      description: The ID of the historical signal.
+      in: path
+      name: histsignal_id
+      required: true
+      schema:
+        type: string
     IncidentAttachmentFilterQueryParameter:
       description: Specifies which types of attachments are included in the response.
       explode: false
@@ -466,6 +485,37 @@ components:
       required: true
       schema:
         type: string
+    IncidentNotificationTemplateIDPathParameter:
+      description: The ID of the notification template.
+      in: path
+      name: id
+      required: true
+      schema:
+        example: 00000000-0000-0000-0000-000000000001
+        format: uuid
+        type: string
+    IncidentNotificationTemplateIncidentTypeFilterQueryParameter:
+      description: Optional incident type ID filter.
+      explode: false
+      in: query
+      name: filter[incident-type]
+      required: false
+      schema:
+        example: 00000000-0000-0000-0000-000000000001
+        format: uuid
+        type: string
+    IncidentNotificationTemplateIncludeQueryParameter:
+      description: 'Comma-separated list of relationships to include. Supported values:
+        `created_by_user`, `last_modified_by_user`, `incident_type`
+
+        '
+      explode: false
+      in: query
+      name: include
+      required: false
+      schema:
+        example: created_by_user,incident_type
+        type: string
     IncidentSearchIncludeQueryParameter:
       description: Specifies which types of related objects should be included in
         the response.
@@ -578,6 +628,14 @@ components:
       required: true
       schema:
         type: string
+    IssueIDPathParameter:
+      description: The identifier of the issue.
+      example: c1726a66-1f64-11ee-b338-da7ad0900002
+      in: path
+      name: issue_id
+      required: true
+      schema:
+        type: string
     KindID:
       description: Entity kind.
       in: path
@@ -680,6 +738,15 @@ components:
       schema:
         example: monitor_timezone
         type: string
+    OrgConnectionId:
+      description: The unique identifier of the org connection.
+      in: path
+      name: connection_id
+      required: true
+      schema:
+        example: f9ec96b0-8c8a-4b0a-9b0a-1b2c3d4e5f6a
+        format: uuid
+        type: string
     PageNumber:
       description: Specific page number to return.
       in: query
@@ -725,6 +792,58 @@ components:
       required: true
       schema:
         type: string
+    QueryFilterFrom:
+      description: The minimum timestamp for requested security signals.
+      example: '2019-01-02T09:42:36.320Z'
+      in: query
+      name: filter[from]
+      required: false
+      schema:
+        format: date-time
+        type: string
+    QueryFilterSearch:
+      description: The search query for security signals.
+      example: security:attack status:high
+      in: query
+      name: filter[query]
+      required: false
+      schema:
+        type: string
+    QueryFilterTo:
+      description: The maximum timestamp for requested security signals.
+      example: '2019-01-03T09:42:36.320Z'
+      in: query
+      name: filter[to]
+      required: false
+      schema:
+        format: date-time
+        type: string
+    QueryPageCursor:
+      description: A list of results using the cursor provided in the previous query.
+      example: eyJzdGFydEF0IjoiQVFBQUFYS2tMS3pPbm40NGV3QUFBQUJCV0V0clRFdDZVbG8zY3pCRmNsbHJiVmxDWlEifQ==
+      in: query
+      name: page[cursor]
+      required: false
+      schema:
+        type: string
+    QueryPageLimit:
+      description: The maximum number of security signals in the response.
+      example: 25
+      in: query
+      name: page[limit]
+      required: false
+      schema:
+        default: 10
+        format: int32
+        maximum: 1000
+        type: integer
+    QuerySort:
+      description: The order of the security signals in results.
+      in: query
+      name: sort
+      required: false
+      schema:
+        $ref: '#/components/schemas/SecurityMonitoringSignalsSort'
     RelationInclude:
       description: Include relationship data.
       explode: true
@@ -823,6 +942,17 @@ components:
       required: false
       schema:
         $ref: '#/components/schemas/ServiceDefinitionSchemaVersions'
+    SearchIssuesIncludeQueryParameter:
+      description: Comma-separated list of relationship objects that should be included
+        in the response.
+      explode: false
+      in: query
+      name: include
+      required: false
+      schema:
+        items:
+          $ref: '#/components/schemas/SearchIssuesIncludeQueryParameterItem'
+        type: array
     SecurityFilterID:
       description: The ID of the security filter.
       in: path
@@ -1763,20 +1893,21 @@ components:
       - $ref: '#/components/schemas/AWSNamespaceFiltersIncludeOnly'
     AWSNamespaceFiltersExcludeOnly:
       description: 'Exclude only these namespaces from metrics collection. Defaults
-        to `["AWS/SQS", "AWS/ElasticMapReduce"]`.
+        to `["AWS/SQS", "AWS/ElasticMapReduce", "AWS/Usage"]`.
 
-        `AWS/SQS` and `AWS/ElasticMapReduce` are excluded by default to reduce your
-        AWS CloudWatch costs from `GetMetricData` API calls.'
+        `AWS/SQS`, `AWS/ElasticMapReduce`, and `AWS/Usage` are excluded by default
+        to reduce your AWS CloudWatch costs from `GetMetricData` API calls.'
       properties:
         exclude_only:
           description: 'Exclude only these namespaces from metrics collection. Defaults
-            to `["AWS/SQS", "AWS/ElasticMapReduce"]`.
+            to `["AWS/SQS", "AWS/ElasticMapReduce", "AWS/Usage"]`.
 
-            `AWS/SQS` and `AWS/ElasticMapReduce` are excluded by default to reduce
-            your AWS CloudWatch costs from `GetMetricData` API calls.'
+            `AWS/SQS`, `AWS/ElasticMapReduce`, and `AWS/Usage` are excluded by default
+            to reduce your AWS CloudWatch costs from `GetMetricData` API calls.'
           example:
           - AWS/SQS
           - AWS/ElasticMapReduce
+          - AWS/Usage
           items:
             example: AWS/SQS
             type: string
@@ -4500,8 +4631,7 @@ components:
           $ref: '#/components/schemas/AwsCURConfigAttributes'
         id:
           description: The ID of the AWS CUR config.
-          format: int64
-          type: integer
+          type: string
         type:
           $ref: '#/components/schemas/AwsCURConfigType'
       required:
@@ -4642,9 +4772,6 @@ components:
           description: The region the bucket is located in.
           example: us-east-1
           type: string
-        is_enabled:
-          description: Whether or not the Cloud Cost Management account is enabled.
-          type: boolean
         months:
           description: The month of the report.
           format: int32
@@ -5136,8 +5263,7 @@ components:
           type: string
         id:
           description: The ID of the Azure config.
-          format: int64
-          type: integer
+          type: string
         months:
           deprecated: true
           description: The number of months the report has been backfilled.
@@ -5187,8 +5313,7 @@ components:
           $ref: '#/components/schemas/AzureUCConfigPairAttributes'
         id:
           description: The ID of Cloud Cost Management account.
-          format: int64
-          type: integer
+          type: string
         type:
           $ref: '#/components/schemas/AzureUCConfigPairType'
       required:
@@ -5205,8 +5330,7 @@ components:
           type: array
         id:
           description: The ID of the Azure config pair.
-          format: int64
-          type: integer
+          type: string
       required:
       - configs
       type: object
@@ -9290,6 +9414,15 @@ components:
           that evaluates to a boolean.
         example: ${true}
         type: string
+    ComponentRecommendation:
+      description: Resource recommendation for a single Spark component (driver or
+        executor). Contains estimation data used to patch Spark job specs.
+      properties:
+        estimation:
+          $ref: '#/components/schemas/Estimation'
+      required:
+      - estimation
+      type: object
     ComponentType:
       description: The UI component type.
       enum:
@@ -10486,6 +10619,28 @@ components:
       type: string
       x-enum-varnames:
       - COST_BY_ORG
+    Cpu:
+      description: CPU usage statistics derived from historical Spark job metrics.
+        Provides multiple estimates so users can choose between conservative and cost-saving
+        risk profiles.
+      properties:
+        max:
+          description: Maximum CPU usage observed for the job, expressed in millicores.
+            This represents the upper bound of usage.
+          format: int64
+          type: integer
+        p75:
+          description: 75th percentile of CPU usage (millicores). Represents a cost-saving
+            configuration while covering most workloads.
+          format: int64
+          type: integer
+        p95:
+          description: 95th percentile of CPU usage (millicores). Balances performance
+            and cost, providing a safer margin than p75.
+          format: int64
+          type: integer
+      type: object
+      x-model-simple-name: SpaCpu
     CreateActionConnectionRequest:
       description: Request used to create an action connection.
       properties:
@@ -10696,6 +10851,14 @@ components:
         meta:
           $ref: '#/components/schemas/DataDeletionResponseMeta'
       type: object
+    CreateIncidentNotificationTemplateRequest:
+      description: Create request for a notification template.
+      properties:
+        data:
+          $ref: '#/components/schemas/IncidentNotificationTemplateCreateData'
+      required:
+      - data
+      type: object
     CreateNotificationRuleParameters:
       description: Body of the notification rule create request.
       properties:
@@ -13264,9 +13427,7 @@ components:
         attributes:
           $ref: '#/components/schemas/DatasetAttributesRequest'
         type:
-          description: Resource type, always "dataset".
-          example: dataset
-          type: string
+          $ref: '#/components/schemas/DatasetType'
       required:
       - type
       - attributes
@@ -13288,9 +13449,7 @@ components:
           example: 123e4567-e89b-12d3-a456-426614174000
           type: string
         type:
-          description: Resource type, always "dataset".
-          example: dataset
-          type: string
+          $ref: '#/components/schemas/DatasetType'
       type: object
     DatasetResponseMulti:
       description: Response containing a list of datasets.
@@ -13307,6 +13466,15 @@ components:
         data:
           $ref: '#/components/schemas/DatasetResponse'
       type: object
+    DatasetType:
+      default: dataset
+      description: Resource type, always set to `dataset`.
+      enum:
+      - dataset
+      example: dataset
+      type: string
+      x-enum-varnames:
+      - DATASET
     DatasetUpdateRequest:
       description: Edit request for a dataset.
       properties:
@@ -14454,6 +14622,10 @@ components:
       description: Entity definition in raw JSON or YAML representation.
       example: "apiVersion: v3\nkind: service\nmetadata:\n  name: myservice\n"
       type: string
+    EntityReference:
+      description: The unique reference for an IDP entity.
+      example: service:my-service
+      type: string
     EntityRelationships:
       description: Entity relationships.
       properties:
@@ -15938,6 +16110,33 @@ components:
       type: string
       x-enum-varnames:
       - ESCALATION_POLICY_STEPS
+    Estimation:
+      description: Recommended resource values for a Spark driver or executor, derived
+        from recent real usage metrics. Used by SPA to propose more efficient pod
+        sizing.
+      properties:
+        cpu:
+          $ref: '#/components/schemas/Cpu'
+        ephemeral_storage:
+          description: Recommended ephemeral storage allocation (in MiB). Derived
+            from job temporary storage patterns.
+          format: int64
+          type: integer
+        heap:
+          description: Recommended JVM heap size (in MiB).
+          format: int64
+          type: integer
+        memory:
+          description: Recommended total memory allocation (in MiB). Includes both
+            heap and overhead.
+          format: int64
+          type: integer
+        overhead:
+          description: Recommended JVM overhead (in MiB). Computed as total memory
+            - heap.
+          format: int64
+          type: integer
+      type: object
     Event:
       description: The metadata associated with a request.
       properties:
@@ -18201,6 +18400,18 @@ components:
             $ref: '#/components/schemas/GetInterfacesData'
           type: array
       type: object
+    GetIssueIncludeQueryParameterItem:
+      description: Relationship object that should be included in the response.
+      enum:
+      - assignee
+      - case
+      - team_owners
+      example: case
+      type: string
+      x-enum-varnames:
+      - ASSIGNEE
+      - CASE
+      - TEAM_OWNERS
     GetResourceEvaluationFiltersResponse:
       description: The definition of `GetResourceEvaluationFiltersResponse` object.
       properties:
@@ -18378,6 +18589,31 @@ components:
       required:
       - type
       type: object
+    GoogleMeetConfigurationReference:
+      description: A reference to a Google Meet Configuration resource.
+      nullable: true
+      properties:
+        data:
+          $ref: '#/components/schemas/GoogleMeetConfigurationReferenceData'
+      required:
+      - data
+      type: object
+    GoogleMeetConfigurationReferenceData:
+      description: The Google Meet configuration relationship data object.
+      nullable: true
+      properties:
+        id:
+          description: The unique identifier of the Google Meet configuration.
+          example: 00000000-0000-0000-0000-000000000000
+          type: string
+        type:
+          description: The type of the Google Meet configuration.
+          example: google_meet_configurations
+          type: string
+      required:
+      - id
+      - type
+      type: object
     GreyNoiseAPIKey:
       description: The definition of the `GreyNoiseAPIKey` object.
       properties:
@@ -19703,6 +19939,256 @@ components:
           example: '@test.user@test.com'
           type: string
       type: object
+    IncidentNotificationTemplate:
+      description: Response with a notification template.
+      properties:
+        data:
+          $ref: '#/components/schemas/IncidentNotificationTemplateResponseData'
+        included:
+          description: Related objects that are included in the response.
+          items:
+            $ref: '#/components/schemas/IncidentNotificationTemplateIncludedItems'
+          type: array
+      required:
+      - data
+      type: object
+    IncidentNotificationTemplateArray:
+      description: Response with notification templates.
+      properties:
+        data:
+          description: The `NotificationTemplateArray` `data`.
+          items:
+            $ref: '#/components/schemas/IncidentNotificationTemplateResponseData'
+          type: array
+        included:
+          description: Related objects that are included in the response.
+          items:
+            $ref: '#/components/schemas/IncidentNotificationTemplateIncludedItems'
+          type: array
+        meta:
+          $ref: '#/components/schemas/IncidentNotificationTemplateArrayMeta'
+      required:
+      - data
+      type: object
+    IncidentNotificationTemplateArrayMeta:
+      description: Response metadata.
+      properties:
+        page:
+          $ref: '#/components/schemas/IncidentNotificationTemplateArrayMetaPage'
+      type: object
+    IncidentNotificationTemplateArrayMetaPage:
+      description: Pagination metadata.
+      properties:
+        total_count:
+          description: Total number of notification templates.
