google-cloud-chronicle-v1 1.0.0 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +0 -1
- data/lib/google/cloud/chronicle/v1/data_access_control_service/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/data_access_control_service/credentials.rb +1 -1
- data/lib/google/cloud/chronicle/v1/data_access_control_service/paths.rb +1 -1
- data/lib/google/cloud/chronicle/v1/data_access_control_service/rest/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/data_access_control_service/rest/service_stub.rb +1 -1
- data/lib/google/cloud/chronicle/v1/data_access_control_service/rest.rb +1 -1
- data/lib/google/cloud/chronicle/v1/data_access_control_service.rb +1 -1
- data/lib/google/cloud/chronicle/v1/entity_service/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/entity_service/credentials.rb +1 -1
- data/lib/google/cloud/chronicle/v1/entity_service/paths.rb +1 -1
- data/lib/google/cloud/chronicle/v1/entity_service/rest/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/entity_service/rest/service_stub.rb +1 -1
- data/lib/google/cloud/chronicle/v1/entity_service/rest.rb +1 -1
- data/lib/google/cloud/chronicle/v1/entity_service.rb +1 -1
- data/lib/google/cloud/chronicle/v1/feed_pb.rb +205 -0
- data/lib/google/cloud/chronicle/v1/feed_services_pb.rb +79 -0
- data/lib/google/cloud/chronicle/v1/feeds_service/client.rb +1827 -0
- data/lib/google/cloud/chronicle/v1/feeds_service/credentials.rb +49 -0
- data/lib/google/cloud/chronicle/v1/feeds_service/paths.rb +136 -0
- data/lib/google/cloud/chronicle/v1/feeds_service/rest/client.rb +1686 -0
- data/lib/google/cloud/chronicle/v1/feeds_service/rest/service_stub.rb +941 -0
- data/lib/google/cloud/chronicle/v1/feeds_service/rest.rb +52 -0
- data/lib/google/cloud/chronicle/v1/feeds_service.rb +55 -0
- data/lib/google/cloud/chronicle/v1/instance_service/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/instance_service/credentials.rb +1 -1
- data/lib/google/cloud/chronicle/v1/instance_service/paths.rb +1 -1
- data/lib/google/cloud/chronicle/v1/instance_service/rest/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/instance_service/rest/service_stub.rb +1 -1
- data/lib/google/cloud/chronicle/v1/instance_service/rest.rb +1 -1
- data/lib/google/cloud/chronicle/v1/instance_service.rb +1 -1
- data/lib/google/cloud/chronicle/v1/reference_list_service/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/reference_list_service/credentials.rb +1 -1
- data/lib/google/cloud/chronicle/v1/reference_list_service/paths.rb +1 -1
- data/lib/google/cloud/chronicle/v1/reference_list_service/rest/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/reference_list_service/rest/service_stub.rb +1 -1
- data/lib/google/cloud/chronicle/v1/reference_list_service/rest.rb +1 -1
- data/lib/google/cloud/chronicle/v1/reference_list_service.rb +1 -1
- data/lib/google/cloud/chronicle/v1/reference_list_services_pb.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rest.rb +2 -1
- data/lib/google/cloud/chronicle/v1/rule_execution_error_service/client.rb +5 -5
- data/lib/google/cloud/chronicle/v1/rule_execution_error_service/rest/client.rb +5 -5
- data/lib/google/cloud/chronicle/v1/rule_service/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_service/credentials.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_service/operations.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_service/paths.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_service/rest/client.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_service/rest/operations.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_service/rest/service_stub.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_service/rest.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_service.rb +1 -1
- data/lib/google/cloud/chronicle/v1/rule_services_pb.rb +1 -1
- data/lib/google/cloud/chronicle/v1/version.rb +1 -1
- data/lib/google/cloud/chronicle/v1.rb +2 -1
- data/lib/google-cloud-chronicle-v1.rb +1 -1
- data/proto_docs/google/api/client.rb +1 -1
- data/proto_docs/google/api/field_behavior.rb +1 -1
- data/proto_docs/google/api/field_info.rb +88 -0
- data/proto_docs/google/api/httpbody.rb +80 -0
- data/proto_docs/google/api/launch_stage.rb +1 -1
- data/proto_docs/google/api/resource.rb +1 -1
- data/proto_docs/google/cloud/chronicle/v1/data_access_control.rb +1 -1
- data/proto_docs/google/cloud/chronicle/v1/entity.rb +1 -1
- data/proto_docs/google/cloud/chronicle/v1/feed.rb +3427 -0
- data/proto_docs/google/cloud/chronicle/v1/instance.rb +1 -1
- data/proto_docs/google/cloud/chronicle/v1/reference_list.rb +1 -1
- data/proto_docs/google/cloud/chronicle/v1/rule.rb +1 -1
- data/proto_docs/google/cloud/chronicle/v1/rule_execution_error.rb +5 -5
- data/proto_docs/google/longrunning/operations.rb +1 -1
- data/proto_docs/google/protobuf/any.rb +1 -1
- data/proto_docs/google/protobuf/duration.rb +1 -1
- data/proto_docs/google/protobuf/empty.rb +1 -1
- data/proto_docs/google/protobuf/field_mask.rb +1 -1
- data/proto_docs/google/protobuf/timestamp.rb +8 -7
- data/proto_docs/google/rpc/status.rb +1 -1
- data/proto_docs/google/type/interval.rb +1 -1
- metadata +13 -1
|
@@ -0,0 +1,3427 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Cloud
|
|
22
|
+
module Chronicle
|
|
23
|
+
module V1
|
|
24
|
+
# FeedPack is a logical container for related LogTypes for which feeds can be
|
|
25
|
+
# configured.
|
|
26
|
+
# @!attribute [rw] name
|
|
27
|
+
# @return [::String]
|
|
28
|
+
# Identifier. The resource name of the feed pack.
|
|
29
|
+
# Format:
|
|
30
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feedPacks/\\{feed_pack}
|
|
31
|
+
# @!attribute [r] display_name
|
|
32
|
+
# @return [::String]
|
|
33
|
+
# Output only. The display name of the feed pack.
|
|
34
|
+
# @!attribute [r] description
|
|
35
|
+
# @return [::String]
|
|
36
|
+
# Output only. The description of the feed pack.
|
|
37
|
+
# @!attribute [r] icon
|
|
38
|
+
# @return [::String]
|
|
39
|
+
# Output only. The icon image of the content pack in base64 in png format.
|
|
40
|
+
# @!attribute [r] categories
|
|
41
|
+
# @return [::Array<::String>]
|
|
42
|
+
# Output only. Categories the featured content is associated with. In case of
|
|
43
|
+
# product feed packs, there will be only one category.
|
|
44
|
+
# @!attribute [r] pack_type
|
|
45
|
+
# @return [::Google::Cloud::Chronicle::V1::FeedPack::PackType]
|
|
46
|
+
# Output only. Type of pack.
|
|
47
|
+
# @!attribute [r] pack_log_types
|
|
48
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::PackLogType>]
