datadog_api_client 2.43.0 → 2.44.0

data/.generator/src/generator/formatter.py

@@ -275,6 +275,16 @@ def format_data_with_schema_list(
     return f"[\n{parameters}]"
 
 
+def _is_valid_ruby_symbol(key):
+    """Check if a key can be used as a Ruby symbol without quotes."""
+    if not key:
+        return False
+    # Ruby symbols can start with letter or underscore, contain alphanumeric and underscores
+    if not (key[0].isalpha() or key[0] == '_'):
+        return False
+    return all(c.isalnum() or c == '_' for c in key)
+
+
 @format_data_with_schema.register(dict)
 def format_data_with_schema_dict(
     data,
@@ -318,7 +328,11 @@ def format_data_with_schema_dict(
                 name_prefix=name_prefix,
                 replace_values=replace_values,
             )
-            parameters += f"{k}: {value}, "
+            # Use hash rocket syntax for keys with special characters
+            if _is_valid_ruby_symbol(k):
+                parameters += f"{k}: {value}, "
+            else:
+                parameters += f'"{k}" => {value}, '
         if not has_properties:
             name = None
 

data/.generator/src/generator/templates/api.j2

@@ -36,11 +36,11 @@ module {{ module_name }}::{{ version|upper }}
     #
     {%- endif %}
     {%- for name, parameter in operation|parameters if parameter.required %}
-    # @param {{ name|attribute_name }} [{{ get_type_for_parameter(parameter) }}] {{ parameter.get("description", "").replace('\n', ' ') }}
+    # @param {{ name|attribute_name }} [{{ get_type_for_parameter(parameter) }}] {{ (parameter.get("description") or "").replace('\n', ' ') }}
     {%- endfor %}
     # @param opts [Hash] the optional parameters
     {%- for name, parameter in operation|parameters if not parameter.required %}
-    # @option opts [{{ get_type_for_parameter(parameter) }}] :{{ name|attribute_name }} {{ parameter.get("description", "").replace('\n', ' ') }}{% if "default" in parameter%} (default to {{ parameter.default|json }}) {% endif %}
+    # @option opts [{{ get_type_for_parameter(parameter) }}] :{{ name|attribute_name }} {{ (parameter.get("description") or "").replace('\n', ' ') }}{% if "default" in parameter%} (default to {{ parameter.default|json }}) {% endif %}
     {%- endfor %}
     # @return [Array<({% if returnType %}{{ returnType }}{% else %}nil{% endif %}, Integer, Hash)>] {% if returnType %}{{ returnType }} data{% else %}nil{% endif %}, response status code and response headers
     def {{ operation.operationId|snake_case }}_with_http_info({% for name, parameter in operation|parameters if parameter.required %}{{ name|attribute_name }}, {% endfor %}opts = {})

data/.generator/src/generator/templates/model.j2

@@ -6,7 +6,7 @@ require 'date'
 require 'time'
 
 module {{ module_name }}::{{ version|upper }}
-  # {{ model.description.rstrip()|replace('\n', '\n# ')|indent(2) }}
+  # {{ (model.description or "").rstrip()|replace('\n', '\n# ')|indent(2) }}
 {%- if model.deprecated %}
   #
   # @deprecated This model is deprecated.

data/.generator/src/generator/templates/model_generic.j2

@@ -16,7 +16,7 @@
      or
       definition.enum is defined #}
 
-    {{ definition.description|block_comment|indent(4) }}
+    {{ (definition.description or "")|block_comment|indent(4) }}
     {%- if has_validation %}
     attr_reader :{{ attr|attribute_name }}
     {%- else %}