+          example: 42
+          format: int64
+          type: integer
+        total_filtered_count:
+          description: Total number of notification templates matching the filter.
+          example: 15
+          format: int64
+          type: integer
+      type: object
+    IncidentNotificationTemplateAttributes:
+      description: The notification template's attributes.
+      properties:
+        category:
+          description: The category of the notification template.
+          example: alert
+          type: string
+        content:
+          description: The content body of the notification template.
+          example: 'An incident has been declared.
+
+
+            Title: {{incident.title}}
+
+            Severity: {{incident.severity}}
+
+            Affected Services: {{incident.services}}
+
+            Status: {{incident.state}}
+
+
+            Please join the incident channel for updates.'
+          type: string
+        created:
+          description: Timestamp when the notification template was created.
+          example: '2025-01-15T10:30:00Z'
+          format: date-time
+          readOnly: true
+          type: string
+        modified:
+          description: Timestamp when the notification template was last modified.
+          example: '2025-01-15T14:45:00Z'
+          format: date-time
+          readOnly: true
+          type: string
+        name:
+          description: The name of the notification template.
+          example: Incident Alert Template
+          type: string
+        subject:
+          description: The subject line of the notification template.
+          example: '{{incident.severity}} Incident: {{incident.title}}'
+          type: string
+      required:
+      - name
+      - subject
+      - content
+      - category
+      - created
+      - modified
+      type: object
+    IncidentNotificationTemplateCreateAttributes:
+      description: The attributes for creating a notification template.
+      properties:
+        category:
+          description: The category of the notification template.
+          example: alert
+          type: string
+        content:
+          description: The content body of the notification template.
+          example: 'An incident has been declared.
+
+
+            Title: {{incident.title}}
+
+            Severity: {{incident.severity}}
+
+            Affected Services: {{incident.services}}
+
+            Status: {{incident.state}}
+
+
+            Please join the incident channel for updates.'
+          type: string
+        name:
+          description: The name of the notification template.
+          example: Incident Alert Template
+          type: string
+        subject:
+          description: The subject line of the notification template.
+          example: '{{incident.severity}} Incident: {{incident.title}}'
+          type: string
+      required:
+      - name
+      - subject
+      - content
+      - category
+      type: object
+    IncidentNotificationTemplateCreateData:
+      description: Notification template data for a create request.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IncidentNotificationTemplateCreateAttributes'
+        relationships:
+          $ref: '#/components/schemas/IncidentNotificationTemplateCreateDataRelationships'
+        type:
+          $ref: '#/components/schemas/IncidentNotificationTemplateType'
+      required:
+      - type
+      - attributes
+      type: object
+    IncidentNotificationTemplateCreateDataRelationships:
+      description: The definition of `NotificationTemplateCreateDataRelationships`
+        object.
+      properties:
+        incident_type:
+          $ref: '#/components/schemas/RelationshipToIncidentType'
+      type: object
+    IncidentNotificationTemplateIncludedItems:
+      description: Objects related to a notification template.
+      oneOf:
+      - $ref: '#/components/schemas/User'
+      - $ref: '#/components/schemas/IncidentTypeObject'
+    IncidentNotificationTemplateRelationships:
+      description: The notification template's resource relationships.
+      properties:
+        created_by_user:
+          $ref: '#/components/schemas/RelationshipToUser'
+        incident_type:
+          $ref: '#/components/schemas/RelationshipToIncidentType'
+        last_modified_by_user:
+          $ref: '#/components/schemas/RelationshipToUser'
+      type: object
+    IncidentNotificationTemplateResponseData:
+      description: Notification template data from a response.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IncidentNotificationTemplateAttributes'
+        id:
+          description: The unique identifier of the notification template.
+          example: 00000000-0000-0000-0000-000000000001
+          format: uuid
+          type: string
+        relationships:
+          $ref: '#/components/schemas/IncidentNotificationTemplateRelationships'
+        type:
+          $ref: '#/components/schemas/IncidentNotificationTemplateType'
+      required:
+      - id
+      - type
+      type: object
+    IncidentNotificationTemplateType:
+      description: Notification templates resource type.
+      enum:
+      - notification_templates
+      example: notification_templates
+      type: string
+      x-enum-varnames:
+      - NOTIFICATION_TEMPLATES
+    IncidentNotificationTemplateUpdateAttributes:
+      description: The attributes to update on a notification template.
+      properties:
+        category:
+          description: The category of the notification template.
+          example: update
+          type: string
+        content:
+          description: The content body of the notification template.
+          example: 'Incident Status Update:
+
+
+            Title: {{incident.title}}
+
+            New Status: {{incident.state}}
+
+            Severity: {{incident.severity}}
+
+            Services: {{incident.services}}
+
+            Commander: {{incident.commander}}
+
+
+            For more details, visit the incident page.'
+          type: string
+        name:
+          description: The name of the notification template.
+          example: Incident Status Update Template
+          type: string
+        subject:
+          description: The subject line of the notification template.
+          example: 'Incident Update: {{incident.title}} - {{incident.state}}'
+          type: string
+      type: object
+    IncidentNotificationTemplateUpdateData:
+      description: Notification template data for an update request.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IncidentNotificationTemplateUpdateAttributes'
+        id:
+          description: The unique identifier of the notification template.
+          example: 00000000-0000-0000-0000-000000000001
+          format: uuid
+          type: string
+        type:
+          $ref: '#/components/schemas/IncidentNotificationTemplateType'
+      required:
+      - id
+      - type
+      type: object
     IncidentPostmortemType:
       default: incident_postmortems
       description: Incident postmortem resource type.
@@ -20862,6 +21348,8 @@ components:
           description: The incident type's ID.
           example: 00000000-0000-0000-0000-000000000000
           type: string
+        relationships:
+          $ref: '#/components/schemas/IncidentTypeRelationships'
         type:
           $ref: '#/components/schemas/IncidentTypeType'
       required:
@@ -20892,6 +21380,21 @@ components:
       required:
       - data
       type: object
+    IncidentTypeRelationships:
+      additionalProperties: {}
+      description: The incident type's resource relationships.
+      properties:
+        created_by_user:
+          $ref: '#/components/schemas/RelationshipToUser'
+        google_meet_configuration:
+          $ref: '#/components/schemas/GoogleMeetConfigurationReference'
+        last_modified_by_user:
+          $ref: '#/components/schemas/RelationshipToUser'
+        microsoft_teams_configuration:
+          $ref: '#/components/schemas/MicrosoftTeamsConfigurationReference'
+        zoom_configuration:
+          $ref: '#/components/schemas/ZoomConfigurationReference'
+      type: object
     IncidentTypeResponse:
       description: Incident type response data.
       properties:
@@ -21321,6 +21824,773 @@ components:
       - DOWN
       - WARNING
       - 'OFF'
+    Issue:
+      description: The issue matching the request.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IssueAttributes'
+        id:
+          description: Issue identifier.
+          example: c1726a66-1f64-11ee-b338-da7ad0900002
+          type: string
+        relationships:
+          $ref: '#/components/schemas/IssueRelationships'
+        type:
+          $ref: '#/components/schemas/IssueType'
+      required:
+      - id
+      - type
+      - attributes
+      type: object
+    IssueAssigneeRelationship:
+      description: Relationship between the issue and assignee.
+      properties:
+        data:
+          $ref: '#/components/schemas/IssueUserReference'
+      required:
+      - data
+      type: object
+    IssueAttributes:
+      description: Object containing the information of an issue.
+      properties:
+        error_message:
+          description: Error message associated with the issue.
+          example: object of type 'NoneType' has no len()
+          type: string
+        error_type:
+          description: Type of the error that matches the issue.
+          example: builtins.TypeError
+          type: string
+        file_path:
+          description: Path of the file where the issue occurred.
+          example: /django-email/conduit/apps/core/utils.py
+          type: string
+        first_seen:
+          description: Timestamp of the first seen error in milliseconds since the
+            Unix epoch.
+          example: 1671612804001
+          format: int64
+          type: integer
+        first_seen_version:
+          description: The application version (for example, git commit hash) where
+            the issue was first observed.
+          example: aaf65cd0
+          type: string
+        function_name:
+          description: Name of the function where the issue occurred.
+          example: filter_forbidden_tags
+          type: string
+        is_crash:
+          description: Error is a crash.
+          example: false
+          type: boolean
+        languages:
+          description: Array of programming languages associated with the issue.
+          example:
+          - PYTHON
+          - GO
+          items:
+            $ref: '#/components/schemas/IssueLanguage'
+          type: array
+        last_seen:
+          description: Timestamp of the last seen error in milliseconds since the
+            Unix epoch.
+          example: 1671620003100
+          format: int64
+          type: integer
+        last_seen_version:
+          description: The application version (for example, git commit hash) where
+            the issue was last observed.
+          example: b6199f80
+          type: string
+        platform:
+          $ref: '#/components/schemas/IssuePlatform'
+        service:
+          description: Service name.
+          example: email-api-py
+          type: string
+        state:
+          $ref: '#/components/schemas/IssueState'
+      type: object
+    IssueCase:
+      description: The case attached to the issue.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IssueCaseAttributes'
+        id:
+          description: Case identifier.
+          example: 2841440d-e780-4fe2-96cd-6a8c1d194da5
+          type: string
+        relationships:
+          $ref: '#/components/schemas/IssueCaseRelationships'
+        type:
+          $ref: '#/components/schemas/IssueCaseResourceType'
+      required:
+      - id
+      - type
+      - attributes
+      type: object
+    IssueCaseAttributes:
+      description: Object containing the information of a case.
+      properties:
+        archived_at:
+          description: Timestamp of when the case was archived.
+          example: '2025-01-01T00:00:00Z'
+          format: date-time
+          type: string
+        closed_at:
+          description: Timestamp of when the case was closed.
+          example: '2025-01-01T00:00:00Z'
+          format: date-time
+          type: string
+        created_at:
+          description: Timestamp of when the case was created.
+          example: '2025-01-01T00:00:00Z'
+          format: date-time
+          type: string
+        creation_source:
+          description: Source of the case creation.
+          example: ERROR_TRACKING
+          type: string
+        description:
+          description: Description of the case.
+          type: string
+        due_date:
+          description: Due date of the case.
+          example: '2025-01-01'
+          type: string
+        insights:
+          description: Insights of the case.
+          items:
+            $ref: '#/components/schemas/IssueCaseInsight'
+          type: array
+        jira_issue:
+          $ref: '#/components/schemas/IssueCaseJiraIssue'
+        key:
+          description: Key of the case.
+          example: ET-123
+          type: string
+        modified_at:
+          description: Timestamp of when the case was last modified.
+          example: '2025-01-01T00:00:00Z'
+          format: date-time
+          type: string
+        priority:
+          $ref: '#/components/schemas/CasePriority'
+        status:
+          $ref: '#/components/schemas/CaseStatus'
+        title:
+          description: Title of the case.
+          example: 'Error: HTTP error'
+          type: string
+        type:
+          description: Type of the case.
+          example: ERROR_TRACKING_ISSUE
+          type: string
+      type: object
+    IssueCaseInsight:
+      description: Insight of the case.
+      properties:
+        ref:
+          description: Reference of the insight.
+          example: /error-tracking?issueId=2841440d-e780-4fe2-96cd-6a8c1d194da5
+          type: string
+        resource_id:
+          description: Insight identifier.
+          example: 2841440d-e780-4fe2-96cd-6a8c1d194da5
+          type: string
+        type:
+          description: Type of the insight.
+          example: ERROR_TRACKING
+          type: string
+      type: object
+    IssueCaseJiraIssue:
+      description: Jira issue of the case.
+      properties:
+        result:
+          $ref: '#/components/schemas/IssueCaseJiraIssueResult'
+        status:
+          description: Creation status of the Jira issue.
+          example: COMPLETED
+          type: string
+      type: object
+    IssueCaseJiraIssueResult:
+      description: Contains the identifiers and URL for a successfully created Jira
+        issue.
+      properties:
+        issue_id:
+          description: Jira issue identifier.
+          example: '1904866'
+          type: string
+        issue_key:
+          description: Jira issue key.
+          example: ET-123
+          type: string
+        issue_url:
+          description: Jira issue URL.
+          example: https://your-jira-instance.atlassian.net/browse/ET-123
+          type: string
+        project_key:
+          description: Jira project key.
+          example: ET
+          type: string
+      type: object
+    IssueCaseReference:
+      description: The case the issue is attached to.
+      properties:
+        id:
+          description: Case identifier.
+          example: 2841440d-e780-4fe2-96cd-6a8c1d194da5
+          type: string
+        type:
+          $ref: '#/components/schemas/IssueCaseResourceType'
+      required:
+      - id
+      - type
+      type: object
+    IssueCaseRelationship:
+      description: Relationship between the issue and case.
+      properties:
+        data:
+          $ref: '#/components/schemas/IssueCaseReference'
+      required:
+      - data
+      type: object
+    IssueCaseRelationships:
+      description: Resources related to a case.
+      properties:
+        assignee:
+          $ref: '#/components/schemas/NullableUserRelationship'
+        created_by:
+          $ref: '#/components/schemas/NullableUserRelationship'
+        modified_by:
+          $ref: '#/components/schemas/NullableUserRelationship'
+        project:
+          $ref: '#/components/schemas/ProjectRelationship'
+      type: object
+    IssueCaseResourceType:
+      description: Type of the object.
+      enum:
+      - case
+      example: case
+      type: string
+      x-enum-varnames:
+      - CASE
+    IssueIncluded:
+      description: An array of related resources, returned when the `include` query
+        parameter is used.
+      oneOf:
+      - $ref: '#/components/schemas/IssueCase'
+      - $ref: '#/components/schemas/IssueUser'
+      - $ref: '#/components/schemas/IssueTeam'
+    IssueLanguage:
+      description: Programming language associated with the issue.