|
|
49
|
+
# Output only. Log types featured in the pack.
|
|
50
|
+
# @!attribute [r] hidden
|
|
51
|
+
# @return [::Boolean]
|
|
52
|
+
# Output only. Whether the feed pack should be displayed in the Feeds Page.
|
|
53
|
+
# @!attribute [r] pack_documentation
|
|
54
|
+
# @return [::String]
|
|
55
|
+
# Output only. Pack specific documentation in markdown format.
|
|
56
|
+
class FeedPack
|
|
57
|
+
include ::Google::Protobuf::MessageExts
|
|
58
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
59
|
+
|
|
60
|
+
# Type of feed pack. Feeds Page currently only lists PRODUCT_BASED packs.
|
|
61
|
+
module PackType
|
|
62
|
+
# Unspecified feed pack type.
|
|
63
|
+
PACK_TYPE_UNSPECIFIED = 0
|
|
64
|
+
|
|
65
|
+
# Product based feed pack type.
|
|
66
|
+
PRODUCT_BASED = 1
|
|
67
|
+
|
|
68
|
+
# Use case based feed pack type.
|
|
69
|
+
USECASE_BASED = 2
|
|
70
|
+
|
|
71
|
+
# Onboarding feed pack type.
|
|
72
|
+
ONBOARDING = 3
|
|
73
|
+
end
|
|
74
|
+
end
|
|
75
|
+
|
|
76
|
+
# PackLogtype is a log type featured in the feed pack.
|
|
77
|
+
# @!attribute [rw] log_type
|
|
78
|
+
# @return [::String]
|
|
79
|
+
# Log Type featured in the feed pack.
|
|
80
|
+
# Format:
|
|
81
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/logTypes/\\{log_type}
|
|
82
|
+
# @!attribute [rw] required
|
|
83
|
+
# @return [::Boolean]
|
|
84
|
+
# Whether the logtype is required to deploy a feed pack.
|
|
85
|
+
# @!attribute [rw] has_default_parser
|
|
86
|
+
# @return [::Boolean]
|
|
87
|
+
# Whether a default(prebuilt) parser is available for the given log type.
|
|
88
|
+
# @!attribute [rw] recommended_source_type
|
|
89
|
+
# @return [::Google::Cloud::Chronicle::V1::FeedDetails::FeedSourceType]
|
|
90
|
+
# The recommended source type for the log type.
|
|
91
|
+
# @!attribute [rw] display_name
|
|
92
|
+
# @return [::String]
|
|
93
|
+
# The display name of the log type.
|
|
94
|
+
# @!attribute [rw] configuration_documentation
|
|
95
|
+
# @return [::String]
|
|
96
|
+
# Documentation to define steps on how to configure a log type.
|
|
97
|
+
# @!attribute [rw] additional_documentation
|
|
98
|
+
# @return [::String]
|
|
99
|
+
# Documentation to share any CTAs for more reference.
|
|
100
|
+
class PackLogType
|
|
101
|
+
include ::Google::Protobuf::MessageExts
|
|
102
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
103
|
+
end
|
|
104
|
+
|
|
105
|
+
# Feed is a resource that contains feed information needed to create a feed.
|
|
106
|
+
# @!attribute [rw] name
|
|
107
|
+
# @return [::String]
|
|
108
|
+
# The resource name of the feed.
|
|
109
|
+
# Format:
|
|
110
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feeds/\\{feed}
|
|
111
|
+
# @!attribute [r] uid
|
|
112
|
+
# @return [::String]
|
|
113
|
+
# Output only. Unique identifier for the feed.
|
|
114
|
+
# @!attribute [rw] display_name
|
|
115
|
+
# @return [::String]
|
|
116
|
+
# Customer-provided feed name.
|
|
117
|
+
# @!attribute [rw] details
|
|
118
|
+
# @return [::Google::Cloud::Chronicle::V1::FeedDetails]
|
|
119
|
+
# Additional details of the feed, these details are dynamic and will be
|
|
120
|
+
# different for each of the feeds.
|
|
121
|
+
# @!attribute [r] state
|
|
122
|
+
# @return [::Google::Cloud::Chronicle::V1::Feed::State]
|
|
123
|
+
# Output only. State of the feed.
|
|
124
|
+
# @!attribute [r] failure_msg
|
|
125
|
+
# @return [::String]
|
|
126
|
+
# Output only. Details about the most recent failure when feed state is
|
|
127
|
+
# FAILED.
|
|
128
|
+
# @!attribute [r] read_only
|
|
129
|
+
# @return [::Boolean]
|
|
130
|
+
# Output only. Whether this feed can be updated or deleted.
|
|
131
|
+
# @!attribute [r] last_feed_initiation_time
|
|
132
|
+
# @return [::Google::Protobuf::Timestamp]
|
|
133
|
+
# Output only. Latest timestamp when the transfer was successful for the
|
|
134
|
+
# feed.
|
|
135
|
+
# @!attribute [r] failure_details
|
|
136
|
+
# @return [::Google::Cloud::Chronicle::V1::FeedFailureDetails]
|
|
137
|
+
# Output only. Failure details for the feed. If the feed is in the failure
|
|
138
|
+
# state, this field will contain the details of the error cause and actions.
|
|
139
|
+
# @!attribute [r] reference_id
|
|
140
|
+
# @return [::String]
|
|
141
|
+
# Output only. Reference ID, this field will contain the legacy id of the
|
|
142
|
+
# feed.
|
|
143
|
+
class Feed
|
|
144
|
+
include ::Google::Protobuf::MessageExts
|
|
145
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
146
|
+
|
|
147
|
+
# List of states a feed can have.
|
|
148
|
+
module State
|
|
149
|
+
# Unspecified feed state.
|
|
150
|
+
STATE_UNSPECIFIED = 0
|
|
151
|
+
|
|
152
|
+
# Feed is configured and ready to ingest data. Newly created feeds have
|
|
153
|
+
# this state. Once ingestion begins the feed will transition out of this
|
|
154
|
+
# state and will not transition back.
|
|
155
|
+
ACTIVE = 1
|
|
156
|
+
|
|
157
|
+
# Feed is Disabled. When a user disables a feed it will transition to this
|
|
158
|
+
# state regardless of its current state. Once enabled a feed will
|
|
159
|
+
# transition to its previous state.
|
|
160
|
+
INACTIVE = 2
|
|
161
|
+
|
|
162
|
+
# Feed is enabled and currently ingesting data. A feed will transition to
|
|
163
|
+
# this state from an ACTIVE or COMPLETED state when Chronicle has begun
|
|
164
|
+
# fetching data for this feed.
|
|
165
|
+
RUNNING = 3
|
|
166
|
+
|
|
167
|
+
# Feed is enabled and has recently successfully ingested data. A feed will
|
|
168
|
+
# transition to this state from RUNNING or FAILED once a fetch has
|
|
169
|
+
# completed successfully.
|
|
170
|
+
SUCCEEDED = 4
|
|
171
|
+
|
|
172
|
+
# Feed is enabled, but has recently failed to ingest data. A feed will
|
|
173
|
+
# transition to this state only from RUNNING once a fetch has failed. It
|
|
174
|
+
# will remain in this state until a subsequent fetch has succeeded.
|
|
175
|
+
FAILED = 5
|
|
176
|
+
end
|
|
177
|
+
end
|
|
178
|
+
|
|
179
|
+
# FeedFailureDetails contains details about the errors thrown by chronicle for
|
|
180
|
+
# the feeds. These are user visible details. These details help user identify
|
|
181
|
+
# the root cause and take appropriate action for the feed errors.
|
|
182
|
+
# @!attribute [r] error_code
|
|
183
|
+
# @return [::String]
|
|
184
|
+
# Output only. error_code contains the error code for the feed. The field is
|
|
185
|
+
# populated for the feeds with failed status.
|
|
186
|
+
# @!attribute [r] http_error_code
|
|
187
|
+
# @return [::Integer]
|
|
188
|
+
# Output only. http_error_code contains the HTTP error code for the feed
|
|
189
|
+
# failure. feed transfer failure may or may not result in http error code.
|
|
190
|
+
# @!attribute [r] error_cause
|
|
191
|
+
# @return [::String]
|
|
192
|
+
# Output only. error_cause contains the information regarding the failure
|
|
193
|
+
# cause.
|
|
194
|
+
# @!attribute [r] error_action
|
|
195
|
+
# @return [::String]
|
|
196
|
+
# Output only. error_action contains the user action prescribed for
|
|
197
|
+
# remediation of feed error.
|
|
198
|
+
class FeedFailureDetails
|
|
199
|
+
include ::Google::Protobuf::MessageExts
|
|
200
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
201
|
+
end
|
|
202
|
+
|
|
203
|
+
# FeedServiceAccount is a resource that wraps the feed service account's name.
|
|
204
|
+
# @!attribute [rw] name
|
|
205
|
+
# @return [::String]
|
|
206
|
+
# The resource name of the feedServiceAccount.
|
|
207
|
+
# Format:
|
|
208
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feedServiceAccounts/\\{feedserviceaccount}
|
|
209
|
+
# @!attribute [rw] subject_id
|
|
210
|
+
# @return [::String]
|
|
211
|
+
# Unique identifier for the service account.
|
|
212
|
+
class FeedServiceAccount
|
|
213
|
+
include ::Google::Protobuf::MessageExts
|
|
214
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
215
|
+
end
|
|
216
|
+
|
|
217
|
+
# Additional details of the feed, these details are dynamic and will be
|
|
218
|
+
# different for each of the feeds.
|
|
219
|
+
# @!attribute [rw] anomali_settings
|
|
220
|
+
# @return [::Google::Cloud::Chronicle::V1::AnomaliIocSettings]
|
|
221
|
+
# Anomali IOC settings.
|
|
222
|
+
#
|
|
223
|
+
# Note: The following fields are mutually exclusive: `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
224
|
+
# @!attribute [rw] azure_ad_context_settings
|
|
225
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureADContextSettings]
|
|
226
|
+
# Azure AD Context settings.
|
|
227
|
+
#
|
|
228
|
+
# Note: The following fields are mutually exclusive: `azure_ad_context_settings`, `anomali_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
229
|
+
# @!attribute [rw] cloud_passage_settings
|
|
230
|
+
# @return [::Google::Cloud::Chronicle::V1::CloudPassageSettings]
|
|
231
|
+
# Cloud Passage settings.
|
|
232
|
+
#
|
|
233
|
+
# Note: The following fields are mutually exclusive: `cloud_passage_settings`, `anomali_settings`, `azure_ad_context_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
234
|
+
# @!attribute [rw] cortex_xdr_settings
|
|
235
|
+
# @return [::Google::Cloud::Chronicle::V1::CortexXDRSettings]
|
|
236
|
+
# Cortex XDR settings.
|
|
237
|
+
#
|
|
238
|
+
# Note: The following fields are mutually exclusive: `cortex_xdr_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
239
|
+
# @!attribute [rw] duo_auth_settings
|
|
240
|
+
# @return [::Google::Cloud::Chronicle::V1::DuoAuthSettings]
|
|
241
|
+
# Duo Auth settings.
|
|
242
|
+
#
|
|
243
|
+
# Note: The following fields are mutually exclusive: `duo_auth_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
244
|
+
# @!attribute [rw] duo_user_context_settings
|
|
245
|
+
# @return [::Google::Cloud::Chronicle::V1::DuoUserContextSettings]
|
|
246
|
+
# Duo User Context settings.
|
|
247
|
+
#
|
|
248
|
+
# Note: The following fields are mutually exclusive: `duo_user_context_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
249
|
+
# @!attribute [rw] microsoft_graph_alert_settings
|
|
250
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftGraphAlertSettings]
|
|
251
|
+
# Microsoft Graph Alert settings.
|
|
252
|
+
#
|
|
253
|
+
# Note: The following fields are mutually exclusive: `microsoft_graph_alert_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
254
|
+
# @!attribute [rw] microsoft_security_center_alert_settings
|
|
255
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftSecurityCenterAlertSettings]
|
|
256
|
+
# Microsoft Security center alert settings.
|
|
257
|
+
#
|
|
258
|
+
# Note: The following fields are mutually exclusive: `microsoft_security_center_alert_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
259
|
+
# @!attribute [rw] mimecast_mail_settings
|
|
260
|
+
# @return [::Google::Cloud::Chronicle::V1::MimecastMailSettings]
|
|
261
|
+
# Mimecast mail settings.
|
|
262
|
+
#
|
|
263
|
+
# Note: The following fields are mutually exclusive: `mimecast_mail_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