data/.generator/tests/test_formatter.rb

@@ -0,0 +1,69 @@
+#!/usr/bin/env ruby
+
+def assert(condition, message = "Assertion failed")
+  raise message unless condition
+  print "."
+end
+
+def assert_equal(expected, actual, message = nil)
+  msg = message || "Expected #{expected.inspect}, got #{actual.inspect}"
+  raise msg unless expected == actual
+  print "."
+end
+
+def assert_includes(collection, item, message = nil)
+  msg = message || "Expected #{collection.inspect} to include #{item.inspect}"
+  raise msg unless collection.include?(item)
+  print "."
+end
+
+test_cases = [
+  ['valid_key', true],
+  ['_valid_key', true],
+  ['ValidKey123', true],
+  ['key123', true],
+  ['key.with.dots', false],
+  ['123invalid', false],
+  ['.starts_with_dot', false],
+  ['', false],
+  ['key-with-dash', false],
+  ['key with space', false],
+  ['key@special', false]
+]
+
+test_cases.each do |key, expected|
+  begin
+    eval("{#{key}: 'value'}")
+    assert(expected, "Expected '#{key}' to fail but it succeeded")
+  rescue SyntaxError
+    assert(!expected, "Expected '#{key}' to succeed but it failed")
+  end
+end
+
+hash = {
+  "ocsf.activity_name" => 'Other',
+  "ocsf.activity_id" => '99'
+}
+
+assert(hash.is_a?(Hash))
+assert_equal('Other', hash["ocsf.activity_name"])
+assert_equal('99', hash["ocsf.activity_id"])
+assert_includes(hash.inspect, '"ocsf.activity_name"=>"Other"')
+assert_includes(hash.inspect, '"ocsf.activity_id"=>"99"')
+
+hash = {
+  "ocsf.activity_name" => ['eventName']
+}
+
+assert(hash.is_a?(Hash))
+assert_equal(['eventName'], hash["ocsf.activity_name"])
+assert_includes(hash.inspect, '"ocsf.activity_name"=>["eventName"]')
+
+hash = {
+  normal_key: 'value1',
+  another_key: 'value2'
+}
+
+assert(hash.is_a?(Hash))
+assert_equal('value1', hash[:normal_key])
+assert_equal('value2', hash[:another_key])

data/CHANGELOG.md

@@ -1,5 +1,32 @@
 # CHANGELOG
 
+## 2.44.0/2025-10-27
+
+### Added
+* Add endpoints for Software Composition Analysis [#2743](https://github.com/DataDog/datadog-api-client-ruby/pull/2743)
+* Add support for `Schema Processor` in `Logs Pipelines` [#2723](https://github.com/DataDog/datadog-api-client-ruby/pull/2723)
+* Add new DeleteAssignee endpoint to Error Tracking APIs [#2717](https://github.com/DataDog/datadog-api-client-ruby/pull/2717)
+* document agentless GCP scan options CRUD endpoints [#2714](https://github.com/DataDog/datadog-api-client-ruby/pull/2714)
+* Document `/api/v2/roles/templates`  [#2703](https://github.com/DataDog/datadog-api-client-ruby/pull/2703)
+* Add Reference Tables API spec [#2702](https://github.com/DataDog/datadog-api-client-ruby/pull/2702)
+* Add blockedRequestPatterns to synthetics browser test options [#2696](https://github.com/DataDog/datadog-api-client-ruby/pull/2696)
+* Add `BulkDeleteDatastoreItems` to Datastore API spec [#2695](https://github.com/DataDog/datadog-api-client-ruby/pull/2695)
+* Add some missing Workload Protection agent rule fields [#2694](https://github.com/DataDog/datadog-api-client-ruby/pull/2694)
+* Add AzureScanOptions to agentless scanning API [#2692](https://github.com/DataDog/datadog-api-client-ruby/pull/2692)
+* Add conditional recipients to notification rule [#2688](https://github.com/DataDog/datadog-api-client-ruby/pull/2688)
+* Documenting the new Flaky Test Management API endpoint for public beta [#2665](https://github.com/DataDog/datadog-api-client-ruby/pull/2665)
+
+### Fixed
+* fix edge case with periods in keys [#2722](https://github.com/DataDog/datadog-api-client-ruby/pull/2722)
+* Update the summary name for get a tag pipeline ruleset. [#2718](https://github.com/DataDog/datadog-api-client-ruby/pull/2718)
+
+### Changed
+* Include mention to new scanned-assets-metadata endpoint on container images v1 endpoint [#2721](https://github.com/DataDog/datadog-api-client-ruby/pull/2721)
+* Include mention to new scanned-assets-metadata endpoint on hosts v1 endpoint [#2720](https://github.com/DataDog/datadog-api-client-ruby/pull/2720)
+* security_monitoring - Add indexes to deprecate index in ruleQuery [#2715](https://github.com/DataDog/datadog-api-client-ruby/pull/2715)
+* Add support for vulnerability management - Add ListScannedAssetsMetadata new endpoint and update existing ones [#2713](https://github.com/DataDog/datadog-api-client-ruby/pull/2713)
+* Update description, operationId and examples for tag pipeline and custom allocation rules [#2709](https://github.com/DataDog/datadog-api-client-ruby/pull/2709)
+
 ## 2.43.0/2025-09-30
 