+      enum:
+      - BRIGHTSCRIPT
+      - C
+      - C_PLUS_PLUS
+      - C_SHARP
+      - CLOJURE
+      - DOT_NET
+      - ELIXIR
+      - ERLANG
+      - GO
+      - GROOVY
+      - HASKELL
+      - HCL
+      - JAVA
+      - JAVASCRIPT
+      - JVM
+      - KOTLIN
+      - OBJECTIVE_C
+      - PERL
+      - PHP
+      - PYTHON
+      - RUBY
+      - RUST
+      - SCALA
+      - SWIFT
+      - TERRAFORM
+      - TYPESCRIPT
+      - UNKNOWN
+      example: PYTHON
+      type: string
+      x-enum-varnames:
+      - BRIGHTSCRIPT
+      - C
+      - C_PLUS_PLUS
+      - C_SHARP
+      - CLOJURE
+      - DOT_NET
+      - ELIXIR
+      - ERLANG
+      - GO
+      - GROOVY
+      - HASKELL
+      - HCL
+      - JAVA
+      - JAVASCRIPT
+      - JVM
+      - KOTLIN
+      - OBJECTIVE_C
+      - PERL
+      - PHP
+      - PYTHON
+      - RUBY
+      - RUST
+      - SCALA
+      - SWIFT
+      - TERRAFORM
+      - TYPESCRIPT
+      - UNKNOWN
+    IssuePlatform:
+      description: Platform associated with the issue.
+      enum:
+      - ANDROID
+      - BACKEND
+      - BROWSER
+      - FLUTTER
+      - IOS
+      - REACT_NATIVE
+      - ROKU
+      - UNKNOWN
+      example: BACKEND
+      type: string
+      x-enum-varnames:
+      - ANDROID
+      - BACKEND
+      - BROWSER
+      - FLUTTER
+      - IOS
+      - REACT_NATIVE
+      - ROKU
+      - UNKNOWN
+    IssueReference:
+      description: The issue the search result corresponds to.
+      properties:
+        id:
+          description: Issue identifier.
+          example: c1726a66-1f64-11ee-b338-da7ad0900002
+          type: string
+        type:
+          $ref: '#/components/schemas/IssueType'
+      required:
+      - id
+      - type
+      type: object
+    IssueRelationships:
+      description: Relationship between the issue and an assignee, case and/or teams.
+      properties:
+        assignee:
+          $ref: '#/components/schemas/IssueAssigneeRelationship'
+        case:
+          $ref: '#/components/schemas/IssueCaseRelationship'
+        team_owners:
+          $ref: '#/components/schemas/IssueTeamOwnersRelationship'
+      type: object
+    IssueResponse:
+      description: Response containing error tracking issue data.
+      properties:
+        data:
+          $ref: '#/components/schemas/Issue'
+        included:
+          description: Array of resources related to the issue.
+          items:
+            $ref: '#/components/schemas/IssueIncluded'
+          type: array
+      type: object
+    IssueState:
+      description: State of the issue
+      enum:
+      - OPEN
+      - ACKNOWLEDGED
+      - RESOLVED
+      - IGNORED
+      - EXCLUDED
+      example: RESOLVED
+      type: string
+      x-enum-varnames:
+      - OPEN
+      - ACKNOWLEDGED
+      - RESOLVED
+      - IGNORED
+      - EXCLUDED
+    IssueTeam:
+      description: A team that owns an issue.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IssueTeamAttributes'
+        id:
+          description: Team identifier.
+          example: 221b0179-6447-4d03-91c3-3ca98bf60e8a
+          type: string
+        type:
+          $ref: '#/components/schemas/IssueTeamType'
+      required:
+      - id
+      - type
+      - attributes
+      type: object
+    IssueTeamAttributes:
+      description: Object containing the information of a team.
+      properties:
+        handle:
+          description: The team's identifier.
+          example: team-handle
+          type: string
+        name:
+          description: The name of the team.
+          example: Team Name
+          type: string
+        summary:
+          description: A brief summary of the team, derived from its description.
+          example: This is a team.
+          type: string
+      type: object
+    IssueTeamOwnersRelationship:
+      description: Relationship between the issue and teams.
+      properties:
+        data:
+          description: Array of teams that are owners of the issue.
+          items:
+            $ref: '#/components/schemas/IssueTeamReference'
+          type: array
+      required:
+      - data
+      type: object
+    IssueTeamReference:
+      description: A team that owns the issue.
+      properties:
+        id:
+          description: Team identifier.
+          example: 221b0179-6447-4d03-91c3-3ca98bf60e8a
+          type: string
+        type:
+          $ref: '#/components/schemas/IssueTeamType'
+      required:
+      - id
+      - type
+      type: object
+    IssueTeamType:
+      description: Type of the object.
+      enum:
+      - team
+      example: team
+      type: string
+      x-enum-varnames:
+      - TEAM
+    IssueType:
+      description: Type of the object.
+      enum:
+      - issue
+      example: issue
+      type: string
+      x-enum-varnames:
+      - ISSUE
+    IssueUpdateAssigneeRequest:
+      description: Update issue assignee request payload.
+      properties:
+        data:
+          $ref: '#/components/schemas/IssueUpdateAssigneeRequestData'
+      required:
+      - data
+      type: object
+    IssueUpdateAssigneeRequestData:
+      description: Update issue assignee request.
+      properties:
+        id:
+          description: User identifier.
+          example: 87cb11a0-278c-440a-99fe-701223c80296
+          type: string
+        type:
+          $ref: '#/components/schemas/IssueUpdateAssigneeRequestDataType'
+      required:
+      - id
+      - type
+      type: object
+    IssueUpdateAssigneeRequestDataType:
+      description: Type of the object.
+      enum:
+      - assignee
+      example: assignee
+      type: string
+      x-enum-varnames:
+      - ASSIGNEE
+    IssueUpdateStateRequest:
+      description: Update issue state request payload.
+      properties:
+        data:
+          $ref: '#/components/schemas/IssueUpdateStateRequestData'
+      required:
+      - data
+      type: object
+    IssueUpdateStateRequestData:
+      description: Update issue state request.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IssueUpdateStateRequestDataAttributes'
+        id:
+          description: Issue identifier.
+          example: c1726a66-1f64-11ee-b338-da7ad0900002
+          type: string
+        type:
+          $ref: '#/components/schemas/IssueUpdateStateRequestDataType'
+      required:
+      - id
+      - type
+      - attributes
+      type: object
+    IssueUpdateStateRequestDataAttributes:
+      description: Object describing an issue state update request.
+      properties:
+        state:
+          $ref: '#/components/schemas/IssueState'
+      required:
+      - state
+      type: object
+    IssueUpdateStateRequestDataType:
+      description: Type of the object.
+      enum:
+      - error_tracking_issue
+      example: error_tracking_issue
+      type: string
+      x-enum-varnames:
+      - ERROR_TRACKING_ISSUE
+    IssueUser:
+      description: The user to whom the issue is assigned.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IssueUserAttributes'
+        id:
+          description: User identifier.
+          example: 87cb11a0-278c-440a-99fe-701223c80296
+          type: string
+        type:
+          $ref: '#/components/schemas/IssueUserType'
+      required:
+      - id
+      - type
+      - attributes
+      type: object
+    IssueUserAttributes:
+      description: Object containing the information of a user.
+      properties:
+        email:
+          description: Email of the user.
+          example: user@company.com
+          type: string
+        handle:
+          description: Handle of the user.
+          example: User Handle
+          type: string
+        name:
+          description: Name of the user.
+          example: User Name
+          type: string
+      type: object
+    IssueUserReference:
+      description: The user the issue is assigned to.
+      properties:
+        id:
+          description: User identifier.
+          example: 87cb11a0-278c-440a-99fe-701223c80296
+          type: string
+        type:
+          $ref: '#/components/schemas/IssueUserType'
+      required:
+      - id
+      - type
+      type: object
+    IssueUserType:
+      description: Type of the object
+      enum:
+      - user
+      example: user
+      type: string
+      x-enum-varnames:
+      - USER
+    IssuesSearchRequest:
+      description: Search issues request payload.
+      properties:
+        data:
+          $ref: '#/components/schemas/IssuesSearchRequestData'
+      required:
+      - data
+      type: object
+    IssuesSearchRequestData:
+      description: Search issues request.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IssuesSearchRequestDataAttributes'
+        type:
+          $ref: '#/components/schemas/IssuesSearchRequestDataType'
+      required:
+      - type
+      - attributes
+      type: object
+    IssuesSearchRequestDataAttributes:
+      description: Object describing a search issue request.
+      properties:
+        from:
+          description: Start date (inclusive) of the query in milliseconds since the
+            Unix epoch.
+          example: 1671612804000
+          format: int64
+          type: integer
+        order_by:
+          $ref: '#/components/schemas/IssuesSearchRequestDataAttributesOrderBy'
+        persona:
+          $ref: '#/components/schemas/IssuesSearchRequestDataAttributesPersona'
+        query:
+          description: Search query following the event search syntax.
+          example: service:orders-* AND @language:go
+          type: string
+        to:
+          description: End date (exclusive) of the query in milliseconds since the
+            Unix epoch.
+          example: 1671620004000
+          format: int64
+          type: integer
+        track:
+          $ref: '#/components/schemas/IssuesSearchRequestDataAttributesTrack'
+      required:
+      - query
+      - from
+      - to
+      type: object
+    IssuesSearchRequestDataAttributesOrderBy:
+      description: The attribute to sort the search results by.
+      enum:
+      - TOTAL_COUNT
+      - FIRST_SEEN
+      - IMPACTED_SESSIONS
+      - PRIORITY
+      example: IMPACTED_SESSIONS
+      type: string
+      x-enum-varnames:
+      - TOTAL_COUNT
+      - FIRST_SEEN
+      - IMPACTED_SESSIONS
+      - PRIORITY
+    IssuesSearchRequestDataAttributesPersona:
+      description: Persona for the search. Either track(s) or persona(s) must be specified.
+      enum:
+      - ALL
+      - BROWSER
+      - MOBILE
+      - BACKEND
+      example: BACKEND
+      type: string
+      x-enum-varnames:
+      - ALL
+      - BROWSER
+      - MOBILE
+      - BACKEND
+    IssuesSearchRequestDataAttributesTrack:
+      description: Track of the events to query. Either track(s) or persona(s) must
+        be specified.
+      enum:
+      - trace
+      - logs
+      - rum
+      example: trace
+      type: string
+      x-enum-varnames:
+      - TRACE
+      - LOGS
+      - RUM
+    IssuesSearchRequestDataType:
+      description: Type of the object.
+      enum:
+      - search_request
+      example: search_request
+      type: string
+      x-enum-varnames:
+      - SEARCH_REQUEST
+    IssuesSearchResponse:
+      description: Search issues response payload.
+      properties:
+        data:
+          description: Array of results matching the search query.
+          items:
+            $ref: '#/components/schemas/IssuesSearchResult'
+          type: array
+        included:
+          description: Array of resources related to the search results.
+          items:
+            $ref: '#/components/schemas/IssuesSearchResultIncluded'
+          type: array
+      type: object
+    IssuesSearchResult:
+      description: Result matching the search query.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/IssuesSearchResultAttributes'
+        id:
+          description: Search result identifier (matches the nested issue's identifier).
+          example: c1726a66-1f64-11ee-b338-da7ad0900002
+          type: string
+        relationships:
+          $ref: '#/components/schemas/IssuesSearchResultRelationships'
+        type:
+          $ref: '#/components/schemas/IssuesSearchResultType'
+      required:
+      - id
+      - type
+      - attributes
+      type: object
+    IssuesSearchResultAttributes:
+      description: Object containing the information of a search result.
+      properties:
+        impacted_sessions:
+          description: Count of sessions impacted by the issue over the queried time
+            window.
+          example: 12
+          format: int64
+          type: integer
+        impacted_users:
+          description: Count of users impacted by the issue over the queried time
+            window.
+          example: 4
+          format: int64
+          type: integer
+        total_count:
+          description: Total count of errors that match the issue over the queried
+            time window.
+          example: 82
+          format: int64
+          type: integer
+      type: object
+    IssuesSearchResultIncluded:
+      description: An array of related resources, returned when the `include` query
+        parameter is used.
+      oneOf:
+      - $ref: '#/components/schemas/Issue'
+      - $ref: '#/components/schemas/Case'
+      - $ref: '#/components/schemas/IssueUser'
+      - $ref: '#/components/schemas/IssueTeam'
+    IssuesSearchResultIssueRelationship:
+      description: Relationship between the search result and the corresponding issue.
+      properties:
+        data:
+          $ref: '#/components/schemas/IssueReference'
+      required:
+      - data
+      type: object
+    IssuesSearchResultRelationships:
+      description: Relationships between the search result and other resources.
+      properties:
+        issue:
+          $ref: '#/components/schemas/IssuesSearchResultIssueRelationship'
+      type: object
+    IssuesSearchResultType:
+      description: Type of the object.
+      enum:
+      - error_tracking_search_result
+      example: error_tracking_search_result
+      type: string
+      x-enum-varnames:
+      - ERROR_TRACKING_SEARCH_RESULT
     JSONAPIErrorItem:
       description: API error response body
       properties:
@@ -25128,6 +26398,31 @@ components:
       type: string
       x-enum-varnames:
       - MS_TEAMS_CHANNEL_INFO
+    MicrosoftTeamsConfigurationReference:
+      description: A reference to a Microsoft Teams Configuration resource.
+      nullable: true
+      properties:
+        data:
+          $ref: '#/components/schemas/MicrosoftTeamsConfigurationReferenceData'
+      required:
+      - data
+      type: object
+    MicrosoftTeamsConfigurationReferenceData:
+      description: The Microsoft Teams configuration relationship data object.
+      nullable: true
+      properties:
+        id:
+          description: The unique identifier of the Microsoft Teams configuration.
+          example: 00000000-0000-0000-0000-000000000000
+          type: string
+        type:
+          description: The type of the Microsoft Teams configuration.
+          example: microsoft_teams_configurations
+          type: string
+      required:
+      - id
+      - type
+      type: object
     MicrosoftTeamsCreateTenantBasedHandleRequest:
       description: Create tenant-based handle request.
       properties:
@@ -26851,6 +28146,59 @@ components:
       type: string
       x-enum-varnames:
       - AMAZON_S3
+    ObservabilityPipelineAmazonSecurityLakeDestination:
+      description: 'The `amazon_security_lake` destination sends your logs to Amazon
+        Security Lake.
+
+        '
+      properties:
+        auth:
+          $ref: '#/components/schemas/ObservabilityPipelineAwsAuth'
+        bucket:
+          description: Name of the Amazon S3 bucket in Security Lake (3-63 characters).
+          example: security-lake-bucket
+          type: string
+        custom_source_name:
+          description: Custom source name for the logs in Security Lake.
+          example: my-custom-source
+          type: string
+        id:
+          description: Unique identifier for the destination component.