264
|
+
# @!attribute [rw] office365_settings
|
|
265
|
+
# @return [::Google::Cloud::Chronicle::V1::Office365Settings]
|
|
266
|
+
# Office 365 settings.
|
|
267
|
+
#
|
|
268
|
+
# Note: The following fields are mutually exclusive: `office365_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
269
|
+
# @!attribute [rw] proofpoint_mail_settings
|
|
270
|
+
# @return [::Google::Cloud::Chronicle::V1::ProofpointMailSettings]
|
|
271
|
+
# Proofpoint mail settings.
|
|
272
|
+
#
|
|
273
|
+
# Note: The following fields are mutually exclusive: `proofpoint_mail_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
274
|
+
# @!attribute [rw] recorded_future_ioc_settings
|
|
275
|
+
# @return [::Google::Cloud::Chronicle::V1::RecordedFutureIocSettings]
|
|
276
|
+
# Recorded Future IOC settings.
|
|
277
|
+
#
|
|
278
|
+
# Note: The following fields are mutually exclusive: `recorded_future_ioc_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
279
|
+
# @!attribute [rw] workday_settings
|
|
280
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkdaySettings]
|
|
281
|
+
# Workday settings.
|
|
282
|
+
#
|
|
283
|
+
# Note: The following fields are mutually exclusive: `workday_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
284
|
+
# @!attribute [rw] pan_ioc_settings
|
|
285
|
+
# @return [::Google::Cloud::Chronicle::V1::PanIocSettings]
|
|
286
|
+
# PAN IOC settings.
|
|
287
|
+
#
|
|
288
|
+
# Note: The following fields are mutually exclusive: `pan_ioc_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
289
|
+
# @!attribute [rw] okta_settings
|
|
290
|
+
# @return [::Google::Cloud::Chronicle::V1::OktaSettings]
|
|
291
|
+
# Okta settings.
|
|
292
|
+
#
|
|
293
|
+
# Note: The following fields are mutually exclusive: `okta_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
294
|
+
# @!attribute [rw] okta_user_context_settings
|
|
295
|
+
# @return [::Google::Cloud::Chronicle::V1::OktaUserContextSettings]
|
|
296
|
+
# Okta user context settings.
|
|
297
|
+
#
|
|
298
|
+
# Note: The following fields are mutually exclusive: `okta_user_context_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
299
|
+
# @!attribute [rw] fox_it_stix_settings
|
|
300
|
+
# @return [::Google::Cloud::Chronicle::V1::FoxITStixSettings]
|
|
301
|
+
# Fox-IT STIX settings.
|
|
302
|
+
#
|
|
303
|
+
# Note: The following fields are mutually exclusive: `fox_it_stix_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
304
|
+
# @!attribute [rw] threat_connect_ioc_settings
|
|
305
|
+
# @return [::Google::Cloud::Chronicle::V1::ThreatConnectIoCSettings]
|
|
306
|
+
# ThreatConnect IOC settings.
|
|
307
|
+
#
|
|
308
|
+
# Note: The following fields are mutually exclusive: `threat_connect_ioc_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
309
|
+
# @!attribute [rw] service_now_cmdb_settings
|
|
310
|
+
# @return [::Google::Cloud::Chronicle::V1::ServiceNowCMDBSettings]
|
|
311
|
+
# ServiceNow CMDB settings.
|
|
312
|
+
#
|
|
313
|
+
# Note: The following fields are mutually exclusive: `service_now_cmdb_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
314
|
+
# @!attribute [rw] imperva_waf_settings
|
|
315
|
+
# @return [::Google::Cloud::Chronicle::V1::ImpervaWAFSettings]
|
|
316
|
+
# Imperva WAF settings.
|
|
317
|
+
#
|
|
318
|
+
# Note: The following fields are mutually exclusive: `imperva_waf_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
319
|
+
# @!attribute [rw] thinkst_canary_settings
|
|
320
|
+
# @return [::Google::Cloud::Chronicle::V1::ThinkstCanarySettings]
|
|
321
|
+
# Thinkst Canary settings.
|
|
322
|
+
#
|
|
323
|
+
# Note: The following fields are mutually exclusive: `thinkst_canary_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
324
|
+
# @!attribute [rw] rh_isac_ioc_settings
|
|
325
|
+
# @return [::Google::Cloud::Chronicle::V1::RHIsacIocSettings]
|
|
326
|
+
# RH-ISAC IOC settings.
|
|
327
|
+
#
|
|
328
|
+
# Note: The following fields are mutually exclusive: `rh_isac_ioc_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
329
|
+
# @!attribute [rw] rapid7_insight_settings
|
|
330
|
+
# @return [::Google::Cloud::Chronicle::V1::Rapid7InsightSettings]
|
|
331
|
+
# Rapid7 Insight settings.
|
|
332
|
+
#
|
|
333
|
+
# Note: The following fields are mutually exclusive: `rapid7_insight_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
334
|
+
# @!attribute [rw] salesforce_settings
|
|
335
|
+
# @return [::Google::Cloud::Chronicle::V1::SalesforceSettings]
|
|
336
|
+
# Salesforce settings.
|
|
337
|
+
#
|
|
338
|
+
# Note: The following fields are mutually exclusive: `salesforce_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
339
|
+
# @!attribute [rw] netskope_alert_settings
|
|
340
|
+
# @return [::Google::Cloud::Chronicle::V1::NetskopeAlertSettings]
|
|
341
|
+
# Netskope alert settings.
|
|
342
|
+
#
|
|
343
|
+
# Note: The following fields are mutually exclusive: `netskope_alert_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
344
|
+
# @!attribute [rw] azure_mdm_intune_settings
|
|
345
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureMDMIntuneSettings]
|
|
346
|
+
# Azure MDM Intune settings.
|
|
347
|
+
#
|
|
348
|
+
# Note: The following fields are mutually exclusive: `azure_mdm_intune_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
349
|
+
# @!attribute [rw] azure_ad_settings
|
|
350
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureADSettings]
|
|
351
|
+
# Azure AD settings.
|
|
352
|
+
#
|
|
353
|
+
# Note: The following fields are mutually exclusive: `azure_ad_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
354
|
+
# @!attribute [rw] proofpoint_on_demand_settings
|
|
355
|
+
# @return [::Google::Cloud::Chronicle::V1::ProofpointOnDemandSettings]
|
|
356
|
+
# Proofpoint On-Demand settings.
|
|
357
|
+
#
|
|
358
|
+
# Note: The following fields are mutually exclusive: `proofpoint_on_demand_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
359
|
+
# @!attribute [rw] workspace_users_settings
|
|
360
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkspaceUsersSettings]
|
|
361
|
+
# Workspace users settings.
|
|
362
|
+
#
|
|
363
|
+
# Note: The following fields are mutually exclusive: `workspace_users_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
364
|
+
# @!attribute [rw] workspace_activity_settings
|
|
365
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkspaceActivitySettings]
|
|
366
|
+
# Workspace activity settings.
|
|
367
|
+
#
|
|
368
|
+
# Note: The following fields are mutually exclusive: `workspace_activity_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
369
|
+
# @!attribute [rw] workspace_alerts_settings
|
|
370
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkspaceAlertsSettings]
|
|
371
|
+
# Workspace alerts settings.
|
|
372
|
+
#
|
|
373
|
+
# Note: The following fields are mutually exclusive: `workspace_alerts_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
374
|
+
# @!attribute [rw] workspace_privileges_settings
|
|
375
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkspacePrivilegesSettings]
|
|
376
|
+
# Workspace privileges settings.
|
|
377
|
+
#
|
|
378
|
+
# Note: The following fields are mutually exclusive: `workspace_privileges_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
379
|
+
# @!attribute [rw] workspace_mobile_settings
|
|
380
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkspaceMobileSettings]
|
|
381
|
+
# Workspace mobile settings.
|
|
382
|
+
#
|
|
383
|
+
# Note: The following fields are mutually exclusive: `workspace_mobile_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
384
|
+
# @!attribute [rw] workspace_chrome_os_settings
|
|
385
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkspaceChromeOSSettings]
|
|
386
|
+
# Workspace ChromeOS settings.
|
|
387
|
+
#
|
|
388
|
+
# Note: The following fields are mutually exclusive: `workspace_chrome_os_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
389
|
+
# @!attribute [rw] workspace_groups_settings
|
|
390
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkspaceGroupsSettings]
|
|
391
|
+
# Workspace Groups settings.
|
|
392
|
+
#
|
|
393
|
+
# Note: The following fields are mutually exclusive: `workspace_groups_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
394
|
+
# @!attribute [rw] azure_ad_audit_settings
|
|
395
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureADAuditSettings]
|
|
396
|
+
# Azure AD Audit settings.
|
|
397
|
+
#
|
|
398
|
+
# Note: The following fields are mutually exclusive: `azure_ad_audit_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
399
|
+
# @!attribute [rw] symantec_event_export_settings
|
|
400
|
+
# @return [::Google::Cloud::Chronicle::V1::SymantecEventExportSettings]
|
|
401
|
+
# Symantec Event Export settings.
|
|
402
|
+
#
|
|
403
|
+
# Note: The following fields are mutually exclusive: `symantec_event_export_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
404
|
+
# @!attribute [rw] qualys_vm_settings
|
|
405
|
+
# @return [::Google::Cloud::Chronicle::V1::QualysVMSettings]
|
|
406
|
+
# Qualys VM settings
|
|
407
|
+
#
|
|
408
|
+
# Note: The following fields are mutually exclusive: `qualys_vm_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
409
|
+
# @!attribute [rw] pan_prisma_cloud_settings
|
|
410
|
+
# @return [::Google::Cloud::Chronicle::V1::PanPrismaCloudSettings]
|
|
411
|
+
# PAN Prisma Cloud settings.
|
|
412
|
+
#
|
|
413
|
+
# Note: The following fields are mutually exclusive: `pan_prisma_cloud_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
414
|
+
# @!attribute [rw] gcs_settings
|
|
415
|
+
# @return [::Google::Cloud::Chronicle::V1::GoogleCloudStorageSettings]
|
|
416
|
+
# Google Cloud Storage settings.
|
|
417
|
+
#
|
|
418
|
+
# Note: The following fields are mutually exclusive: `gcs_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
419
|
+
# @!attribute [rw] http_settings
|
|
420
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpSettings]