 ### Added

data/examples/v1/logs-pipelines/CreateLogsPipeline.rb

@@ -11,8 +11,8 @@ body = DatadogAPIClient::V1::LogsPipeline.new({
   processors: [
     DatadogAPIClient::V1::LogsGrokParser.new({
       grok: DatadogAPIClient::V1::LogsGrokParserRules.new({
-        match_rules: 'rule_name_1 foo\nrule_name_2 bar\n',
-        support_rules: 'rule_name_1 foo\nrule_name_2 bar\n',
+        match_rules: 'rule_name_1 foo\nrule_name_2 bar',
+        support_rules: 'rule_name_1 foo\nrule_name_2 bar',
       }),
       is_enabled: false,
       samples: [],

data/examples/v1/logs-pipelines/CreateLogsPipeline_1745625064.rb

@@ -0,0 +1,248 @@
+# Create a pipeline with Schema Processor and preserve_source true returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V1::LogsPipelinesAPI.new
+
+body = DatadogAPIClient::V1::LogsPipeline.new({
+  filter: DatadogAPIClient::V1::LogsFilter.new({
+    query: "source:python",
+  }),
+  name: "testSchemaProcessor",
+  processors: [
+    DatadogAPIClient::V1::LogsSchemaProcessor.new({
+      type: DatadogAPIClient::V1::LogsSchemaProcessorType::SCHEMA_PROCESSOR,
+      is_enabled: true,
+      name: "Apply OCSF schema for 3001",
+      schema: DatadogAPIClient::V1::LogsSchemaData.new({
+        schema_type: "ocsf",
+        version: "1.5.0",
+        class_uid: 3001,
+        class_name: "Account Change",
+        profiles: [
+          "cloud",
+          "datetime",
+        ],
+      }),
+      mappers: [
+        DatadogAPIClient::V1::LogsSchemaCategoryMapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaCategoryMapperType::SCHEMA_CATEGORY_MAPPER,
+          name: "activity_id and activity_name",
+          categories: [
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(*Create*)",
+              }),
+              name: "Create",
+              id: 1,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(ChangePassword OR PasswordUpdated)",
+              }),
+              name: "Password Change",
+              id: 3,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(*Attach*)",
+              }),
+              name: "Attach Policy",
+              id: 7,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(*Detach* OR *Remove*)",
+              }),
+              name: "Detach Policy",
+              id: 8,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(*Delete*)",
+              }),
+              name: "Delete",
+              id: 6,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:*",
+              }),
+              name: "Other",
+              id: 99,
+            }),
+          ],
+          targets: DatadogAPIClient::V1::LogsSchemaCategoryMapperTargets.new({
+            name: "ocsf.activity_name",
+            id: "ocsf.activity_id",
+          }),
+          fallback: DatadogAPIClient::V1::LogsSchemaCategoryMapperFallback.new({
+            values: {
+              "ocsf.activity_id" => "99", "ocsf.activity_name" => "Other",
+            },
+            sources: {
+              "ocsf.activity_name" => [
+                "eventName",
+              ],
+            },
+          }),
+        }),
+        DatadogAPIClient::V1::LogsSchemaCategoryMapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaCategoryMapperType::SCHEMA_CATEGORY_MAPPER,
+          name: "status",
+          categories: [
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "-@errorCode:*",
+              }),
+              id: 1,
+              name: "Success",