+          example: amazon-security-lake-destination
+          type: string
+        inputs:
+          description: A list of component IDs whose output is used as the `input`
+            for this component.
+          example:
+          - filter-processor
+          items:
+            type: string
+          type: array
+        region:
+          description: AWS region of the S3 bucket.
+          example: us-east-1
+          type: string
+        tls:
+          $ref: '#/components/schemas/ObservabilityPipelineTls'
+        type:
+          $ref: '#/components/schemas/ObservabilityPipelineAmazonSecurityLakeDestinationType'
+      required:
+      - id
+      - type
+      - inputs
+      - bucket
+      - region
+      - custom_source_name
+      type: object
+    ObservabilityPipelineAmazonSecurityLakeDestinationType:
+      default: amazon_security_lake
+      description: The destination type. Always `amazon_security_lake`.
+      enum:
+      - amazon_security_lake
+      example: amazon_security_lake
+      type: string
+      x-enum-varnames:
+      - AMAZON_SECURITY_LAKE
     ObservabilityPipelineAwsAuth:
       description: "AWS authentication credentials used for accessing AWS services
         such as S3.\nIf omitted, the system\u2019s default credentials are used (for
@@ -26922,6 +28270,9 @@ components:
       - $ref: '#/components/schemas/ObservabilityPipelineSentinelOneDestination'
       - $ref: '#/components/schemas/ObservabilityPipelineOpenSearchDestination'
       - $ref: '#/components/schemas/ObservabilityPipelineAmazonOpenSearchDestination'
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketDestination'
+      - $ref: '#/components/schemas/ObservabilityPipelineAmazonSecurityLakeDestination'
+      - $ref: '#/components/schemas/ObservabilityPipelineCrowdStrikeNextGenSiemDestination'
     ObservabilityPipelineConfigProcessorItem:
       description: A processor for the pipeline.
       oneOf:
@@ -26941,6 +28292,8 @@ components:
       - $ref: '#/components/schemas/ObservabilityPipelineEnrichmentTableProcessor'
       - $ref: '#/components/schemas/ObservabilityPipelineReduceProcessor'
       - $ref: '#/components/schemas/ObservabilityPipelineThrottleProcessor'
+      - $ref: '#/components/schemas/ObservabilityPipelineCustomProcessor'
+      - $ref: '#/components/schemas/ObservabilityPipelineDatadogTagsProcessor'
     ObservabilityPipelineConfigSourceItem:
       description: A data source for the pipeline.
       oneOf:
@@ -26959,6 +28312,159 @@ components:
       - $ref: '#/components/schemas/ObservabilityPipelineGooglePubSubSource'
       - $ref: '#/components/schemas/ObservabilityPipelineHttpClientSource'
       - $ref: '#/components/schemas/ObservabilityPipelineLogstashSource'
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketSource'
+    ObservabilityPipelineCrowdStrikeNextGenSiemDestination:
+      description: The `crowdstrike_next_gen_siem` destination forwards logs to CrowdStrike
+        Next Gen SIEM.
+      properties:
+        compression:
+          $ref: '#/components/schemas/ObservabilityPipelineCrowdStrikeNextGenSiemDestinationCompression'
+        encoding:
+          $ref: '#/components/schemas/ObservabilityPipelineCrowdStrikeNextGenSiemDestinationEncoding'
+        id:
+          description: The unique identifier for this component.
+          example: crowdstrike-ngsiem-destination
+          type: string
+        inputs:
+          description: A list of component IDs whose output is used as the `input`
+            for this component.
+          example:
+          - filter-processor
+          items:
+            type: string
+          type: array
+        tls:
+          $ref: '#/components/schemas/ObservabilityPipelineTls'
+        type:
+          $ref: '#/components/schemas/ObservabilityPipelineCrowdStrikeNextGenSiemDestinationType'
+      required:
+      - id
+      - type
+      - inputs
+      - encoding
+      type: object
+    ObservabilityPipelineCrowdStrikeNextGenSiemDestinationCompression:
+      description: Compression configuration for log events.
+      properties:
+        algorithm:
+          $ref: '#/components/schemas/ObservabilityPipelineCrowdStrikeNextGenSiemDestinationCompressionAlgorithm'
+        level:
+          description: Compression level.
+          example: 6
+          format: int64
+          type: integer
+      required:
+      - algorithm
+      type: object
+    ObservabilityPipelineCrowdStrikeNextGenSiemDestinationCompressionAlgorithm:
+      description: Compression algorithm for log events.
+      enum:
+      - gzip
+      - zlib
+      example: gzip
+      type: string
+      x-enum-varnames:
+      - GZIP
+      - ZLIB
+    ObservabilityPipelineCrowdStrikeNextGenSiemDestinationEncoding:
+      description: Encoding format for log events.
+      enum:
+      - json
+      - raw_message
+      example: json
+      type: string
+      x-enum-varnames:
+      - JSON
+      - RAW_MESSAGE
+    ObservabilityPipelineCrowdStrikeNextGenSiemDestinationType:
+      default: crowdstrike_next_gen_siem
+      description: The destination type. The value should always be `crowdstrike_next_gen_siem`.
+      enum:
+      - crowdstrike_next_gen_siem
+      example: crowdstrike_next_gen_siem
+      type: string
+      x-enum-varnames:
+      - CROWDSTRIKE_NEXT_GEN_SIEM
+    ObservabilityPipelineCustomProcessor:
+      description: The `custom_processor` processor transforms events using [Vector
+        Remap Language (VRL)](https://vector.dev/docs/reference/vrl/) scripts with
+        advanced filtering capabilities.
+      properties:
+        id:
+          description: The unique identifier for this processor.
+          example: remap-vrl-processor
+          type: string
+        include:
+          default: '*'
+          description: A Datadog search query used to determine which logs this processor
+            targets. This field should always be set to `*` for the custom_processor
+            processor.
+          example: '*'
+          type: string
+        inputs:
+          description: A list of component IDs whose output is used as the input for
+            this processor.
+          example:
+          - datadog-agent-source
+          items:
+            type: string
+          type: array
+        remaps:
+          description: Array of VRL remap rules.
+          items:
+            $ref: '#/components/schemas/ObservabilityPipelineCustomProcessorRemap'
+          minItems: 1
+          type: array
+        type:
+          $ref: '#/components/schemas/ObservabilityPipelineCustomProcessorType'
+      required:
+      - id
+      - type
+      - include
+      - remaps
+      - inputs
+      type: object
+    ObservabilityPipelineCustomProcessorRemap:
+      description: Defines a single VRL remap rule with its own filtering and transformation
+        logic.
+      properties:
+        drop_on_error:
+          description: Whether to drop events that caused errors during processing.
+          example: false
+          type: boolean
+        enabled:
+          description: Whether this remap rule is enabled.
+          example: true
+          type: boolean
+        include:
+          description: A Datadog search query used to filter events for this specific
+            remap rule.
+          example: service:web
+          type: string
+        name:
+          description: A descriptive name for this remap rule.
+          example: Parse JSON from message field
+          type: string
+        source:
+          description: The VRL script source code that defines the processing logic.
+          example: . = parse_json!(.message)
+          type: string
+      required:
+      - include
+      - name
+      - source
+      - enabled
+      - drop_on_error
+      type: object
+    ObservabilityPipelineCustomProcessorType:
+      default: custom_processor
+      description: The processor type. The value should always be `custom_processor`.
+      enum:
+      - custom_processor
+      example: custom_processor
+      type: string
+      x-enum-varnames:
+      - CUSTOM_PROCESSOR
     ObservabilityPipelineData:
       description: "Contains the pipeline\u2019s ID, type, and configuration attributes."
       properties:
@@ -27050,6 +28556,80 @@ components:
       type: string
       x-enum-varnames:
       - DATADOG_LOGS
+    ObservabilityPipelineDatadogTagsProcessor:
+      description: The `datadog_tags` processor includes or excludes specific Datadog
+        tags in your logs.
+      properties:
+        action:
+          $ref: '#/components/schemas/ObservabilityPipelineDatadogTagsProcessorAction'
+        id:
+          description: The unique identifier for this component. Used to reference
+            this component in other parts of the pipeline (for example, as the `input`
+            to downstream components).
+          example: datadog-tags-processor
+          type: string
+        include:
+          description: A Datadog search query used to determine which logs this processor
+            targets.
+          example: service:my-service
+          type: string
+        inputs:
+          description: A list of component IDs whose output is used as the `input`
+            for this component.
+          example:
+          - datadog-agent-source
+          items:
+            type: string
+          type: array
+        keys:
+          description: A list of tag keys.
+          example:
+          - env
+          - service
+          - version
+          items:
+            type: string
+          type: array
+        mode:
+          $ref: '#/components/schemas/ObservabilityPipelineDatadogTagsProcessorMode'
+        type:
+          $ref: '#/components/schemas/ObservabilityPipelineDatadogTagsProcessorType'
+      required:
+      - id
+      - type
+      - include
+      - mode
+      - action
+      - keys
+      - inputs
+      type: object
+    ObservabilityPipelineDatadogTagsProcessorAction:
+      description: The action to take on tags with matching keys.
+      enum:
+      - include
+      - exclude
+      example: include
+      type: string
+      x-enum-varnames:
+      - INCLUDE
+      - EXCLUDE
+    ObservabilityPipelineDatadogTagsProcessorMode:
+      description: The processing mode.
+      enum:
+      - filter
+      example: filter
+      type: string
+      x-enum-varnames:
+      - FILTER
+    ObservabilityPipelineDatadogTagsProcessorType:
+      default: datadog_tags
+      description: The processor type. The value should always be `datadog_tags`.
+      enum:
+      - datadog_tags
+      example: datadog_tags
+      type: string
+      x-enum-varnames:
+      - DATADOG_TAGS
     ObservabilityPipelineDecoding:
       description: The decoding format used to interpret incoming logs.
       enum:
@@ -29241,6 +30821,278 @@ components:
       type: string
       x-enum-varnames:
       - SENTINEL_ONE
+    ObservabilityPipelineSocketDestination:
+      description: 'The `socket` destination sends logs over TCP or UDP to a remote
+        server.
+
+        '
+      properties:
+        encoding:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationEncoding'
+        framing:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFraming'
+        id:
+          description: The unique identifier for this component.
+          example: socket-destination
+          type: string
+        inputs:
+          description: A list of component IDs whose output is used as the `input`
+            for this component.
+          example:
+          - filter-processor
+          items:
+            type: string
+          type: array
+        mode:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationMode'
+        tls:
+          $ref: '#/components/schemas/ObservabilityPipelineTls'
+          description: TLS configuration. Relevant only when `mode` is `tcp`.
+        type:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationType'
+      required:
+      - id
+      - type
+      - inputs
+      - encoding
+      - framing
+      - mode
+      type: object
+    ObservabilityPipelineSocketDestinationEncoding:
+      description: Encoding format for log events.
+      enum:
+      - json
+      - raw_message
+      example: json
+      type: string
+      x-enum-varnames:
+      - JSON
+      - RAW_MESSAGE
+    ObservabilityPipelineSocketDestinationFraming:
+      description: Framing method configuration.
+      oneOf:
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingNewlineDelimited'
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingBytes'
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingCharacterDelimited'
+    ObservabilityPipelineSocketDestinationFramingBytes:
+      description: Event data is not delimited at all.
+      properties:
+        method:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingBytesMethod'
+      required:
+      - method
+      type: object
+    ObservabilityPipelineSocketDestinationFramingBytesMethod:
+      description: The definition of `ObservabilityPipelineSocketDestinationFramingBytesMethod`
+        object.
+      enum:
+      - bytes
+      example: bytes
+      type: string
+      x-enum-varnames:
+      - BYTES
+    ObservabilityPipelineSocketDestinationFramingCharacterDelimited:
+      description: Each log event is separated using the specified delimiter character.
+      properties:
+        delimiter:
+          description: A single ASCII character used as a delimiter.
+          example: '|'
+          maxLength: 1
+          minLength: 1
+          type: string
+        method:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingCharacterDelimitedMethod'
+      required:
+      - method
+      - delimiter
+      type: object
+    ObservabilityPipelineSocketDestinationFramingCharacterDelimitedMethod:
+      description: The definition of `ObservabilityPipelineSocketDestinationFramingCharacterDelimitedMethod`
+        object.
+      enum:
+      - character_delimited
+      example: character_delimited
+      type: string
+      x-enum-varnames:
+      - CHARACTER_DELIMITED
+    ObservabilityPipelineSocketDestinationFramingNewlineDelimited:
+      description: Each log event is delimited by a newline character.
+      properties:
+        method:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingNewlineDelimitedMethod'
+      required:
+      - method
+      type: object
+    ObservabilityPipelineSocketDestinationFramingNewlineDelimitedMethod:
+      description: The definition of `ObservabilityPipelineSocketDestinationFramingNewlineDelimitedMethod`
+        object.
+      enum:
+      - newline_delimited
+      example: newline_delimited
+      type: string
+      x-enum-varnames:
+      - NEWLINE_DELIMITED
+    ObservabilityPipelineSocketDestinationMode:
+      description: Protocol used to send logs.
+      enum:
+      - tcp
+      - udp
+      example: tcp
+      type: string
+      x-enum-varnames:
+      - TCP
+      - UDP
+    ObservabilityPipelineSocketDestinationType:
+      default: socket
+      description: The destination type. The value should always be `socket`.
+      enum:
+      - socket
+      example: socket
+      type: string
+      x-enum-varnames:
+      - SOCKET
+    ObservabilityPipelineSocketSource:
+      description: 'The `socket` source ingests logs over TCP or UDP.
+
+        '
+      properties:
+        framing:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFraming'
+        id:
+          description: The unique identifier for this component. Used to reference
+            this component in other parts of the pipeline (e.g., as input to downstream
+            components).
+          example: socket-source
+          type: string
+        mode:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketSourceMode'
+        tls:
+          $ref: '#/components/schemas/ObservabilityPipelineTls'
+          description: TLS configuration. Relevant only when `mode` is `tcp`.
+        type:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketSourceType'
+      required:
+      - id
+      - type
+      - mode
+      - framing
+      type: object
+    ObservabilityPipelineSocketSourceFraming:
+      description: Framing method configuration for the socket source.
+      oneOf:
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingNewlineDelimited'
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingBytes'
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingCharacterDelimited'
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingOctetCounting'
+      - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingChunkedGelf'
+    ObservabilityPipelineSocketSourceFramingBytes:
+      description: Byte frames are passed through as-is according to the underlying
+        I/O boundaries (for example, split between messages or stream segments).