|
|
421
|
+
# HTTP settings.
|
|
422
|
+
#
|
|
423
|
+
# Note: The following fields are mutually exclusive: `http_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
424
|
+
# @!attribute [rw] sftp_settings
|
|
425
|
+
# @return [::Google::Cloud::Chronicle::V1::SftpSettings]
|
|
426
|
+
# SFTP settings.
|
|
427
|
+
#
|
|
428
|
+
# Note: The following fields are mutually exclusive: `sftp_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
429
|
+
# @!attribute [rw] amazon_s3_settings
|
|
430
|
+
# @return [::Google::Cloud::Chronicle::V1::AmazonS3Settings]
|
|
431
|
+
# Amazon S3 settings.
|
|
432
|
+
#
|
|
433
|
+
# Note: The following fields are mutually exclusive: `amazon_s3_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
434
|
+
# @!attribute [rw] azure_blob_store_settings
|
|
435
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureBlobStoreSettings]
|
|
436
|
+
# Azure Blob Storage settings.
|
|
437
|
+
#
|
|
438
|
+
# Note: The following fields are mutually exclusive: `azure_blob_store_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
439
|
+
# @!attribute [rw] amazon_sqs_settings
|
|
440
|
+
# @return [::Google::Cloud::Chronicle::V1::AmazonSQSSettings]
|
|
441
|
+
# Amazon SQS settings.
|
|
442
|
+
#
|
|
443
|
+
# Note: The following fields are mutually exclusive: `amazon_sqs_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
444
|
+
# @!attribute [rw] google_cloud_identity_devices_settings
|
|
445
|
+
# @return [::Google::Cloud::Chronicle::V1::GoogleCloudIdentityDevicesSettings]
|
|
446
|
+
# Google Cloud Identity Devices settings.
|
|
447
|
+
#
|
|
448
|
+
# Note: The following fields are mutually exclusive: `google_cloud_identity_devices_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
449
|
+
# @!attribute [rw] google_cloud_identity_device_users_settings
|
|
450
|
+
# @return [::Google::Cloud::Chronicle::V1::GoogleCloudIdentityDeviceUsersSettings]
|
|
451
|
+
# Google Cloud Identity Device Users settings.
|
|
452
|
+
#
|
|
453
|
+
# Note: The following fields are mutually exclusive: `google_cloud_identity_device_users_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
454
|
+
# @!attribute [rw] crowdstrike_detects_settings
|
|
455
|
+
# @return [::Google::Cloud::Chronicle::V1::CrowdStrikeDetectsSettings]
|
|
456
|
+
# CrowdStrike Detects API settings.
|
|
457
|
+
#
|
|
458
|
+
# Note: The following fields are mutually exclusive: `crowdstrike_detects_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
459
|
+
# @!attribute [rw] mandiant_ioc_settings
|
|
460
|
+
# @return [::Google::Cloud::Chronicle::V1::MandiantIoCSettings]
|
|
461
|
+
# Mandiant IOC settings.
|
|
462
|
+
#
|
|
463
|
+
# Note: The following fields are mutually exclusive: `mandiant_ioc_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
464
|
+
# @!attribute [rw] sentinelone_alert_settings
|
|
465
|
+
# @return [::Google::Cloud::Chronicle::V1::SentineloneAlertSettings]
|
|
466
|
+
# SentinelOne Alert settings.
|
|
467
|
+
#
|
|
468
|
+
# Note: The following fields are mutually exclusive: `sentinelone_alert_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
469
|
+
# @!attribute [rw] qualys_scan_settings
|
|
470
|
+
# @return [::Google::Cloud::Chronicle::V1::QualysScanSettings]
|
|
471
|
+
# Qualys Scan Settings
|
|
472
|
+
#
|
|
473
|
+
# Note: The following fields are mutually exclusive: `qualys_scan_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
474
|
+
# @!attribute [rw] pubsub_settings
|
|
475
|
+
# @return [::Google::Cloud::Chronicle::V1::PubsubSettings]
|
|
476
|
+
# Pub/Sub settings.
|
|
477
|
+
#
|
|
478
|
+
# Note: The following fields are mutually exclusive: `pubsub_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
479
|
+
# @!attribute [rw] amazon_kinesis_firehose_settings
|
|
480
|
+
# @return [::Google::Cloud::Chronicle::V1::AmazonKinesisFirehoseSettings]
|
|
481
|
+
# Amazon Kinesis Firehose settings.
|
|
482
|
+
#
|
|
483
|
+
# Note: The following fields are mutually exclusive: `amazon_kinesis_firehose_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
484
|
+
# @!attribute [rw] webhook_settings
|
|
485
|
+
# @return [::Google::Cloud::Chronicle::V1::WebhookSettings]
|
|
486
|
+
# Webhook settings.
|
|
487
|
+
#
|
|
488
|
+
# Note: The following fields are mutually exclusive: `webhook_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
489
|
+
# @!attribute [rw] dummy_log_type_settings
|
|
490
|
+
# @return [::Google::Cloud::Chronicle::V1::DummyLogTypeSettings]
|
|
491
|
+
# DummyLogType Settings.
|
|
492
|
+
#
|
|
493
|
+
# Note: The following fields are mutually exclusive: `dummy_log_type_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
494
|
+
# @!attribute [rw] https_push_google_cloud_pubsub_settings
|
|
495
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpsPushGoogleCloudPubSubSettings]
|
|
496
|
+
# Https push Google Pub/Sub settings.
|
|
497
|
+
#
|
|
498
|
+
# Note: The following fields are mutually exclusive: `https_push_google_cloud_pubsub_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
499
|
+
# @!attribute [rw] https_push_amazon_kinesis_firehose_settings
|
|
500
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpsPushAmazonKinesisFirehoseSettings]
|
|
501
|
+
# Https push Amazon Kinesis Firehose settings.
|
|
502
|
+
#
|
|
503
|
+
# Note: The following fields are mutually exclusive: `https_push_amazon_kinesis_firehose_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
504
|
+
# @!attribute [rw] https_push_webhook_settings
|
|
505
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpsPushWebhookSettings]
|
|
506
|
+
# Https push Webhook settings.
|
|
507
|
+
#
|
|
508
|
+
# Note: The following fields are mutually exclusive: `https_push_webhook_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
509
|
+
# @!attribute [rw] aws_ec2_hosts_settings
|
|
510
|
+
# @return [::Google::Cloud::Chronicle::V1::AWSEC2HostsSettings]
|
|
511
|
+
# AWS EC2 Hosts settings.
|
|
512
|
+
#
|
|
513
|
+
# Note: The following fields are mutually exclusive: `aws_ec2_hosts_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
514
|
+
# @!attribute [rw] aws_ec2_instances_settings
|
|
515
|
+
# @return [::Google::Cloud::Chronicle::V1::AWSEC2InstancesSettings]
|
|
516
|
+
# AWS EC2 Instances settings.
|
|
517
|
+
#
|
|
518
|
+
# Note: The following fields are mutually exclusive: `aws_ec2_instances_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
519
|
+
# @!attribute [rw] aws_ec2_vpcs_settings
|
|
520
|
+
# @return [::Google::Cloud::Chronicle::V1::AWSEC2VpcsSettings]
|
|
521
|
+
# AWS EC2 Vpcs settings.
|
|
522
|
+
#
|
|
523
|
+
# Note: The following fields are mutually exclusive: `aws_ec2_vpcs_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
524
|
+
# @!attribute [rw] aws_iam_settings
|
|
525
|
+
# @return [::Google::Cloud::Chronicle::V1::AWSIAMSettings]
|
|
526
|
+
# AWS IAM settings.
|
|
527
|
+
#
|
|
528
|
+
# Note: The following fields are mutually exclusive: `aws_iam_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
529
|
+
# @!attribute [rw] netskope_alert_v2_settings
|
|
530
|
+
# @return [::Google::Cloud::Chronicle::V1::NetskopeAlertV2Settings]
|
|
531
|
+
# Netskope alert V2 settings.
|
|
532
|
+
#
|
|
533
|
+
# Note: The following fields are mutually exclusive: `netskope_alert_v2_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
534
|
+
# @!attribute [rw] gcs_v2_settings
|
|
535
|
+
# @return [::Google::Cloud::Chronicle::V1::GoogleCloudStorageV2Settings]
|
|
536
|
+
# Settings for Google Cloud Storage Omniflow feeds.
|
|
537
|
+
#
|
|
538
|
+
# Note: The following fields are mutually exclusive: `gcs_v2_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
539
|
+
# @!attribute [rw] amazon_s3_v2_settings
|
|
540
|
+
# @return [::Google::Cloud::Chronicle::V1::AmazonS3V2Settings]
|
|
541
|
+
# Settings for S3 Omniflow feeds.
|
|
542
|
+
#
|
|
543
|
+
# Note: The following fields are mutually exclusive: `amazon_s3_v2_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
544
|
+
# @!attribute [rw] amazon_sqs_v2_settings
|
|
545
|
+
# @return [::Google::Cloud::Chronicle::V1::AmazonSQSV2Settings]
|
|
546
|
+
# Settings for SQS Omniflow feeds.
|
|
547
|
+
#
|
|
548
|
+
# Note: The following fields are mutually exclusive: `amazon_sqs_v2_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
549
|
+
# @!attribute [rw] azure_event_hub_settings
|
|
550
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureEventHubSettings]
|
|
551
|
+
# Settings for Omniflow based native ingestion from azure event hub.
|
|
552
|
+
#
|
|
553
|
+
# Note: The following fields are mutually exclusive: `azure_event_hub_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
554
|
+
# @!attribute [rw] trellix_hx_hosts_settings
|
|
555
|
+
# @return [::Google::Cloud::Chronicle::V1::TrellixHxHostsSettings]
|
|
556
|
+
# Settings for Trellix HX Host Metadata.
|
|
557
|
+
#
|
|
558
|
+
# Note: The following fields are mutually exclusive: `trellix_hx_hosts_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
559
|
+
# @!attribute [rw] azure_blob_store_v2_settings
|
|
560
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureBlobStoreV2Settings]
|
|
561
|
+
# Settings for Azure Blobstore Omniflow feeds.
|
|
562
|
+
#
|
|
563
|
+
# Note: The following fields are mutually exclusive: `azure_blob_store_v2_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