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@errorCode:*",
+              }),
+              id: 2,
+              name: "Failure",
+            }),
+          ],
+          targets: DatadogAPIClient::V1::LogsSchemaCategoryMapperTargets.new({
+            id: "ocsf.status_id",
+            name: "ocsf.status",
+          }),
+        }),
+        DatadogAPIClient::V1::LogsSchemaCategoryMapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaCategoryMapperType::SCHEMA_CATEGORY_MAPPER,
+          name: "Set default severity",
+          categories: [
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:*",
+              }),
+              name: "Informational",
+              id: 1,
+            }),
+          ],
+          targets: DatadogAPIClient::V1::LogsSchemaCategoryMapperTargets.new({
+            name: "ocsf.severity",
+            id: "ocsf.severity_id",
+          }),
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map userIdentity to ocsf.user.uid",
+          sources: [
+            "userIdentity.principalId",
+            "responseElements.role.roleId",
+            "responseElements.user.userId",
+          ],
+          target: "ocsf.user.uid",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map userName to ocsf.user.name",
+          sources: [
+            "requestParameters.userName",
+            "responseElements.role.roleName",
+            "requestParameters.roleName",
+            "responseElements.user.userName",
+          ],
+          target: "ocsf.user.name",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map api to ocsf.api",
+          sources: [
+            "api",
+          ],
+          target: "ocsf.api",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map user to ocsf.user",
+          sources: [
+            "user",
+          ],
+          target: "ocsf.user",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map actor to ocsf.actor",
+          sources: [
+            "actor",
+          ],
+          target: "ocsf.actor",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map cloud to ocsf.cloud",
+          sources: [
+            "cloud",
+          ],
+          target: "ocsf.cloud",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map http_request to ocsf.http_request",
+          sources: [
+            "http_request",
+          ],
+          target: "ocsf.http_request",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map metadata to ocsf.metadata",
+          sources: [
+            "metadata",
+          ],
+          target: "ocsf.metadata",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map time to ocsf.time",
+          sources: [
+            "time",
+          ],
+          target: "ocsf.time",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map src_endpoint to ocsf.src_endpoint",
+          sources: [
+            "src_endpoint",
+          ],
+          target: "ocsf.src_endpoint",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map severity to ocsf.severity",
+          sources: [
+            "severity",
+          ],
+          target: "ocsf.severity",
+          preserve_source: true,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map severity_id to ocsf.severity_id",
+          sources: [
+            "severity_id",
+          ],
+          target: "ocsf.severity_id",
+          preserve_source: true,
+        }),
+      ],
+    }),
+  ],
+  tags: [],
+})
+p api_instance.create_logs_pipeline(body)