+      properties:
+        method:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingBytesMethod'
+      required:
+      - method
+      type: object
+    ObservabilityPipelineSocketSourceFramingBytesMethod:
+      description: Byte frames are passed through as-is according to the underlying
+        I/O boundaries (for example, split between messages or stream segments).
+      enum:
+      - bytes
+      example: bytes
+      type: string
+      x-enum-varnames:
+      - BYTES
+    ObservabilityPipelineSocketSourceFramingCharacterDelimited:
+      description: Byte frames which are delimited by a chosen character.
+      properties:
+        delimiter:
+          description: A single ASCII character used to delimit events.
+          example: '|'
+          maxLength: 1
+          minLength: 1
+          type: string
+        method:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingCharacterDelimitedMethod'
+      required:
+      - method
+      - delimiter
+      type: object
+    ObservabilityPipelineSocketSourceFramingCharacterDelimitedMethod:
+      description: Byte frames which are delimited by a chosen character.
+      enum:
+      - character_delimited
+      example: character_delimited
+      type: string
+      x-enum-varnames:
+      - CHARACTER_DELIMITED
+    ObservabilityPipelineSocketSourceFramingChunkedGelf:
+      description: Byte frames which are chunked GELF messages.
+      properties:
+        method:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingChunkedGelfMethod'
+      required:
+      - method
+      type: object
+    ObservabilityPipelineSocketSourceFramingChunkedGelfMethod:
+      description: Byte frames which are chunked GELF messages.
+      enum:
+      - chunked_gelf
+      example: chunked_gelf
+      type: string
+      x-enum-varnames:
+      - CHUNKED_GELF
+    ObservabilityPipelineSocketSourceFramingNewlineDelimited:
+      description: Byte frames which are delimited by a newline character.
+      properties:
+        method:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingNewlineDelimitedMethod'
+      required:
+      - method
+      type: object
+    ObservabilityPipelineSocketSourceFramingNewlineDelimitedMethod:
+      description: Byte frames which are delimited by a newline character.
+      enum:
+      - newline_delimited
+      example: newline_delimited
+      type: string
+      x-enum-varnames:
+      - NEWLINE_DELIMITED
+    ObservabilityPipelineSocketSourceFramingOctetCounting:
+      description: Byte frames according to the octet counting format as per RFC6587.
+      properties:
+        method:
+          $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingOctetCountingMethod'
+      required:
+      - method
+      type: object
+    ObservabilityPipelineSocketSourceFramingOctetCountingMethod:
+      description: Byte frames according to the octet counting format as per RFC6587.
+      enum:
+      - octet_counting
+      example: octet_counting
+      type: string
+      x-enum-varnames:
+      - OCTET_COUNTING
+    ObservabilityPipelineSocketSourceMode:
+      description: Protocol used to receive logs.
+      enum:
+      - tcp
+      - udp
+      example: tcp
+      type: string
+      x-enum-varnames:
+      - TCP
+      - UDP
+    ObservabilityPipelineSocketSourceType:
+      default: socket
+      description: The source type. The value should always be `socket`.
+      enum:
+      - socket
+      example: socket
+      type: string
+      x-enum-varnames:
+      - SOCKET
     ObservabilityPipelineSpec:
       description: Input schema representing an observability pipeline configuration.
         Used in create and validate requests.
@@ -30275,6 +32127,255 @@ components:
       required:
       - data
       type: object
+    OrgConnection:
+      description: An org connection.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/OrgConnectionAttributes'
+        id:
+          description: The unique identifier of the org connection.
+          example: f9ec96b0-8c8a-4b0a-9b0a-1b2c3d4e5f6a
+          format: uuid
+          type: string
+        relationships:
+          $ref: '#/components/schemas/OrgConnectionRelationships'
+        type:
+          $ref: '#/components/schemas/OrgConnectionType'
+      required:
+      - id
+      - type
+      - attributes
+      - relationships
+      type: object
+    OrgConnectionAttributes:
+      description: Org connection attributes.
+      properties:
+        connection_types:
+          description: List of connection types.
+          example:
+          - logs
+          - metrics
+          items:
+            $ref: '#/components/schemas/OrgConnectionTypeEnum'
+          type: array
+        created_at:
+          description: Timestamp when the connection was created.
+          example: '2023-01-01T12:00:00Z'
+          format: date-time
+          type: string
+      required:
+      - connection_types
+      - created_at
+      type: object
+    OrgConnectionCreate:
+      description: Org connection creation data.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/OrgConnectionCreateAttributes'
+        relationships:
+          $ref: '#/components/schemas/OrgConnectionCreateRelationships'
+        type:
+          $ref: '#/components/schemas/OrgConnectionType'
+      required:
+      - type
+      - attributes
+      - relationships
+      type: object
+    OrgConnectionCreateAttributes:
+      description: Attributes for creating an org connection.
+      properties:
+        connection_types:
+          description: List of connection types to establish.
+          example:
+          - logs
+          items:
+            $ref: '#/components/schemas/OrgConnectionTypeEnum'
+          minItems: 1
+          type: array
+      required:
+      - connection_types
+      type: object
+    OrgConnectionCreateRelationships:
+      description: Relationships for org connection creation.
+      properties:
+        sink_org:
+          $ref: '#/components/schemas/OrgConnectionOrgRelationship'
+      required:
+      - sink_org
+      type: object
+    OrgConnectionCreateRequest:
+      description: Request to create an org connection.
+      properties:
+        data:
+          $ref: '#/components/schemas/OrgConnectionCreate'
+      required:
+      - data
+      type: object
+    OrgConnectionListResponse:
+      description: Response containing a list of org connections.
+      properties:
+        data:
+          description: List of org connections.
+          items:
+            $ref: '#/components/schemas/OrgConnection'
+          type: array
+        meta:
+          $ref: '#/components/schemas/OrgConnectionListResponseMeta'
+      required:
+      - data
+      type: object
+    OrgConnectionListResponseMeta:
+      description: Pagination metadata.
+      properties:
+        page:
+          $ref: '#/components/schemas/OrgConnectionListResponseMetaPage'
+      type: object
+    OrgConnectionListResponseMetaPage:
+      description: Page information.
+      properties:
+        total_count:
+          description: Total number of org connections.
+          example: 0
+          format: int64
+          type: integer
+        total_filtered_count:
+          description: Total number of org connections matching the filter.
+          example: 0
+          format: int64
+          type: integer
+      type: object
+    OrgConnectionOrgRelationship:
+      description: Org relationship.
+      properties:
+        data:
+          $ref: '#/components/schemas/OrgConnectionOrgRelationshipData'
+      type: object
+    OrgConnectionOrgRelationshipData:
+      description: The definition of `OrgConnectionOrgRelationshipData` object.
+      properties:
+        id:
+          description: Org UUID.
+          example: f9ec96b0-8c8a-4b0a-9b0a-1b2c3d4e5f6a
+          type: string
+        name:
+          description: Org name.
+          example: Example Org
+          type: string
+        type:
+          $ref: '#/components/schemas/OrgConnectionOrgRelationshipDataType'
+      type: object
+    OrgConnectionOrgRelationshipDataType:
+      description: The type of the organization relationship.
+      enum:
+      - orgs
+      example: orgs
+      type: string
+      x-enum-varnames:
+      - ORGS
+    OrgConnectionRelationships:
+      description: Related organizations and user.
+      properties:
+        created_by:
+          $ref: '#/components/schemas/OrgConnectionUserRelationship'
+        sink_org:
+          $ref: '#/components/schemas/OrgConnectionOrgRelationship'
+        source_org:
+          $ref: '#/components/schemas/OrgConnectionOrgRelationship'
+      type: object
+    OrgConnectionResponse:
+      description: Response containing a single org connection.
+      properties:
+        data:
+          $ref: '#/components/schemas/OrgConnection'
+      required:
+      - data
+      type: object
+    OrgConnectionType:
+      description: Org connection type.
+      enum:
+      - org_connection
+      example: org_connection
+      type: string
+      x-enum-varnames:
+      - ORG_CONNECTION
+    OrgConnectionTypeEnum:
+      description: Available connection types between organizations.
+      enum:
+      - logs
+      - metrics
+      example: logs
+      type: string
+      x-enum-varnames:
+      - LOGS
+      - METRICS
+    OrgConnectionUpdate:
+      description: Org connection update data.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/OrgConnectionUpdateAttributes'
+        id:
+          description: The unique identifier of the org connection.
+          example: f9ec96b0-8c8a-4b0a-9b0a-1b2c3d4e5f6a
+          format: uuid
+          type: string
+        type:
+          $ref: '#/components/schemas/OrgConnectionType'
+      required:
+      - type
+      - id
+      - attributes
+      type: object
+    OrgConnectionUpdateAttributes:
+      description: Attributes for updating an org connection.
+      properties:
+        connection_types:
+          description: Updated list of connection types.
+          example:
+          - logs
+          - metrics
+          items:
+            $ref: '#/components/schemas/OrgConnectionTypeEnum'
+          minItems: 1
+          type: array
+      required:
+      - connection_types
+      type: object
+    OrgConnectionUpdateRequest:
+      description: Request to update an org connection.
+      properties:
+        data:
+          $ref: '#/components/schemas/OrgConnectionUpdate'
+      required:
+      - data
+      type: object
+    OrgConnectionUserRelationship:
+      description: User relationship.
+      properties:
+        data:
+          $ref: '#/components/schemas/OrgConnectionUserRelationshipData'
+      type: object
+    OrgConnectionUserRelationshipData:
+      description: The data for a user relationship.
+      properties:
+        id:
+          description: User UUID.
+          example: usr123abc456
+          type: string
+        name:
+          description: User name.
+          example: John Doe
+          type: string
+        type:
+          $ref: '#/components/schemas/OrgConnectionUserRelationshipDataType'
+      type: object
+    OrgConnectionUserRelationshipDataType:
+      description: The type of the user relationship.
+      enum:
+      - users
+      example: users
+      type: string
+      x-enum-varnames:
+      - USERS
     Organization:
       description: Organization object.
       properties:
@@ -30710,6 +32811,14 @@ components:
             $ref: '#/components/schemas/ApplicationKeyResponseIncludedItem'
           type: array
       type: object
+    PatchIncidentNotificationTemplateRequest:
+      description: Update request for a notification template.
+      properties:
+        data:
+          $ref: '#/components/schemas/IncidentNotificationTemplateUpdateData'
+      required:
+      - data
+      type: object
     PatchNotificationRuleParameters:
       description: Body of the notification rule patch request.
       properties:
@@ -31604,6 +33713,8 @@ components:
           format: int32
           maximum: 2147483647
           type: integer
+        product_scales:
+          $ref: '#/components/schemas/RUMProductScales'
         type:
           description: Type of the RUM application. Supported values are `browser`,
             `ios`, `android`, `react-native`, `flutter`, `roku`, `electron`, `unity`,
@@ -31648,6 +33759,10 @@ components:
           description: Name of the RUM application.
           example: my_new_rum_application
           type: string
+        product_analytics_retention_state:
+          $ref: '#/components/schemas/RUMProductAnalyticsRetentionState'
+        rum_event_processing_state:
+          $ref: '#/components/schemas/RUMEventProcessingState'
         type:
           description: Type of the RUM application. Supported values are `browser`,
             `ios`, `android`, `react-native`, `flutter`, `roku`, `electron`, `unity`,
@@ -31722,6 +33837,8 @@ components:
           format: int32
           maximum: 2147483647
           type: integer
+        product_scales:
+          $ref: '#/components/schemas/RUMProductScales'
         type:
           description: Type of the RUM application. Supported values are `browser`,
             `ios`, `android`, `react-native`, `flutter`, `roku`, `electron`, `unity`,
@@ -31793,6 +33910,10 @@ components:
           description: Name of the RUM application.
           example: updated_name_for_my_existing_rum_application
           type: string
+        product_analytics_retention_state:
+          $ref: '#/components/schemas/RUMProductAnalyticsRetentionState'
+        rum_event_processing_state:
+          $ref: '#/components/schemas/RUMEventProcessingState'
         type:
           description: Type of the RUM application. Supported values are `browser`,
             `ios`, `android`, `react-native`, `flutter`, `roku`, `electron`, `unity`,
@@ -31921,6 +34042,33 @@ components:
           format: date-time
           type: string
       type: object
+    RUMEventProcessingScale:
+      description: RUM event processing scale configuration.
+      properties:
+        last_modified_at:
+          description: Timestamp in milliseconds when this scale was last modified.
+          example: 1721897494108
+          format: int64
+          type: integer
+        state:
+          $ref: '#/components/schemas/RUMEventProcessingState'
+      type: object
+    RUMEventProcessingState:
+      description: Configures which RUM events are processed and stored for the application.
+      enum:
+      - ALL
+      - ERROR_FOCUSED_MODE
+      - NONE
+      example: ALL
+      type: string
+      x-enum-descriptions:
+      - Process and store all RUM events (sessions, views, actions, resources, errors)
+      - Process and store only error events and related critical events
+      - "Disable RUM event processing\u2014no events are stored"
+      x-enum-varnames:
+      - ALL
+      - ERROR_FOCUSED_MODE
+      - NONE
     RUMEventType:
       default: rum
       description: Type of the event.
@@ -32027,6 +34175,39 @@ components:
     RUMGroupByTotalString:
       description: A string to use as the key value for the total bucket.
       type: string
+    RUMProductAnalyticsRetentionScale:
+      description: Product Analytics retention scale configuration.
+      properties:
+        last_modified_at:
+          description: Timestamp in milliseconds when this scale was last modified.
+          example: 1747922145974
+          format: int64
+          type: integer
+        state:
+          $ref: '#/components/schemas/RUMProductAnalyticsRetentionState'
+      type: object
+    RUMProductAnalyticsRetentionState:
+      description: Controls the retention policy for Product Analytics data derived
+        from RUM events.
+      enum:
+      - MAX
+      - NONE
+      example: MAX
+      type: string
+      x-enum-descriptions:
+      - Store Product Analytics data for the maximum available retention period
+      - Do not store Product Analytics data
+      x-enum-varnames:
+      - MAX
+      - NONE
+    RUMProductScales:
+      description: Product Scales configuration for the RUM application.