564
|
+
# @!attribute [rw] trellix_hx_alerts_settings
|
|
565
|
+
# @return [::Google::Cloud::Chronicle::V1::TrellixHxAlertsSettings]
|
|
566
|
+
# Settings for Trellix HX Alerts Metadata.
|
|
567
|
+
#
|
|
568
|
+
# Note: The following fields are mutually exclusive: `trellix_hx_alerts_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
569
|
+
# @!attribute [rw] google_cloud_storage_event_driven_settings
|
|
570
|
+
# @return [::Google::Cloud::Chronicle::V1::GoogleCloudStorageEventDrivenSettings]
|
|
571
|
+
# Settings for Omniflow based Google Cloud Storage event driven feeds.
|
|
572
|
+
#
|
|
573
|
+
# Note: The following fields are mutually exclusive: `google_cloud_storage_event_driven_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
574
|
+
# @!attribute [rw] crowdstrike_alerts_settings
|
|
575
|
+
# @return [::Google::Cloud::Chronicle::V1::CrowdStrikeAlertsSettings]
|
|
576
|
+
# CrowdStrike Alerts API settings.
|
|
577
|
+
#
|
|
578
|
+
# Note: The following fields are mutually exclusive: `crowdstrike_alerts_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
579
|
+
# @!attribute [rw] trellix_hx_bulk_acqs_settings
|
|
580
|
+
# @return [::Google::Cloud::Chronicle::V1::TrellixHxBulkAcqsSettings]
|
|
581
|
+
# Settings for Trellix HX Bulk Acquisitions Metadata.
|
|
582
|
+
#
|
|
583
|
+
# Note: The following fields are mutually exclusive: `trellix_hx_bulk_acqs_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
584
|
+
# @!attribute [rw] mimecast_mail_v2_settings
|
|
585
|
+
# @return [::Google::Cloud::Chronicle::V1::MimecastMailV2Settings]
|
|
586
|
+
# Required. Mimecast mail v2 settings.
|
|
587
|
+
#
|
|
588
|
+
# Note: The following fields are mutually exclusive: `mimecast_mail_v2_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `threat_connect_ioc_v3_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
589
|
+
# @!attribute [rw] threat_connect_ioc_v3_settings
|
|
590
|
+
# @return [::Google::Cloud::Chronicle::V1::ThreatConnectIoCV3Settings]
|
|
591
|
+
# Threat Connect IOC V3 settings.
|
|
592
|
+
#
|
|
593
|
+
# Note: The following fields are mutually exclusive: `threat_connect_ioc_v3_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `custom_api_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
594
|
+
# @!attribute [rw] custom_api_settings
|
|
595
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPISettings]
|
|
596
|
+
# Settings for Custom API (Codeless) Feeds.
|
|
597
|
+
#
|
|
598
|
+
# Note: The following fields are mutually exclusive: `custom_api_settings`, `anomali_settings`, `azure_ad_context_settings`, `cloud_passage_settings`, `cortex_xdr_settings`, `duo_auth_settings`, `duo_user_context_settings`, `microsoft_graph_alert_settings`, `microsoft_security_center_alert_settings`, `mimecast_mail_settings`, `office365_settings`, `proofpoint_mail_settings`, `recorded_future_ioc_settings`, `workday_settings`, `pan_ioc_settings`, `okta_settings`, `okta_user_context_settings`, `fox_it_stix_settings`, `threat_connect_ioc_settings`, `service_now_cmdb_settings`, `imperva_waf_settings`, `thinkst_canary_settings`, `rh_isac_ioc_settings`, `rapid7_insight_settings`, `salesforce_settings`, `netskope_alert_settings`, `azure_mdm_intune_settings`, `azure_ad_settings`, `proofpoint_on_demand_settings`, `workspace_users_settings`, `workspace_activity_settings`, `workspace_alerts_settings`, `workspace_privileges_settings`, `workspace_mobile_settings`, `workspace_chrome_os_settings`, `workspace_groups_settings`, `azure_ad_audit_settings`, `symantec_event_export_settings`, `qualys_vm_settings`, `pan_prisma_cloud_settings`, `gcs_settings`, `http_settings`, `sftp_settings`, `amazon_s3_settings`, `azure_blob_store_settings`, `amazon_sqs_settings`, `google_cloud_identity_devices_settings`, `google_cloud_identity_device_users_settings`, `crowdstrike_detects_settings`, `mandiant_ioc_settings`, `sentinelone_alert_settings`, `qualys_scan_settings`, `pubsub_settings`, `amazon_kinesis_firehose_settings`, `webhook_settings`, `dummy_log_type_settings`, `https_push_google_cloud_pubsub_settings`, `https_push_amazon_kinesis_firehose_settings`, `https_push_webhook_settings`, `aws_ec2_hosts_settings`, `aws_ec2_instances_settings`, `aws_ec2_vpcs_settings`, `aws_iam_settings`, `netskope_alert_v2_settings`, `gcs_v2_settings`, `amazon_s3_v2_settings`, `amazon_sqs_v2_settings`, `azure_event_hub_settings`, `trellix_hx_hosts_settings`, `azure_blob_store_v2_settings`, `trellix_hx_alerts_settings`, `google_cloud_storage_event_driven_settings`, `crowdstrike_alerts_settings`, `trellix_hx_bulk_acqs_settings`, `mimecast_mail_v2_settings`, `threat_connect_ioc_v3_settings`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