data/examples/v1/logs-pipelines/CreateLogsPipeline_2256674867.rb

@@ -0,0 +1,248 @@
+# Create a pipeline with Schema Processor and preserve_source false returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V1::LogsPipelinesAPI.new
+
+body = DatadogAPIClient::V1::LogsPipeline.new({
+  filter: DatadogAPIClient::V1::LogsFilter.new({
+    query: "source:python",
+  }),
+  name: "testSchemaProcessor",
+  processors: [
+    DatadogAPIClient::V1::LogsSchemaProcessor.new({
+      type: DatadogAPIClient::V1::LogsSchemaProcessorType::SCHEMA_PROCESSOR,
+      is_enabled: true,
+      name: "Apply OCSF schema for 3001",
+      schema: DatadogAPIClient::V1::LogsSchemaData.new({
+        schema_type: "ocsf",
+        version: "1.5.0",
+        class_uid: 3001,
+        class_name: "Account Change",
+        profiles: [
+          "cloud",
+          "datetime",
+        ],
+      }),
+      mappers: [
+        DatadogAPIClient::V1::LogsSchemaCategoryMapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaCategoryMapperType::SCHEMA_CATEGORY_MAPPER,
+          name: "activity_id and activity_name",
+          categories: [
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(*Create*)",
+              }),
+              name: "Create",
+              id: 1,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(ChangePassword OR PasswordUpdated)",
+              }),
+              name: "Password Change",
+              id: 3,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(*Attach*)",
+              }),
+              name: "Attach Policy",
+              id: 7,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(*Detach* OR *Remove*)",
+              }),
+              name: "Detach Policy",
+              id: 8,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:(*Delete*)",
+              }),
+              name: "Delete",
+              id: 6,
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:*",
+              }),
+              name: "Other",
+              id: 99,
+            }),
+          ],
+          targets: DatadogAPIClient::V1::LogsSchemaCategoryMapperTargets.new({
+            name: "ocsf.activity_name",
+            id: "ocsf.activity_id",
+          }),
+          fallback: DatadogAPIClient::V1::LogsSchemaCategoryMapperFallback.new({
+            values: {
+              "ocsf.activity_id" => "99", "ocsf.activity_name" => "Other",
+            },
+            sources: {
+              "ocsf.activity_name" => [
+                "eventName",
+              ],
+            },
+          }),
+        }),
+        DatadogAPIClient::V1::LogsSchemaCategoryMapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaCategoryMapperType::SCHEMA_CATEGORY_MAPPER,
+          name: "status",
+          categories: [
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "-@errorCode:*",
+              }),
+              id: 1,
+              name: "Success",
+            }),
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@errorCode:*",
+              }),
+              id: 2,
+              name: "Failure",
+            }),
+          ],
+          targets: DatadogAPIClient::V1::LogsSchemaCategoryMapperTargets.new({
+            id: "ocsf.status_id",
+            name: "ocsf.status",
+          }),
+        }),
+        DatadogAPIClient::V1::LogsSchemaCategoryMapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaCategoryMapperType::SCHEMA_CATEGORY_MAPPER,
+          name: "Set default severity",
+          categories: [
+            DatadogAPIClient::V1::LogsSchemaCategoryMapperCategory.new({
+              filter: DatadogAPIClient::V1::LogsFilter.new({
+                query: "@eventName:*",
+              }),
+              name: "Informational",
+              id: 1,
+            }),
+          ],
+          targets: DatadogAPIClient::V1::LogsSchemaCategoryMapperTargets.new({
+            name: "ocsf.severity",
+            id: "ocsf.severity_id",
+          }),
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map userIdentity to ocsf.user.uid",
+          sources: [
+            "userIdentity.principalId",
+            "responseElements.role.roleId",
+            "responseElements.user.userId",
+          ],
+          target: "ocsf.user.uid",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map userName to ocsf.user.name",
+          sources: [
+            "requestParameters.userName",
+            "responseElements.role.roleName",
+            "requestParameters.roleName",
+            "responseElements.user.userName",
+          ],
+          target: "ocsf.user.name",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map api to ocsf.api",
+          sources: [
+            "api",
+          ],
+          target: "ocsf.api",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map user to ocsf.user",
+          sources: [
+            "user",
+          ],
+          target: "ocsf.user",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map actor to ocsf.actor",
+          sources: [
+            "actor",
+          ],
+          target: "ocsf.actor",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map cloud to ocsf.cloud",
+          sources: [
+            "cloud",
+          ],
+          target: "ocsf.cloud",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map http_request to ocsf.http_request",
+          sources: [
+            "http_request",
+          ],
+          target: "ocsf.http_request",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map metadata to ocsf.metadata",
+          sources: [
+            "metadata",
+          ],
+          target: "ocsf.metadata",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map time to ocsf.time",
+          sources: [
+            "time",
+          ],
+          target: "ocsf.time",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map src_endpoint to ocsf.src_endpoint",
+          sources: [
+            "src_endpoint",
+          ],
+          target: "ocsf.src_endpoint",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map severity to ocsf.severity",
+          sources: [
+            "severity",
+          ],
+          target: "ocsf.severity",
+          preserve_source: false,
+        }),
+        DatadogAPIClient::V1::LogsSchemaRemapper.new({
+          type: DatadogAPIClient::V1::LogsSchemaRemapperType::SCHEMA_REMAPPER,
+          name: "Map severity_id to ocsf.severity_id",
+          sources: [
+            "severity_id",
+          ],
+          target: "ocsf.severity_id",
+          preserve_source: false,
+        }),
+      ],
+    }),
+  ],
+  tags: [],
+})
+p api_instance.create_logs_pipeline(body)