+      properties:
+        product_analytics_retention_scale:
+          $ref: '#/components/schemas/RUMProductAnalyticsRetentionScale'
+        rum_event_processing_scale:
+          $ref: '#/components/schemas/RUMEventProcessingScale'
+      type: object
     RUMQueryFilter:
       description: The search and filter query settings.
       properties:
@@ -32207,6 +34388,52 @@ components:
       x-enum-varnames:
       - ANY
       - ALL
+    RecommendationAttributes:
+      description: Attributes of the SPA Recommendation resource. Contains recommendations
+        for both driver and executor components.
+      properties:
+        driver:
+          $ref: '#/components/schemas/ComponentRecommendation'
+        executor:
+          $ref: '#/components/schemas/ComponentRecommendation'
+      required:
+      - driver
+      - executor
+      type: object
+    RecommendationData:
+      description: JSON:API resource object for SPA Recommendation. Includes type,
+        optional ID, and resource attributes with structured recommendations.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/RecommendationAttributes'
+        id:
+          description: Resource identifier for the recommendation. Optional in responses.
+          type: string
+        type:
+          $ref: '#/components/schemas/RecommendationType'
+      required:
+      - type
+      - attributes
+      type: object
+    RecommendationDocument:
+      description: JSON:API document containing a single Recommendation resource.
+        Returned by SPA when the Spark Gateway requests recommendations.
+      properties:
+        data:
+          $ref: '#/components/schemas/RecommendationData'
+      required:
+      - data
+      type: object
+    RecommendationType:
+      default: recommendation
+      description: JSON:API resource type for Spark Pod Autosizing recommendations.
+        Identifies the Recommendation resource returned by SPA.
+      enum:
+      - recommendation
+      example: recommendation
+      type: string
+      x-enum-varnames:
+      - RECOMMENDATION
     RegisterAppKeyResponse:
       description: The response object after creating an app key registration.
       properties:
@@ -32499,6 +34726,27 @@ components:
       required:
       - data
       type: object
+    RelationshipToIncidentType:
+      description: Relationship to an incident type.
+      properties:
+        data:
+          $ref: '#/components/schemas/RelationshipToIncidentTypeData'
+      required:
+      - data
+      type: object
+    RelationshipToIncidentTypeData:
+      description: Relationship to incident type object.
+      properties:
+        id:
+          description: The incident type's ID.
+          example: 00000000-0000-0000-0000-000000000000
+          type: string
+        type:
+          $ref: '#/components/schemas/IncidentTypeType'
+      required:
+      - id
+      - type
+      type: object
     RelationshipToIncidentUserDefinedFieldData:
       description: Relationship to impact object.
       properties:
@@ -33711,6 +35959,8 @@ components:
           description: If enabled, the rule is calculated as part of the score.
           example: true
           type: boolean
+        level:
+          $ref: '#/components/schemas/RuleLevel'
         modified_at:
           description: Time of the last rule outcome modification.
           format: date-time
@@ -33731,6 +35981,13 @@ components:
       description: The unique ID for a scorecard rule.
       example: q8MQxk8TCqrHnWkx
       type: string
+    RuleLevel:
+      description: The maturity level of the rule (1, 2, or 3).
+      example: 2
+      format: int32
+      maximum: 3
+      minimum: 1
+      type: integer
     RuleName:
       description: Name of the notification rule.
       example: Rule 1
@@ -35509,6 +37766,20 @@ components:
       type: string
       x-enum-varnames:
       - SCORECARD
+    SearchIssuesIncludeQueryParameterItem:
+      description: Relationship object that should be included in the search response.
+      enum:
+      - issue
+      - issue.assignee
+      - issue.case
+      - issue.team_owners
+      example: issue.case
+      type: string
+      x-enum-varnames:
+      - ISSUE
+      - ISSUE_ASSIGNEE
+      - ISSUE_CASE
+      - ISSUE_TEAM_OWNERS
     SecurityFilter:
       description: The security filter's properties.
       properties:
@@ -38712,6 +40983,12 @@ components:
         replacement_string:
           description: Required if type == 'replacement_string'.
           type: string
+        should_save_match:
+          description: "Only valid when type == `replacement_string`. When enabled,
+            matches can be unmasked in logs by users with \u2018Data Scanner Unmask\u2019
+            permission. As a security best practice, avoid masking for highly-sensitive,
+            long-lived data."
+          type: boolean
         type:
           $ref: '#/components/schemas/SensitiveDataScannerTextReplacementType'
       type: object
@@ -39828,7 +42105,7 @@ components:
           type: string
       type: object
     Shift:
-      description: The definition of `Shift` object.
+      description: An on-call shift with its associated data and relationships.
       example:
         data:
           attributes:
@@ -39859,7 +42136,7 @@ components:
           type: array
       type: object
     ShiftData:
-      description: The definition of `ShiftData` object.
+      description: Data for an on-call shift.
       properties:
         attributes:
           $ref: '#/components/schemas/ShiftDataAttributes'
@@ -39874,7 +42151,7 @@ components:
       - type
       type: object
     ShiftDataAttributes:
-      description: The definition of `ShiftDataAttributes` object.
+      description: Attributes for an on-call shift.
       properties:
         end:
           description: The end time of the shift.
@@ -39886,7 +42163,7 @@ components:
           type: string
       type: object
     ShiftDataRelationships:
-      description: The definition of `ShiftDataRelationships` object.
+      description: Relationships for an on-call shift.
       properties:
         user:
           $ref: '#/components/schemas/ShiftDataRelationshipsUser'
@@ -39933,7 +42210,7 @@ components:
       x-enum-varnames:
       - SHIFTS
     ShiftIncluded:
-      description: The definition of `ShiftIncluded` object.
+      description: Included data for shift operations.
       oneOf:
       - $ref: '#/components/schemas/ScheduleUser'
     SimpleMonitorUserTemplate:
@@ -42273,6 +44550,68 @@ components:
         urgency:
           $ref: '#/components/schemas/Urgency'
       type: object
+    TeamSyncAttributes:
+      description: Team sync attributes.
+      properties:
+        source:
+          $ref: '#/components/schemas/TeamSyncAttributesSource'
+        type:
+          $ref: '#/components/schemas/TeamSyncAttributesType'
+      required:
+      - source
+      - type
+      type: object
+    TeamSyncAttributesSource:
+      description: The external source platform for team synchronization. Only "github"
+        is supported.
+      enum:
+      - github
+      example: github
+      type: string
+      x-enum-varnames:
+      - GITHUB
+    TeamSyncAttributesType:
+      description: The type of synchronization operation. Only "link" is supported,
+        which links existing teams by matching names.
+      enum:
+      - link
+      example: link
+      type: string
+      x-enum-varnames:
+      - LINK
+    TeamSyncBulkType:
+      description: Team sync bulk type.
+      enum:
+      - team_sync_bulk
+      example: team_sync_bulk
+      type: string
+      x-enum-varnames:
+      - TEAM_SYNC_BULK
+    TeamSyncData:
+      description: Team sync data.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/TeamSyncAttributes'
+        type:
+          $ref: '#/components/schemas/TeamSyncBulkType'
+      required:
+      - attributes
+      - type
+      type: object
+    TeamSyncRequest:
+      description: Team sync request.
+      example:
+        data:
+          attributes:
+            source: github
+            type: link
+          type: team_sync_bulk
+      properties:
+        data:
+          $ref: '#/components/schemas/TeamSyncData'
+      required:
+      - data
+      type: object
     TeamTarget:
       description: Represents a team target for an escalation policy step, including
         the team's ID and resource type.
@@ -43034,6 +45373,57 @@ components:
         id:
           $ref: '#/components/schemas/ApiID'
       type: object
+    UpdateOutcomesAsyncAttributes:
+      description: The JSON:API attributes for a batched set of scorecard outcomes.
+      properties:
+        results:
+          description: Set of scorecard outcomes to update asynchronously.
+          items:
+            $ref: '#/components/schemas/UpdateOutcomesAsyncRequestItem'
+          type: array
+      type: object
+    UpdateOutcomesAsyncRequest:
+      description: Scorecard outcomes batch request.
+      properties:
+        data:
+          $ref: '#/components/schemas/UpdateOutcomesAsyncRequestData'
+      type: object
+    UpdateOutcomesAsyncRequestData:
+      description: Scorecard outcomes batch request data.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/UpdateOutcomesAsyncAttributes'
+        type:
+          $ref: '#/components/schemas/UpdateOutcomesAsyncType'
+      type: object
+    UpdateOutcomesAsyncRequestItem:
+      description: Scorecard outcome for a single entity and rule.
+      properties:
+        entity_reference:
+          $ref: '#/components/schemas/EntityReference'
+        remarks:
+          description: Any remarks regarding the scorecard rule's evaluation. Supports
+            HTML hyperlinks.
+          example: 'See: <a href="https://app.datadoghq.com/services">Services</a>'
+          type: string
+        rule_id:
+          $ref: '#/components/schemas/RuleId'
+        state:
+          $ref: '#/components/schemas/State'
+      required:
+      - rule_id
+      - entity_reference
+      - state
+      type: object
+    UpdateOutcomesAsyncType:
+      default: batched-outcome
+      description: The JSON:API type for scorecard outcomes.
+      enum:
+      - batched-outcome
+      example: batched-outcome
+      type: string
+      x-enum-varnames:
+      - BATCHED_OUTCOME
     UpdateResourceEvaluationFiltersRequest:
       description: Request object to update a resource filter.
       properties:
@@ -44806,6 +47196,31 @@ components:
       oneOf:
       - $ref: '#/components/schemas/XRayServicesIncludeAll'
       - $ref: '#/components/schemas/XRayServicesIncludeOnly'
+    ZoomConfigurationReference:
+      description: A reference to a Zoom configuration resource.
+      nullable: true
+      properties:
+        data:
+          $ref: '#/components/schemas/ZoomConfigurationReferenceData'
+      required:
+      - data
+      type: object
+    ZoomConfigurationReferenceData:
+      description: The Zoom configuration relationship data object.
+      nullable: true
+      properties:
+        id:
+          description: The unique identifier of the Zoom configuration.
+          example: 00000000-0000-0000-0000-000000000000
+          type: string
+        type:
+          description: The type of the Zoom configuration.
+          example: zoom_configurations
+          type: string
+      required:
+      - id
+      - type
+      type: object
   securitySchemes:
     AuthZ:
       description: This API uses OAuth 2 with the implicit grant flow.
@@ -44848,11 +47263,14 @@ components:
             data_scanner_write: Edit Data Scanner configurations.
             embeddable_graphs_share: Generate public links to share embeddable graphs
               externally.
+            error_tracking_read: Read Error Tracking data.
+            error_tracking_write: Edit Error Tracking issues.
             events_read: Read Events data.
             hosts_read: List hosts and their attributes.
             incident_notification_settings_write: Configure Incidents Notification
               settings.
             incident_read: View incidents in Datadog.
+            incident_settings_read: View Incident Settings.
             incident_settings_write: Configure Incident Settings.
             incident_write: Create, view, and manage incidents in Datadog.
             metrics_read: View custom metrics.
@@ -44861,6 +47279,8 @@ components:
               is not required to set downtimes.
             monitors_read: View monitors.
             monitors_write: Edit, delete, and resolve individual monitors.
+            org_connections_read: Read cross organization connections.
+            org_connections_write: Create, edit, and delete cross organization connections.
             org_management: Edit org configurations, including authentication and
               certain security preferences such as configuring SAML, renaming an org,
               configuring allowed login methods, creating child orgs, subscribing
@@ -45154,6 +47574,7 @@ paths:
     delete:
       description: Delete an existing Action Connection. This API requires a [registered
         application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: DeleteActionConnection
       parameters:
       - $ref: '#/components/parameters/ConnectionId'
@@ -45287,7 +47708,7 @@ paths:
           $ref: '#/components/responses/NotAuthorizedResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
-      summary: Get AWS Scan Options
+      summary: List AWS Scan Options
       tags:
       - Agentless Scanning
     post:
@@ -45339,6 +47760,29 @@ paths:
       summary: Delete AWS Scan Options
       tags:
       - Agentless Scanning
+    get:
+      description: Fetches the Agentless scan options for an activated account.
+      operationId: GetAwsScanOptions
+      parameters:
+      - $ref: '#/components/parameters/AwsAccountId'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/AwsScanOptionsResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Get AWS scan options
+      tags:
+      - Agentless Scanning
     patch:
       description: Update the Agentless scan options for an activated account.
       operationId: UpdateAwsScanOptions
@@ -46258,6 +48702,7 @@ paths:
     delete:
       description: Delete multiple apps in a single request from a list of app IDs.
         This API requires a [registered application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: DeleteApps
       requestBody:
         content:
@@ -46304,6 +48749,7 @@ paths:
         is paginated. Only basic app information such as the app ID, name, and description
         is returned by this endpoint. This API requires a [registered application
         key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: ListApps
       parameters:
       - description: The number of apps to return per page.
@@ -46411,6 +48857,7 @@ paths:
     post:
       description: Create a new app, returning the app ID. This API requires a [registered
         application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: CreateApp
       requestBody:
         content:
@@ -46452,6 +48899,7 @@ paths:
     delete:
       description: Delete a single app. This API requires a [registered application
         key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: DeleteApp
       parameters:
       - description: The ID of the app to delete.
@@ -46505,6 +48953,7 @@ paths:
     get:
       description: Get the full definition of an app. This API requires a [registered
         application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: GetApp
       parameters:
       - description: The ID of the app to retrieve.
@@ -46568,6 +49017,7 @@ paths:
     patch:
       description: Update an existing app. This creates a new version of the app.
         This API requires a [registered application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: UpdateApp
       parameters:
       - description: The ID of the app to update.
@@ -46621,6 +49071,7 @@ paths:
         (`00000000-0000-0000-0000-000000000000`). The app can still be updated and
         published again in the future. This API requires a [registered application
         key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: UnpublishApp
       parameters:
       - description: The ID of the app to unpublish.
@@ -46670,6 +49121,7 @@ paths:
         to the correct users, you also need to set a [Restriction Policy](https://docs.datadoghq.com/api/latest/restriction-policies/)
         on the app if a policy does not yet exist. This API requires a [registered
         application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: PublishApp
       parameters:
       - description: The ID of the app to publish.