599
|
+
# @!attribute [rw] feed_source_type
|
|
600
|
+
# @return [::Google::Cloud::Chronicle::V1::FeedDetails::FeedSourceType]
|
|
601
|
+
# Source Type of the feed.
|
|
602
|
+
# @!attribute [rw] log_type
|
|
603
|
+
# @return [::String]
|
|
604
|
+
# LogType.
|
|
605
|
+
# Format:
|
|
606
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/logTypes/\\{log_type}
|
|
607
|
+
# @!attribute [rw] asset_namespace
|
|
608
|
+
# @return [::String]
|
|
609
|
+
# The asset namespace to apply to all logs ingested through this feed.
|
|
610
|
+
# @!attribute [rw] labels
|
|
611
|
+
# @return [::Google::Protobuf::Map{::String => ::String}]
|
|
612
|
+
# The ingestion metadata labels to apply to all logs ingested through this
|
|
613
|
+
# feed, and the resulting normalized data.
|
|
614
|
+
# @!attribute [rw] sts_migration_readiness
|
|
615
|
+
# @return [::Google::Cloud::Chronicle::V1::FeedDetails::STSMigrationReadiness]
|
|
616
|
+
# Optional. The status of the feed's migration to STS.
|
|
617
|
+
# @!attribute [rw] last_v2_migration_attempt_time
|
|
618
|
+
# @return [::Google::Protobuf::Timestamp]
|
|
619
|
+
# Optional. The time of the last attempt to migrate the feed to STS V2.
|
|
620
|
+
class FeedDetails
|
|
621
|
+
include ::Google::Protobuf::MessageExts
|
|
622
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
623
|
+
|
|
624
|
+
# @!attribute [rw] key
|
|
625
|
+
# @return [::String]
|
|
626
|
+
# @!attribute [rw] value
|
|
627
|
+
# @return [::String]
|
|
628
|
+
class LabelsEntry
|
|
629
|
+
include ::Google::Protobuf::MessageExts
|
|
630
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
631
|
+
end
|
|
632
|
+
|
|
633
|
+
# Different types of feed sources.
|
|
634
|
+
module FeedSourceType
|
|
635
|
+
# Unspecified feed source type.
|
|
636
|
+
FEED_SOURCE_TYPE_UNSPECIFIED = 0
|
|
637
|
+
|
|
638
|
+
# Cloud Storage.
|
|
639
|
+
GOOGLE_CLOUD_STORAGE = 1
|
|
640
|
+
|
|
641
|
+
# HTTP.
|
|
642
|
+
HTTP = 2
|
|
643
|
+
|
|
644
|
+
# SFTP.
|
|
645
|
+
SFTP = 3
|
|
646
|
+
|
|
647
|
+
# S3.
|
|
648
|
+
AMAZON_S3 = 4
|
|
649
|
+
|
|
650
|
+
# Azure Blobstore.
|
|
651
|
+
AZURE_BLOBSTORE = 5
|
|
652
|
+
|
|
653
|
+
# API.
|
|
654
|
+
API = 6
|
|
655
|
+
|
|
656
|
+
# SQS.
|
|
657
|
+
AMAZON_SQS = 7
|
|
658
|
+
|
|
659
|
+
# Pub/Sub.
|
|
660
|
+
PUBSUB = 8
|
|
661
|
+
|
|
662
|
+
# AMAZON_KINESIS_FIREHOSE.
|
|
663
|
+
AMAZON_KINESIS_FIREHOSE = 9
|
|
664
|
+
|
|
665
|
+
# WEBHOOK.
|
|
666
|
+
WEBHOOK = 10
|
|
667
|
+
|
|
668
|
+
# HTTPS GCloud Pub/Sub.
|
|
669
|
+
HTTPS_PUSH_GOOGLE_CLOUD_PUBSUB = 11
|
|
670
|
+
|
|
671
|
+
# HTTPS Amazon Kinesis Firehose.
|
|
672
|
+
HTTPS_PUSH_AMAZON_KINESIS_FIREHOSE = 12
|
|
673
|
+
|
|
674
|
+
# HTTPS Webhook.
|
|
675
|
+
HTTPS_PUSH_WEBHOOK = 13
|
|
676
|
+
|
|
677
|
+
# Microsoft Azure native ingestion for event hub.
|
|
678
|
+
AZURE_EVENT_HUB = 17
|
|
679
|
+
|
|
680
|
+
# Google Cloud Storage Feed backed by Omniflow STS
|
|
681
|
+
GOOGLE_CLOUD_STORAGE_V2 = 18
|
|
682
|
+
|
|
683
|
+
# Amazon S3 Feed backed by Omniflow STS.
|
|
684
|
+
AMAZON_S3_V2 = 19
|
|
685
|
+
|
|
686
|
+
# Amazon SQS Feed backed by Omniflow STS.
|
|
687
|
+
AMAZON_SQS_V2 = 20
|
|
688
|
+
|
|
689
|
+
# Azure Blobstore Feed backed by Omniflow STS.
|
|
690
|
+
AZURE_BLOBSTORE_V2 = 21
|
|
691
|
+
|
|
692
|
+
# Google Cloud Storage Feed backed by Omniflow STS driven by pubsub events.
|
|
693
|
+
GOOGLE_CLOUD_STORAGE_EVENT_DRIVEN = 22
|
|
694
|
+
|
|
695
|
+
# A customized, declarative, configuration-driven connector for
|
|
696
|
+
# ingesting JSON data from third-party REST APIs.
|
|
697
|
+
CUSTOM_API = 23
|
|
698
|
+
end
|
|
699
|
+
|
|
700
|
+
# Whether the feed is ready for STS migration.
|
|
701
|
+
module STSMigrationReadiness
|
|
702
|
+
# Default value. This value is unused.
|
|
703
|
+
STS_MIGRATION_READINESS_UNSPECIFIED = 0
|
|
704
|
+
|
|
705
|
+
# The feed needs some work for STS migration.
|
|
706
|
+
NOT_READY = 1
|
|
707
|
+
|
|
708
|
+
# The feed is ready for STS migration.
|
|
709
|
+
READY = 2
|
|
710
|
+
|
|
711
|
+
# Need to recreate feed with updated auth.
|
|
712
|
+
AUTH_RECONFIG_REQUIRED = 3
|
|
713
|
+
end
|
|
714
|
+
end
|
|
715
|
+
|
|
716
|
+
# Settings required by Feeds of DummyLogType(used for testing purposes).
|
|
717
|
+
# @!attribute [rw] authentication
|
|
718
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
719
|
+
# Input only. Authentication.
|
|
720
|
+
# @!attribute [rw] api_endpoint
|
|
721
|
+
# @return [::String]
|
|
722
|
+
# Full API Endpoint.
|
|
723
|
+
class DummyLogTypeSettings
|
|
724
|
+
include ::Google::Protobuf::MessageExts
|
|
725
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
726
|
+
end
|
|
727
|
+
|
|
728
|
+
# Settings required by Google Cloud Platform Pub/Sub Feeds(HTTPS-Push V2).
|
|
729
|
+
# @!attribute [rw] split_delimiter
|
|
730
|
+
# @return [::String]
|
|
731
|
+
# Optional. Delimiter to split on for the feed.
|
|
732
|
+
class HttpsPushGoogleCloudPubSubSettings
|
|
733
|
+
include ::Google::Protobuf::MessageExts
|
|
734
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
735
|
+
end
|
|
736
|
+
|
|
737
|
+
# Settings required by Amazon Kinesis Firehose Feeds(HTTPS-Push V2).
|
|
738
|
+
# @!attribute [rw] split_delimiter
|
|
739
|
+
# @return [::String]
|
|
740
|
+
# Optional. Delimiter to split on for the feed.
|
|
741
|
+
class HttpsPushAmazonKinesisFirehoseSettings
|
|
742
|
+
include ::Google::Protobuf::MessageExts
|
|
743
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
744
|
+
end
|
|
745
|
+
|
|
746
|
+
# Settings required by Webhook Feeds(HTTPS-Push V2).
|
|
747
|
+
# @!attribute [rw] split_delimiter
|
|
748
|
+
# @return [::String]
|
|
749
|
+
# Optional. Delimiter to split on for the feed.
|
|
750
|
+
class HttpsPushWebhookSettings
|
|
751
|
+
include ::Google::Protobuf::MessageExts
|
|
752
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
753
|
+
end
|
|
754
|
+
|
|
755
|
+
# SentinelOne Alert settings.
|
|
756
|
+
# @!attribute [rw] authentication
|
|
757
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
758
|
+
# Input only. Authentication.
|
|
759
|
+
# @!attribute [rw] hostname
|
|
760
|
+
# @return [::String]
|
|
761
|
+
# Hostname of SentinelOne alert settings.
|
|
762
|
+
# @!attribute [rw] initial_start_time
|
|
763
|
+
# @return [::String]
|
|
764
|
+
# initialStartTime from when to fetch the alerts
|
|
765
|
+
# @!attribute [rw] is_alert_api_subscribed
|
|
766
|
+
# @return [::Boolean]
|
|
767
|
+
# Is the customer subscribed to Alerts Api
|
|
768
|
+
class SentineloneAlertSettings
|
|
769
|
+
include ::Google::Protobuf::MessageExts
|
|
770
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
771
|
+
end
|
|
772
|
+
|
|
773
|
+
# Qualys Scan settings.
|
|
774
|
+
# @!attribute [rw] authentication
|
|
775
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
776
|
+
# Input only. Authentication
|
|
777
|
+
# @!attribute [rw] hostname
|
|
778
|
+
# @return [::String]
|
|
779
|
+
# Hostname.
|
|
780
|
+
# @!attribute [rw] api_type
|
|
781
|
+
# @return [::Google::Cloud::Chronicle::V1::QualysScanSettings::ApiType]
|
|
782
|
+
# Supported Qualys Scan api type.
|
|
783
|
+
class QualysScanSettings
|
|
784
|
+
include ::Google::Protobuf::MessageExts
|
|
785
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
786
|
+
|
|
787
|
+
# API Type
|
|
788
|
+
module ApiType
|
|
789
|
+
# Unspecified API Type
|
|
790
|
+
API_TYPE_UNSPECIFIED = 0
|
|
791
|
+
|
|
792
|
+
# Scan Summaries
|
|
793
|
+
SCAN_SUMMARY_OUTPUT = 1
|
|
794
|
+
|
|
795
|
+
# Scan Compliance
|
|
796
|
+
SCAN_COMPLIANCE_OUTPUT = 2
|
|
797
|
+
|
|
798
|
+
# Scan Compliance Control
|
|
799
|
+
SCAN_COMPLIANCE_CONTROL_OUTPUT = 3
|
|
800
|
+
end
|
|
801
|
+
end
|
|
802
|
+
|
|
803
|
+
# Settings required by Google Cloud Pub/Sub Feeds(HTTP-Push).
|
|
804
|
+
# @!attribute [rw] google_service_account_email
|
|
805
|
+
# @return [::String]
|
|
806
|
+
# Google Service Account Email.
|
|
807
|
+
class PubsubSettings
|
|
808
|
+
include ::Google::Protobuf::MessageExts
|
|
809
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
810
|
+
end
|
|
811
|
+
|
|
812
|
+
# Settings required by Amazon Kinesis Firehose Feeds(HTTP-Push).
|
|
813
|
+
class AmazonKinesisFirehoseSettings
|
|
814
|
+
include ::Google::Protobuf::MessageExts
|
|
815
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
816
|
+
end
|
|
817
|
+
|
|
818
|
+
# Settings required by Webhook Feeds(HTTP-Push).
|
|
819
|
+
class WebhookSettings
|
|
820
|
+
include ::Google::Protobuf::MessageExts
|
|
821
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
822
|
+
end
|
|
823
|
+
|
|
824
|
+
# Amazon SQS settings.
|
|
825
|
+
# @!attribute [rw] region
|
|
826
|
+
# @return [::Google::Cloud::Chronicle::V1::S3Region]
|
|
827
|
+
# S3 Region.
|
|
828
|
+
# @!attribute [rw] queue
|
|
829
|
+
# @return [::String]
|
|
830
|
+
# Name of the queue.
|
|
831
|
+
# @!attribute [rw] account_number
|
|
832
|
+
# @return [::String]
|
|
833
|
+
# Account number of the owner of the queue.
|
|
834
|
+
# @!attribute [rw] authentication
|
|
835
|
+
# @return [::Google::Cloud::Chronicle::V1::SQSAuth]
|
|
836
|
+
# Input only. Authentication.
|
|
837
|
+
# @!attribute [rw] source_deletion_option
|
|
838
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOption]
|
|
839
|
+
# Source deletion option.
|
|
840
|
+
class AmazonSQSSettings
|
|
841
|
+
include ::Google::Protobuf::MessageExts
|
|
842
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
843
|
+
end
|
|
844
|
+
|
|
845
|
+
# Anomali IOC settings.
|
|
846
|
+
# @!attribute [rw] authentication
|
|
847
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
848
|
+
# Input only. Authentication.
|
|
849
|
+
# @!attribute [rw] hostname
|
|
850
|
+
# @return [::String]
|
|
851
|
+
# Optional. The hostname of the Anomali ThreatStream instance.
|
|
852
|
+
class AnomaliIocSettings
|
|
853
|
+
include ::Google::Protobuf::MessageExts
|
|
854
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
855
|
+
end
|
|
856
|
+
|
|
857
|
+
# Azure AD settings.
|
|
858
|
+
# @!attribute [rw] authentication
|
|
859
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftOAuthClientCredentials]
|
|
860
|
+
# Input only. Authentication.
|
|
861
|
+
# @!attribute [rw] tenant_id
|
|
862
|
+
# @return [::String]
|
|
863
|
+
# Tenant ID.
|
|
864
|
+
# @!attribute [rw] hostname
|
|
865
|
+
# @return [::String]
|
|
866
|
+
# API Hostname.
|
|
867
|
+
# @!attribute [rw] auth_endpoint
|
|
868
|
+
# @return [::String]
|
|
869
|
+
# API Auth Endpoint.
|
|
870
|
+
class AzureADSettings
|
|
871
|
+
include ::Google::Protobuf::MessageExts
|
|
872
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
873
|
+
end
|
|
874
|
+
|
|
875
|
+
# Azure AD Audit settings.
|
|
876
|
+
# @!attribute [rw] authentication
|
|
877
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftOAuthClientCredentials]
|
|
878
|
+
# Input only. Authentication.
|
|
879
|
+
# @!attribute [rw] tenant_id
|
|
880
|
+
# @return [::String]
|
|
881
|
+
# Tenant ID.
|
|
882
|
+
# @!attribute [rw] hostname
|
|
883
|
+
# @return [::String]
|
|
884
|
+
# API Hostname.
|
|
885
|
+
# @!attribute [rw] auth_endpoint
|
|
886
|
+
# @return [::String]
|
|
887
|
+
# API Auth Endpoint.
|
|
888
|
+
class AzureADAuditSettings
|
|
889
|
+
include ::Google::Protobuf::MessageExts
|
|
890
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
891
|
+
end
|
|
892
|
+
|
|
893
|
+
# Azure AD Context settings.
|
|
894
|
+
# @!attribute [rw] authentication
|
|
895
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftOAuthClientCredentials]
|
|
896
|
+
# Input only. Authentication.
|
|
897
|
+
# @!attribute [rw] retrieve_devices
|
|
898
|
+
# @return [::Boolean]
|
|
899
|
+
# Whether to retrieve device information in user context.
|
|
900
|
+
# @!attribute [rw] retrieve_groups
|
|
901
|
+
# @return [::Boolean]
|
|
902
|
+
# Whether to retrieve group information in user context.
|
|
903
|
+
# @!attribute [rw] tenant_id
|
|
904
|
+
# @return [::String]
|
|
905
|
+
# Tenant ID.
|
|
906
|
+
# @!attribute [rw] hostname
|
|
907
|
+
# @return [::String]
|
|
908
|
+
# API Hostname.
|
|
909
|
+
# @!attribute [rw] auth_endpoint
|
|
910
|
+
# @return [::String]
|
|
911
|
+
# API Auth Endpoint.
|
|
912
|
+
class AzureADContextSettings
|
|
913
|
+
include ::Google::Protobuf::MessageExts
|
|
914
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
915
|
+
end
|
|
916
|
+
|
|
917
|
+
# CloudPassage settings.
|
|
918
|
+
# @!attribute [rw] authentication
|
|
919
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
920
|
+
# Input only. Authentication.
|
|
921
|
+
# @!attribute [rw] event_types
|
|
922
|
+
# @return [::Array<::String>]
|
|
923
|
+
# Event types filter for the events API.
|
|
924
|
+
class CloudPassageSettings
|
|
925
|
+
include ::Google::Protobuf::MessageExts
|
|
926
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
927
|
+
end
|
|
928
|
+
|
|
929
|
+
# PAN Cortex XDR settings.
|
|
930
|
+
# @!attribute [rw] authentication
|
|
931
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
932
|
+
# Input only. Authentication.
|
|
933
|
+
# @!attribute [rw] hostname
|
|
934
|
+
# @return [::String]
|
|
935
|
+
# API Hostname.
|
|
936
|
+
# @!attribute [rw] endpoint
|
|
937
|
+
# @return [::String]
|
|
938
|
+
# API Endpoint.
|
|
939
|
+
class CortexXDRSettings
|
|
940
|
+
include ::Google::Protobuf::MessageExts
|
|
941
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
942
|
+
end
|
|
943
|
+
|
|
944
|
+
# CrowdStrike Detects settings.
|
|
945
|
+
# @!attribute [rw] authentication
|
|
946
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthClientCredentials]
|
|
947
|
+
# Input only. OAuthClientCredentials.
|
|
948
|
+
# @!attribute [rw] hostname
|
|
949
|
+
# @return [::String]
|
|
950
|
+
# API Hostname.
|
|
951
|
+
# @!attribute [rw] ingestion_type
|
|
952
|
+
# @return [::Google::Cloud::Chronicle::V1::CrowdStrikeDetectsSettings::IngestionType]
|
|
953
|
+
# Optional. Ingestion Type.
|
|
954
|
+
class CrowdStrikeDetectsSettings
|
|
955
|
+
include ::Google::Protobuf::MessageExts
|
|
956
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
957
|
+
|
|
958
|
+
# Ingestion Type.
|
|
959
|
+
module IngestionType
|
|
960
|
+
# For the feeds in which this field is not set
|
|
961
|
+
INGESTION_TYPE_UNSPECIFIED = 0
|
|
962
|
+
|
|
963
|
+
# Ingests only new detections to be ingested.
|
|
964
|
+
BRING_ONLY_NEW_DETECTIONS = 1
|
|
965
|
+
|
|
966
|
+
# Ingests both new as well as old detections which are updated
|
|
967
|
+
BRING_ALL_DETECTIONS = 2
|
|
968
|
+
end
|
|
969
|
+
end
|
|
970
|
+
|
|
971
|
+
# CrowdStrike Alerts settings.
|
|
972
|
+
# @!attribute [rw] authentication
|
|
973
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthClientCredentials]
|
|
974
|
+
# Required. OAuthClientCredentials.
|
|
975
|
+
# @!attribute [rw] hostname
|
|
976
|
+
# @return [::String]
|
|
977
|
+
# Required. API Hostname.
|
|
978
|
+
# @!attribute [rw] ingestion_type
|
|
979
|
+
# @return [::Google::Cloud::Chronicle::V1::CrowdStrikeAlertsSettings::IngestionType]
|
|
980
|
+
# Optional. Ingestion Type.
|
|
981
|
+
class CrowdStrikeAlertsSettings
|
|
982
|
+
include ::Google::Protobuf::MessageExts
|
|
983
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
984
|
+
|
|
985
|
+
# Ingestion Type.
|
|
986
|
+
module IngestionType
|
|
987
|
+
# For the feeds in which this field is not set
|
|
988
|
+
INGESTION_TYPE_UNSPECIFIED = 0
|
|
989
|
+
|
|
990
|
+
# Ingests both new as well as old alerts which are updated
|
|
991
|
+
BRING_ALL_ALERTS = 1
|
|
992
|
+
|
|
993
|
+
# Ingests only new alerts to be ingested.
|
|
994
|
+
BRING_ONLY_NEW_ALERTS = 2
|
|
995
|
+
end
|
|
996
|
+
end
|
|
997
|
+
|
|
998
|
+
# Duo Authentication settings.
|
|
999
|
+
# @!attribute [rw] authentication
|
|
1000
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1001
|
+
# Input only. Authentication.
|
|
1002
|
+
# @!attribute [rw] hostname
|
|
1003
|
+
# @return [::String]
|
|
1004
|
+
# API Hostname.
|
|
1005
|
+
class DuoAuthSettings
|
|
1006
|
+
include ::Google::Protobuf::MessageExts
|
|
1007
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1008
|
+
end
|
|
1009
|
+
|
|
1010
|
+
# Duo User Context settings.
|
|
1011
|
+
# @!attribute [rw] authentication
|
|
1012
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1013
|
+
# Input only. Authentication.
|
|
1014
|
+
# @!attribute [rw] hostname
|
|
1015
|
+
# @return [::String]
|
|
1016
|
+
# API hostname.
|
|
1017
|
+
class DuoUserContextSettings
|
|
1018
|
+
include ::Google::Protobuf::MessageExts
|
|
1019
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1020
|
+
end
|
|
1021
|
+
|
|
1022
|
+
# Microsoft Graph Alert settings.
|
|
1023
|
+
# @!attribute [rw] authentication
|
|
1024
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftOAuthClientCredentials]
|
|
1025
|
+
# Input only. Authentication.
|
|
1026
|
+
# @!attribute [rw] tenant_id
|
|
1027
|
+
# @return [::String]
|
|
1028
|
+
# Tenant ID.
|
|
1029
|
+
# @!attribute [rw] hostname
|
|
1030
|
+
# @return [::String]
|
|
1031
|
+
# API Hostname.
|
|
1032
|
+
# @!attribute [rw] auth_endpoint
|
|
1033
|
+
# @return [::String]
|
|
1034
|
+
# API Auth Endpoint.
|
|
1035
|
+
class MicrosoftGraphAlertSettings
|
|
1036
|
+
include ::Google::Protobuf::MessageExts
|
|
1037
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1038
|
+
end
|
|
1039
|
+
|
|
1040
|
+
# Microsoft Security Center alert settings.
|
|
1041
|
+
# @!attribute [rw] authentication
|
|
1042
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftOAuthClientCredentials]
|
|
1043
|
+
# Input only. Authentication.
|
|
1044
|
+
# @!attribute [rw] subscription_id
|
|
1045
|
+
# @return [::String]
|
|
1046
|
+
# Subscription ID of the Microsoft security center alert settings alert.
|
|
1047
|
+
# @!attribute [rw] tenant_id
|
|
1048
|
+
# @return [::String]
|
|
1049
|
+
# Tenant ID.
|
|
1050
|
+
# @!attribute [rw] hostname
|
|
1051
|
+
# @return [::String]
|
|
1052
|
+
# API Hostname.
|
|
1053
|
+
# @!attribute [rw] auth_endpoint
|
|
1054
|
+
# @return [::String]
|
|
1055
|
+
# API Auth Endpoint.
|
|
1056
|
+
class MicrosoftSecurityCenterAlertSettings
|
|
1057
|
+
include ::Google::Protobuf::MessageExts
|
|
1058
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1059
|
+
end
|
|
1060
|
+
|
|
1061
|
+
# Mimecast Mail settings.
|
|
1062
|
+
# @!attribute [rw] authentication
|
|
1063
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1064
|
+
# Input only. Authentication.
|
|
1065
|
+
# @!attribute [rw] hostname
|
|
1066
|
+
# @return [::String]
|
|
1067
|
+
# API Hostname.
|
|
1068
|
+
class MimecastMailSettings
|
|
1069
|
+
include ::Google::Protobuf::MessageExts
|
|
1070
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1071
|
+
end
|
|
1072
|
+
|
|
1073
|
+
# Mimecast Mail V2 Settings.
|
|
1074
|
+
# @!attribute [rw] auth_credentials
|
|
1075
|
+
# @return [::Google::Cloud::Chronicle::V1::MimecastV2OAuthClientCredentials]
|
|
1076
|
+
# Required. Mimecast OAuthClientCredentials.
|
|
1077
|
+
class MimecastMailV2Settings
|
|
1078
|
+
include ::Google::Protobuf::MessageExts
|
|
1079
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1080
|
+
end
|
|
1081
|
+
|
|
1082
|
+
# Office 365 settings.
|
|
1083
|
+
# @!attribute [rw] authentication
|
|
1084
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftOAuthClientCredentials]