@@ -48904,6 +51356,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
       security:
@@ -49056,6 +51514,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
       security:
@@ -49173,6 +51637,31 @@ paths:
     get:
       description: List the Custom Costs files.
       operationId: ListCustomCostsFiles
+      parameters:
+      - description: Page number for pagination
+        in: query
+        name: page[number]
+        schema:
+          format: int64
+          type: integer
+      - description: Page size for pagination
+        in: query
+        name: page[size]
+        schema:
+          default: 100
+          format: int64
+          type: integer
+      - description: Filter by file status
+        in: query
+        name: filter[status]
+        schema:
+          type: string
+      - description: Sort key with optional descending prefix
+        in: query
+        name: sort
+        schema:
+          default: created_at
+          type: string
       responses:
         '200':
           content:
@@ -49180,6 +51669,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/CustomCostsFileListResponse'
           description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
         '403':
           content:
             application/json:
@@ -49212,6 +51707,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/CustomCostsFileUploadResponse'
           description: Accepted
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
         '403':
           content:
             application/json:
@@ -49243,6 +51744,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
       security:
@@ -49271,6 +51778,12 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Forbidden
+        '404':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Not Found
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
       security:
@@ -49599,13 +52112,15 @@ paths:
         appKeyAuth: []
       - AuthZ:
         - usage_read
+        - billing_read
       summary: Get Monthly Cost Attribution
       tags:
       - Usage Metering
       x-permission:
-        operator: OR
+        operator: AND
         permissions:
         - usage_read
+        - billing_read
   /api/v2/csm/onboarding/agents:
     get:
       description: Get the list of all CSM Agents running on your hosts and containers.
@@ -51162,6 +53677,159 @@ paths:
         operator: OR
         permissions:
         - monitors_downtime
+  /api/v2/error-tracking/issues/search:
+    post:
+      description: Search issues endpoint allows you to programmatically search for
+        issues within your organization. This endpoint returns a list of issues that
+        match a given search query, following the event search syntax. The search
+        results are limited to a maximum of 100 issues per request.
+      operationId: SearchIssues
+      parameters:
+      - $ref: '#/components/parameters/SearchIssuesIncludeQueryParameter'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/IssuesSearchRequest'
+        description: Search issues request payload.
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/IssuesSearchResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - error_tracking_read
+      summary: Search error tracking issues
+      tags:
+      - Error Tracking
+  /api/v2/error-tracking/issues/{issue_id}:
+    get:
+      description: Retrieve the full details for a specific error tracking issue,
+        including attributes and relationships.
+      operationId: GetIssue
+      parameters:
+      - $ref: '#/components/parameters/IssueIDPathParameter'
+      - $ref: '#/components/parameters/GetIssueIncludeQueryParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/IssueResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - error_tracking_read
+      summary: Get the details of an error tracking issue
+      tags:
+      - Error Tracking
+  /api/v2/error-tracking/issues/{issue_id}/assignee:
+    put:
+      description: Update the assignee of an issue by `issue_id`.
+      operationId: UpdateIssueAssignee
+      parameters:
+      - $ref: '#/components/parameters/IssueIDPathParameter'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/IssueUpdateAssigneeRequest'
+        description: Update issue assignee request payload.
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/IssueResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - error_tracking_read
+        - error_tracking_write
+        - cases_read
+        - cases_write
+      summary: Update the assignee of an issue
+      tags:
+      - Error Tracking
+  /api/v2/error-tracking/issues/{issue_id}/state:
+    put:
+      description: Update the state of an issue by `issue_id`. Use this endpoint to
+        move an issue between states such as `OPEN`, `RESOLVED`, or `IGNORED`.
+      operationId: UpdateIssueState
+      parameters:
+      - $ref: '#/components/parameters/IssueIDPathParameter'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/IssueUpdateStateRequest'
+        description: Update issue state request payload.
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/IssueResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - error_tracking_read
+        - error_tracking_write
+      summary: Update the state of an issue
+      tags:
+      - Error Tracking
   /api/v2/events:
     get:
       description: 'List endpoint returns events that match an events search query.
@@ -51530,6 +54198,208 @@ paths:
         - incident_write
       x-unstable: '**Note**: This endpoint is in public beta.
 
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+  /api/v2/incidents/config/notification-templates:
+    get:
+      description: Lists all notification templates. Optionally filter by incident
+        type.
+      operationId: ListIncidentNotificationTemplates
+      parameters:
+      - $ref: '#/components/parameters/IncidentNotificationTemplateIncidentTypeFilterQueryParameter'
+      - $ref: '#/components/parameters/IncidentNotificationTemplateIncludeQueryParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/IncidentNotificationTemplateArray'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_read
+      summary: List incident notification templates
+      tags:
+      - Incidents
+      x-permission:
+        operator: AND
+        permissions:
+        - incident_notification_settings_read
+      x-unstable: '**Note**: This endpoint is in Preview.
+
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+    post:
+      description: Creates a new notification template.
+      operationId: CreateIncidentNotificationTemplate
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/CreateIncidentNotificationTemplateRequest'
+        required: true
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/IncidentNotificationTemplate'
+          description: Created
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_notification_settings_write
+      summary: Create incident notification template
+      tags:
+      - Incidents
+      x-codegen-request-body-name: body
+      x-permission:
+        operator: AND
+        permissions:
+        - incident_notification_settings_write
+      x-unstable: '**Note**: This endpoint is in Preview.
+
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+  /api/v2/incidents/config/notification-templates/{id}:
+    delete:
+      description: Deletes a notification template by its ID.
+      operationId: DeleteIncidentNotificationTemplate
+      parameters:
+      - $ref: '#/components/parameters/IncidentNotificationTemplateIDPathParameter'
+      - $ref: '#/components/parameters/IncidentNotificationTemplateIncludeQueryParameter'
+      responses:
+        '204':
+          description: No Content
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_notification_settings_write
+      summary: Delete a notification template
+      tags:
+      - Incidents
+      x-permission:
+        operator: AND
+        permissions:
+        - incident_notification_settings_write
+      x-unstable: '**Note**: This endpoint is in Preview.
+
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+    get:
+      description: Retrieves a specific notification template by its ID.
+      operationId: GetIncidentNotificationTemplate
+      parameters:
+      - $ref: '#/components/parameters/IncidentNotificationTemplateIDPathParameter'
+      - $ref: '#/components/parameters/IncidentNotificationTemplateIncludeQueryParameter'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/IncidentNotificationTemplate'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_settings_read
+      summary: Get incident notification template
+      tags:
+      - Incidents
+      x-permission:
+        operator: OR
+        permissions:
+        - incident_settings_read
+        - incident_write
+        - incident_read
+      x-unstable: '**Note**: This endpoint is in Preview.
+
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+    patch:
+      description: Updates an existing notification template's attributes.
+      operationId: UpdateIncidentNotificationTemplate
+      parameters:
+      - $ref: '#/components/parameters/IncidentNotificationTemplateIDPathParameter'
+      - $ref: '#/components/parameters/IncidentNotificationTemplateIncludeQueryParameter'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PatchIncidentNotificationTemplateRequest'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/IncidentNotificationTemplate'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - incident_notification_settings_write
+      summary: Update incident notification template
+      tags:
+      - Incidents
+      x-codegen-request-body-name: body
+      x-permission:
+        operator: AND
+        permissions:
+        - incident_notification_settings_write
+      x-unstable: '**Note**: This endpoint is in Preview.
+
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
   /api/v2/incidents/config/types:
     get:
@@ -55875,25 +58745,25 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/APIErrorResponse'
+                $ref: '#/components/schemas/JSONAPIErrorResponse'
           description: Bad Request
         '403':
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/APIErrorResponse'
+                $ref: '#/components/schemas/JSONAPIErrorResponse'
           description: Forbidden
         '404':
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/APIErrorResponse'
+                $ref: '#/components/schemas/JSONAPIErrorResponse'
           description: Not Found
         '429':
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/APIErrorResponse'
+                $ref: '#/components/schemas/JSONAPIErrorResponse'
           description: Too Many Requests
       summary: Get tag key cardinality details
       tags:
@@ -56156,6 +59026,47 @@ paths:
       description: Returns a list of all monitor notification rules.
       operationId: GetMonitorNotificationRules
       parameters:
+      - description: The page to start paginating from. If `page` is not specified,
+          the argument defaults to the first page.
+        in: query
+        name: page
+        required: false
+        schema:
+          format: int32
+          maximum: 1000000
+          minimum: 0
+          type: integer
+      - description: The number of rules to return per page. If `per_page` is not
+          specified, the argument defaults to 100.
+        in: query
+        name: per_page
+        required: false
+        schema:
+          format: int32
+          maximum: 1000
+          minimum: 1
+          type: integer
+      - description: 'String for sort order, composed of field and sort order separated
+          by a colon, for example `name:asc`. Supported sort directions: `asc`, `desc`.
+          Supported fields: `name`, `created_at`.'
+        in: query
+        name: sort
+        required: false
+        schema:
+          type: string
+      - description: 'JSON-encoded filter object. Supported keys:
+
+          * `text`: Free-text query matched against rule name, tags, and recipients.
+
+          * `tags`: Array of strings. Return rules that have any of these tags.
+
+          * `recipients`: Array of strings. Return rules that have any of these recipients.'
+        example: '{"text":"error","tags":["env:prod","team:my-team"],"recipients":["slack-monitor-app","email@example.com"]}'
+        in: query
+        name: filters
+        required: false
+        schema:
+          type: string
       - description: 'Comma-separated list of resource paths for related resources
           to include in the response. Supported resource
 
@@ -58013,6 +60924,148 @@ paths:
         operator: OR
         permissions:
         - org_management
+  /api/v2/org_connections:
+    get:
+      description: Returns a list of org connections.
+      operationId: ListOrgConnections
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/OrgConnectionListResponse'
+          description: OK
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - org_connections_read
+      summary: List Org Connections
+      tags:
+      - Org Connections
+      x-permission:
+        operator: OR
+        permissions:
+        - org_connections_read
+    post:
+      description: Create a new org connection between the current org and a target
+        org.
+      operationId: CreateOrgConnections
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/OrgConnectionCreateRequest'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/OrgConnectionResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '409':
+          $ref: '#/components/responses/ConflictResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - org_connections_write
+      summary: Create Org Connection
+      tags:
+      - Org Connections
+      x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - org_connections_write
+  /api/v2/org_connections/{connection_id}:
+    delete:
+      description: Delete an existing org connection.
+      operationId: DeleteOrgConnections
+      parameters:
+      - $ref: '#/components/parameters/OrgConnectionId'
+      responses:
+        '200':
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - org_connections_write
+      summary: Delete Org Connection
+      tags:
+      - Org Connections
+      x-permission:
+        operator: OR
+        permissions:
+        - org_connections_write
+    patch:
+      description: Update an existing org connection.
+      operationId: UpdateOrgConnections
+      parameters:
+      - $ref: '#/components/parameters/OrgConnectionId'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/OrgConnectionUpdateRequest'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/OrgConnectionResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - org_connections_write
+      summary: Update Org Connection
+      tags:
+      - Org Connections
+      x-permission:
+        operator: OR
+        permissions:
+        - org_connections_write
   /api/v2/permissions:
     get:
       description: Returns a list of all permissions, including name, description,
@@ -61018,6 +64071,39 @@ paths:
         resultsPath: data
       x-unstable: '**Note**: This endpoint is in public beta.
 
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+    post:
+      description: Updates multiple scorecard rule outcomes in a single batched request.
+      operationId: UpdateScorecardOutcomesAsync
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/UpdateOutcomesAsyncRequest'
+        description: Set of scorecard outcomes.
+        required: true
+      responses:
+        '202':
+          description: Accepted
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '409':
+          $ref: '#/components/responses/ConflictResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - apm_service_catalog_write
+      summary: Update Scorecard outcomes asynchronously
+      tags:
+      - Service Scorecards
+      x-codegen-request-body-name: body
+      x-unstable: '**Note**: This endpoint is in public beta.
+
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
   /api/v2/scorecard/outcomes/batch:
     post:
@@ -62786,6 +65872,97 @@ paths:
       tags:
       - Security Monitoring
       x-codegen-request-body-name: body
+  /api/v2/security_monitoring/configuration/suppressions/rules:
+    post:
+      description: Get the list of suppressions that would affect a rule.
+      operationId: GetSuppressionsAffectingFutureRule
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/SecurityMonitoringRuleCreatePayload'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityMonitoringSuppressionsResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_suppressions_read
+      summary: Get suppressions affecting future rule
+      tags:
+      - Security Monitoring
+  /api/v2/security_monitoring/configuration/suppressions/rules/{rule_id}:
+    get:
+      description: Get the list of suppressions that affect a specific existing rule
+        by its ID.
+      operationId: GetSuppressionsAffectingRule
+      parameters:
+      - $ref: '#/components/parameters/SecurityMonitoringRuleID'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityMonitoringSuppressionsResponse'
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_suppressions_read
+      summary: Get suppressions affecting a specific rule
+      tags:
+      - Security Monitoring
+  /api/v2/security_monitoring/configuration/suppressions/validation:
+    post:
+      description: Validate a suppression rule.
+      operationId: ValidateSecurityMonitoringSuppression
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/SecurityMonitoringSuppressionCreateRequest'
+        required: true
+      responses:
+        '204':
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_suppressions_write
+      summary: Validate a suppression rule
+      tags:
+      - Security Monitoring
+      x-codegen-request-body-name: body
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_suppressions_write
   /api/v2/security_monitoring/configuration/suppressions/{suppression_id}:
     delete:
       description: Delete a specific suppression rule.
@@ -63276,52 +66453,12 @@ paths:
         security signals.'
       operationId: ListSecurityMonitoringSignals
       parameters:
-      - description: The search query for security signals.
-        example: security:attack status:high
-        in: query
-        name: filter[query]
-        required: false
-        schema:
-          type: string
-      - description: The minimum timestamp for requested security signals.
-        example: '2019-01-02T09:42:36.320Z'
-        in: query
-        name: filter[from]
-        required: false
-        schema:
-          format: date-time
-          type: string
-      - description: The maximum timestamp for requested security signals.
-        example: '2019-01-03T09:42:36.320Z'
-        in: query
-        name: filter[to]
-        required: false
-        schema:
-          format: date-time
-          type: string
-      - description: The order of the security signals in results.
-        in: query
-        name: sort
-        required: false
-        schema:
-          $ref: '#/components/schemas/SecurityMonitoringSignalsSort'
-      - description: A list of results using the cursor provided in the previous query.
-        example: eyJzdGFydEF0IjoiQVFBQUFYS2tMS3pPbm40NGV3QUFBQUJCV0V0clRFdDZVbG8zY3pCRmNsbHJiVmxDWlEifQ==
-        in: query
-        name: page[cursor]
-        required: false
-        schema:
-          type: string
-      - description: The maximum number of security signals in the response.
-        example: 25
-        in: query
-        name: page[limit]
-        required: false
-        schema:
-          default: 10
-          format: int32
-          maximum: 1000
-          type: integer
+      - $ref: '#/components/parameters/QueryFilterSearch'
+      - $ref: '#/components/parameters/QueryFilterFrom'
+      - $ref: '#/components/parameters/QueryFilterTo'
+      - $ref: '#/components/parameters/QuerySort'
+      - $ref: '#/components/parameters/QueryPageCursor'
+      - $ref: '#/components/parameters/QueryPageLimit'
       responses:
         '200':
           content:
@@ -64602,6 +67739,123 @@ paths:
         permissions:
         - incident_settings_write
       x-unstable: '**Note**: This endpoint is deprecated.'
+  /api/v2/siem-historical-detections/histsignals:
+    get:
+      description: List hist signals.
+      operationId: ListSecurityMonitoringHistsignals
+      parameters:
+      - $ref: '#/components/parameters/QueryFilterSearch'
+      - $ref: '#/components/parameters/QueryFilterFrom'
+      - $ref: '#/components/parameters/QueryFilterTo'
+      - $ref: '#/components/parameters/QuerySort'
+      - $ref: '#/components/parameters/QueryPageCursor'
+      - $ref: '#/components/parameters/QueryPageLimit'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityMonitoringSignalsListResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_signals_read
+      summary: List hist signals
+      tags:
+      - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_read
+      x-unstable: '**Note**: This endpoint is in beta and may be subject to changes.
+
+        Please check the documentation regularly for updates.'
+  /api/v2/siem-historical-detections/histsignals/search:
+    get:
+      description: Search hist signals.
+      operationId: SearchSecurityMonitoringHistsignals
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/SecurityMonitoringSignalListRequest'
+        required: false
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityMonitoringSignalsListResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_signals_read
+      summary: Search hist signals
+      tags:
+      - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_read
+      x-unstable: '**Note**: This endpoint is in beta and may be subject to changes.
+
+        Please check the documentation regularly for updates.'
+  /api/v2/siem-historical-detections/histsignals/{histsignal_id}:
+    get:
+      description: Get a hist signal's details.
+      operationId: GetSecurityMonitoringHistsignal
+      parameters:
+      - $ref: '#/components/parameters/HistoricalSignalID'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityMonitoringSignalResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_signals_read
+      summary: Get a hist signal's details
+      tags:
+      - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_read
+      x-unstable: '**Note**: This endpoint is in beta and may be subject to changes.
+
+        Please check the documentation regularly for updates.'
   /api/v2/siem-historical-detections/jobs:
     get:
       description: List historical jobs.
@@ -64823,6 +68077,48 @@ paths:
         - security_monitoring_rules_write
       x-unstable: '**Note**: This endpoint is in beta and may be subject to changes.
 
+        Please check the documentation regularly for updates.'
+  /api/v2/siem-historical-detections/jobs/{job_id}/histsignals:
+    get:
+      description: Get a job's hist signals.
+      operationId: GetSecurityMonitoringHistsignalsByJobId
+      parameters:
+      - $ref: '#/components/parameters/HistoricalJobID'
+      - $ref: '#/components/parameters/QueryFilterSearch'
+      - $ref: '#/components/parameters/QueryFilterFrom'
+      - $ref: '#/components/parameters/QueryFilterTo'
+      - $ref: '#/components/parameters/QuerySort'
+      - $ref: '#/components/parameters/QueryPageCursor'
+      - $ref: '#/components/parameters/QueryPageLimit'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SecurityMonitoringSignalsListResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_signals_read
+      summary: Get a job's hist signals
+      tags:
+      - Security Monitoring
+      x-permission:
+        operator: OR
+        permissions:
+        - security_monitoring_signals_read
+      x-unstable: '**Note**: This endpoint is in beta and may be subject to changes.
+
         Please check the documentation regularly for updates.'
   /api/v2/slo/report:
     post:
@@ -64971,6 +68267,69 @@ paths:
       x-unstable: '**Note**: This feature is in private beta. To request access, use
         the request access form in the [Service Level Objectives](https://docs.datadoghq.com/service_management/service_level_objectives/#slo-csv-export)
         docs.'
+  /api/v2/spa/recommendations/{service}/{shard}:
+    get:
+      description: Retrieve resource recommendations for a Spark job. The caller (Spark
+        Gateway or DJM UI) provides a service name and shard identifier, and SPA returns
+        structured recommendations for driver and executor resources.
+      operationId: GetSPARecommendations
+      parameters:
+      - description: The shard tag for a spark job, which differentiates jobs within
+          the same service that have different resource needs
+        in: path
+        name: shard
+        required: true
+        schema:
+          type: string
+      - description: The service name for a spark job
+        in: path
+        name: service
+        required: true
+        schema:
+          type: string
+      responses:
+        '200':
+          content:
+            application/json:
+              example:
+                data:
+                  attributes:
+                    driver:
+                      estimation:
+                        cpu:
+                          max: 1500
+                          p75: 1000
+                          p95: 1200
+                        ephemeral_storage: 896
+                        heap: 6144
+                        memory: 7168
+                        overhead: 1024
+                    executor:
+                      estimation:
+                        cpu:
+                          max: 2000
+                          p75: 1200
+                          p95: 1500
+                        ephemeral_storage: 512
+                        heap: 3072
+                        memory: 4096
+                        overhead: 1024
+                  id: dedupeactivecontexts:adp_dedupeactivecontexts_org2
+                  type: recommendation
+              schema:
+                $ref: '#/components/schemas/RecommendationDocument'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Get SPA Recommendations
+      tags:
+      - Spa
+      x-unstable: '**Note**: This endpoint is in public beta and may change in the
+        future. It is not yet recommended for production use.'
   /api/v2/spans/analytics/aggregate:
     post:
       description: 'The API endpoint to aggregate spans into buckets and compute metrics
@@ -65313,6 +68672,71 @@ paths:
         permissions:
         - teams_read
         - teams_manage
+  /api/v2/team/sync:
+    post:
+      description: 'This endpoint attempts to link your existing Datadog teams with
+        GitHub teams by matching their names.
+
+        It evaluates all current Datadog teams and compares them against teams in
+        the GitHub organization
+
+        connected to your Datadog account, based on Datadog Team handle and GitHub
+        Team slug
+
+        (lowercased and kebab-cased).
+
+
+        This operation is read-only on the GitHub side, no teams will be modified
+        or created.
+
+
+        [A GitHub organization must be connected to your Datadog account](https://docs.datadoghq.com/integrations/github/),
+
+        and the GitHub App integrated with Datadog must have the `Members Read` permission.
+        Matching is performed by comparing the Datadog team handle to the GitHub team
+        slug
+
+        using a normalized exact match; case is ignored and spaces are removed. No
+        modifications are made
+
+        to teams in GitHub. This will not create new Teams in Datadog.'
+      operationId: SyncTeams
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/TeamSyncRequest'
+        required: true
+      responses:
+        '200':
+          description: OK
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+        '500':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Internal Server Error - Unexpected error during linking.
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - teams_manage
+      summary: Link Teams with GitHub Teams
+      tags:
+      - Teams
+      x-codegen-request-body-name: body
+      x-permission:
+        operator: AND
+        permissions:
+        - teams_manage
+      x-unstable: '**Note**: This endpoint is in Preview. To request access, fill
+        out this [form](https://www.datadoghq.com/product-preview/github-integration-for-teams/).
+
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
   /api/v2/team/{super_team_id}/member_teams:
     get:
       description: Get all member teams.
@@ -66525,13 +69949,15 @@ paths:
         appKeyAuth: []
       - AuthZ:
         - usage_read
+        - billing_read
       summary: Get cost across multi-org account
       tags:
       - Usage Metering
       x-permission:
-        operator: OR
+        operator: AND
         permissions:
         - usage_read
+        - billing_read
   /api/v2/usage/estimated_cost:
     get:
       description: 'Get estimated cost across multi-org and single root-org accounts.
@@ -66629,13 +70055,15 @@ paths:
         appKeyAuth: []
       - AuthZ:
         - usage_read
+        - billing_read
       summary: Get estimated cost across your account
       tags:
       - Usage Metering
       x-permission:
-        operator: OR
+        operator: AND
         permissions:
         - usage_read
+        - billing_read
   /api/v2/usage/historical_cost:
     get:
       description: 'Get historical cost across multi-org and single root-org accounts.
@@ -66647,14 +70075,6 @@ paths:
         This endpoint is only accessible for [parent-level organizations](https://docs.datadoghq.com/account_management/multi_organization/).'
       operationId: GetHistoricalCostByOrg
       parameters:
-      - description: String to specify whether cost is broken down at a parent-org
-          level or at the sub-org level. Available views are `summary` and `sub-org`.  Defaults
-          to `summary`.
-        in: query
-        name: view
-        required: false
-        schema:
-          type: string
       - description: 'Datetime in ISO-8601 format, UTC, precise to month: `[YYYY-MM]`
           for cost beginning this month.'
         in: query
@@ -66663,6 +70083,14 @@ paths:
         schema:
           format: date-time
           type: string
+      - description: String to specify whether cost is broken down at a parent-org
+          level or at the sub-org level. Available views are `summary` and `sub-org`.  Defaults
+          to `summary`.
+        in: query
+        name: view
+        required: false
+        schema:
+          type: string
       - description: 'Datetime in ISO-8601 format, UTC, precise to month: `[YYYY-MM]`
           for cost ending this month.'
         in: query
@@ -66710,13 +70138,15 @@ paths:
         appKeyAuth: []
       - AuthZ:
         - usage_read
+        - billing_read
       summary: Get historical cost across your account
       tags:
       - Usage Metering
       x-permission:
-        operator: OR
+        operator: AND
         permissions:
         - usage_read
+        - billing_read
   /api/v2/usage/hourly_usage:
     get:
       description: Get hourly usage by product family.
@@ -67045,13 +70475,15 @@ paths:
         appKeyAuth: []
       - AuthZ:
         - usage_read
+        - billing_read
       summary: Get projected cost across your account
       tags:
       - Usage Metering
       x-permission:
-        operator: OR
+        operator: AND
         permissions:
         - usage_read
+        - billing_read
   /api/v2/user_invitations:
     post:
       description: Sends emails to one or more users inviting them to join the organization.
@@ -67532,6 +70964,7 @@ paths:
     post:
       description: Create a new workflow, returning the workflow ID. This API requires
         a [registered application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: CreateWorkflow
       requestBody:
         content:
@@ -67575,6 +71008,7 @@ paths:
     delete:
       description: Delete a workflow by ID. This API requires a [registered application
         key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: DeleteWorkflow
       parameters:
       - $ref: '#/components/parameters/WorkflowId'
@@ -67609,6 +71043,7 @@ paths:
     get:
       description: Get a workflow by ID. This API requires a [registered application
         key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: GetWorkflow
       parameters:
       - $ref: '#/components/parameters/WorkflowId'
@@ -67653,6 +71088,7 @@ paths:
     patch:
       description: Update a workflow by ID. This API requires a [registered application
         key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: UpdateWorkflow
       parameters:
       - $ref: '#/components/parameters/WorkflowId'
@@ -67704,6 +71140,7 @@ paths:
     get:
       description: List all instances of a given workflow. This API requires a [registered
         application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: ListWorkflowInstances
       parameters:
       - $ref: '#/components/parameters/WorkflowId'
@@ -67737,6 +71174,7 @@ paths:
     post:
       description: Execute the given workflow. This API requires a [registered application
         key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: CreateWorkflowInstance
       parameters:
       - $ref: '#/components/parameters/WorkflowId'
@@ -67776,6 +71214,7 @@ paths:
     get:
       description: Get a specific execution of a given workflow. This API requires
         a [registered application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: GetWorkflowInstance
       parameters:
       - $ref: '#/components/parameters/WorkflowId'
@@ -67811,6 +71250,7 @@ paths:
     put:
       description: Cancels a specific execution of a given workflow. This API requires
         a [registered application key](https://docs.datadoghq.com/api/latest/action-connection/#register-a-new-app-key).
+        Alternatively, you can configure these permissions [in the UI](https://docs.datadoghq.com/account_management/api-app-keys/#actions-api-access).
       operationId: CancelWorkflowInstance
       parameters:
       - $ref: '#/components/parameters/WorkflowId'
@@ -68053,6 +71493,9 @@ tags:
 
     end times, prevent all alerting related to specified Datadog tags.'
   name: Downtimes
+- description: View and manage issues within Error Tracking. See the [Error Tracking
+    page](https://docs.datadoghq.com/error_tracking/) for more information.
+  name: Error Tracking
 - description: 'The Event Management API allows you to programmatically post events
     to the Events Explorer and fetch events from the Events Explorer. See the [Event
     Management page](https://docs.datadoghq.com/service_management/events/) for more
@@ -68213,6 +71656,11 @@ tags:
   externalDocs:
     url: https://docs.datadoghq.com/api/latest/opsgenie-integration
   name: Opsgenie Integration
+- description: Manage connections between organizations. Org connections allow for
+    controlled sharing of data between different Datadog organizations. See the [Cross-Organization
+    Visibiltiy](https://docs.datadoghq.com/account_management/org_settings/cross_org_visibility/)
+    page for more information.
+  name: Org Connections
 - description: Create, edit, and manage your organizations. Read more about [multi-org
     accounts](https://docs.datadoghq.com/account_management/multi_organization).
   externalDocs:
@@ -68323,6 +71771,9 @@ tags:
   externalDocs:
     url: https://docs.datadoghq.com/service_catalog/service_definitions#metadata-schema-v30-beta
   name: Software Catalog
+- description: SPA (Spark Pod Autosizing) API. Provides resource recommendations and
+    cost insights to help optimize Spark job configurations.
+  name: Spa
 - description: Search and aggregate your spans from your Datadog platform over HTTP.
   name: Spans
 - description: Manage configuration of [span-based metrics](https://app.datadoghq.com/apm/traces/generate-metrics)