|
|
1085
|
+
# Input only. Authentication.
|
|
1086
|
+
# @!attribute [rw] tenant_id
|
|
1087
|
+
# @return [::String]
|
|
1088
|
+
# Tenant ID.
|
|
1089
|
+
# @!attribute [rw] content_type
|
|
1090
|
+
# @return [::Google::Cloud::Chronicle::V1::Office365Settings::ContentType]
|
|
1091
|
+
# Supported office 365 content type.
|
|
1092
|
+
# @!attribute [rw] hostname
|
|
1093
|
+
# @return [::String]
|
|
1094
|
+
# API Hostname.
|
|
1095
|
+
# @!attribute [rw] auth_endpoint
|
|
1096
|
+
# @return [::String]
|
|
1097
|
+
# API Auth Endpoint.
|
|
1098
|
+
class Office365Settings
|
|
1099
|
+
include ::Google::Protobuf::MessageExts
|
|
1100
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1101
|
+
|
|
1102
|
+
# Office 365 supported content types:
|
|
1103
|
+
# https://docs.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference#working-with-the-office-365-management-activity-api
|
|
1104
|
+
module ContentType
|
|
1105
|
+
# Unspecified content type.
|
|
1106
|
+
CONTENT_TYPE_UNSPECIFIED = 0
|
|
1107
|
+
|
|
1108
|
+
# Audit.AzureActiveDirectory.
|
|
1109
|
+
AUDIT_AZURE_ACTIVE_DIRECTORY = 1
|
|
1110
|
+
|
|
1111
|
+
# Audit.Exchange.
|
|
1112
|
+
AUDIT_EXCHANGE = 2
|
|
1113
|
+
|
|
1114
|
+
# Audit.SharePoint.
|
|
1115
|
+
AUDIT_SHARE_POINT = 3
|
|
1116
|
+
|
|
1117
|
+
# Audit.General.
|
|
1118
|
+
AUDIT_GENERAL = 4
|
|
1119
|
+
|
|
1120
|
+
# DLP.All.
|
|
1121
|
+
DLP_ALL = 5
|
|
1122
|
+
end
|
|
1123
|
+
end
|
|
1124
|
+
|
|
1125
|
+
# Proofpoint Mail settings.
|
|
1126
|
+
# @!attribute [rw] authentication
|
|
1127
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1128
|
+
# Input only. Authentication.
|
|
1129
|
+
class ProofpointMailSettings
|
|
1130
|
+
include ::Google::Protobuf::MessageExts
|
|
1131
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1132
|
+
end
|
|
1133
|
+
|
|
1134
|
+
# Proofpoint On-demand settings.
|
|
1135
|
+
# @!attribute [rw] authentication
|
|
1136
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1137
|
+
# Input only. Authentication.
|
|
1138
|
+
# @!attribute [rw] cluster_id
|
|
1139
|
+
# @return [::String]
|
|
1140
|
+
# Cluster ID.
|
|
1141
|
+
class ProofpointOnDemandSettings
|
|
1142
|
+
include ::Google::Protobuf::MessageExts
|
|
1143
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1144
|
+
end
|
|
1145
|
+
|
|
1146
|
+
# Recorded Future IOC settings.
|
|
1147
|
+
# @!attribute [rw] authentication
|
|
1148
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1149
|
+
# Input only. Authentication.
|
|
1150
|
+
class RecordedFutureIocSettings
|
|
1151
|
+
include ::Google::Protobuf::MessageExts
|
|
1152
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1153
|
+
end
|
|
1154
|
+
|
|
1155
|
+
# Workday settings.
|
|
1156
|
+
# @!attribute [rw] authentication
|
|
1157
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkdayAuth]
|
|
1158
|
+
# Input only. Authentication.
|
|
1159
|
+
# @!attribute [rw] hostname
|
|
1160
|
+
# @return [::String]
|
|
1161
|
+
# API Hostname.
|
|
1162
|
+
# @!attribute [rw] tenant_id
|
|
1163
|
+
# @return [::String]
|
|
1164
|
+
# Tenant ID.
|
|
1165
|
+
class WorkdaySettings
|
|
1166
|
+
include ::Google::Protobuf::MessageExts
|
|
1167
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1168
|
+
end
|
|
1169
|
+
|
|
1170
|
+
# PAN IOC settings.
|
|
1171
|
+
# @!attribute [rw] authentication
|
|
1172
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1173
|
+
# Input only. Authentication.
|
|
1174
|
+
# @!attribute [rw] feed_id
|
|
1175
|
+
# @return [::String]
|
|
1176
|
+
# PAN IOC feed ID.
|
|
1177
|
+
# @!attribute [rw] feed
|
|
1178
|
+
# @return [::String]
|
|
1179
|
+
# PAN IOC feed name.
|
|
1180
|
+
class PanIocSettings
|
|
1181
|
+
include ::Google::Protobuf::MessageExts
|
|
1182
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1183
|
+
end
|
|
1184
|
+
|
|
1185
|
+
# Okta settings.
|
|
1186
|
+
# @!attribute [rw] authentication
|
|
1187
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1188
|
+
# Input only. Authentication.
|
|
1189
|
+
# @!attribute [rw] hostname
|
|
1190
|
+
# @return [::String]
|
|
1191
|
+
# API Hostname.
|
|
1192
|
+
class OktaSettings
|
|
1193
|
+
include ::Google::Protobuf::MessageExts
|
|
1194
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1195
|
+
end
|
|
1196
|
+
|
|
1197
|
+
# Okta user context settings.
|
|
1198
|
+
# @!attribute [rw] authentication
|
|
1199
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1200
|
+
# Input only. Authentication.
|
|
1201
|
+
# @!attribute [rw] hostname
|
|
1202
|
+
# @return [::String]
|
|
1203
|
+
# API Hostname.
|
|
1204
|
+
# @!attribute [rw] manager_id_reference_field
|
|
1205
|
+
# @return [::String]
|
|
1206
|
+
# Manager id reference field.
|
|
1207
|
+
class OktaUserContextSettings
|
|
1208
|
+
include ::Google::Protobuf::MessageExts
|
|
1209
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1210
|
+
end
|
|
1211
|
+
|
|
1212
|
+
# Fox-IT STIX settings.
|
|
1213
|
+
# @!attribute [rw] authentication
|
|
1214
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1215
|
+
# Input only. Authentication.
|
|
1216
|
+
# @!attribute [rw] ssl
|
|
1217
|
+
# @return [::Google::Cloud::Chronicle::V1::SSLClientKeypair]
|
|
1218
|
+
# SSL client key pair.
|
|
1219
|
+
# @!attribute [rw] poll_service_uri
|
|
1220
|
+
# @return [::String]
|
|
1221
|
+
# TAXII poll service URI.
|
|
1222
|
+
# @!attribute [rw] collection
|
|
1223
|
+
# @return [::String]
|
|
1224
|
+
# Collection available at the poll service.
|
|
1225
|
+
class FoxITStixSettings
|
|
1226
|
+
include ::Google::Protobuf::MessageExts
|
|
1227
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1228
|
+
end
|
|
1229
|
+
|
|
1230
|
+
# ThreatConnect IOC Settings.
|
|
1231
|
+
# @!attribute [rw] authentication
|
|
1232
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1233
|
+
# Input only. Authentication.
|
|
1234
|
+
# @!attribute [rw] hostname
|
|
1235
|
+
# @return [::String]
|
|
1236
|
+
# API Hostname.
|
|
1237
|
+
# @!attribute [rw] owners
|
|
1238
|
+
# @return [::Array<::String>]
|
|
1239
|
+
# Owners.
|
|
1240
|
+
class ThreatConnectIoCSettings
|
|
1241
|
+
include ::Google::Protobuf::MessageExts
|
|
1242
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1243
|
+
end
|
|
1244
|
+
|
|
1245
|
+
# ThreatConnectIoCV3Settings
|
|
1246
|
+
# @!attribute [rw] authentication
|
|
1247
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1248
|
+
# Required. Input only. UsernameSecretAuth.
|
|
1249
|
+
# @!attribute [rw] hostname
|
|
1250
|
+
# @return [::String]
|
|
1251
|
+
# Required. hostname.
|
|
1252
|
+
# @!attribute [rw] owners
|
|
1253
|
+
# @return [::Array<::String>]
|
|
1254
|
+
# Required. Owners.
|
|
1255
|
+
# @!attribute [rw] tql_query
|
|
1256
|
+
# @return [::String]
|
|
1257
|
+
# Optional. ThreatConnect Query Language filter.
|
|
1258
|
+
# @!attribute [rw] fields
|
|
1259
|
+
# @return [::Array<::String>]
|
|
1260
|
+
# Optional. Fields
|
|
1261
|
+
# @!attribute [rw] schedule
|
|
1262
|
+
# @return [::Integer]
|
|
1263
|
+
# Optional. Schedule
|
|
1264
|
+
class ThreatConnectIoCV3Settings
|
|
1265
|
+
include ::Google::Protobuf::MessageExts
|
|
1266
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1267
|
+
end
|
|
1268
|
+
|
|
1269
|
+
# ServiceNow CMDB settings.
|
|
1270
|
+
# @!attribute [rw] authentication
|
|
1271
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1272
|
+
# Input only. Authentication.
|
|
1273
|
+
# @!attribute [rw] hostname
|
|
1274
|
+
# @return [::String]
|
|
1275
|
+
# API Hostname.
|
|
1276
|
+
# @!attribute [rw] feedname
|
|
1277
|
+
# @return [::String]
|
|
1278
|
+
# Feedname.
|
|
1279
|
+
class ServiceNowCMDBSettings
|
|
1280
|
+
include ::Google::Protobuf::MessageExts
|
|
1281
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1282
|
+
end
|
|
1283
|
+
|
|
1284
|
+
# Imperva WAF settings.
|
|
1285
|
+
# @!attribute [rw] authentication
|
|
1286
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1287
|
+
# Input only. Authentication.
|
|
1288
|
+
class ImpervaWAFSettings
|
|
1289
|
+
include ::Google::Protobuf::MessageExts
|
|
1290
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1291
|
+
end
|
|
1292
|
+
|
|
1293
|
+
# Thinkst Canary settings.
|
|
1294
|
+
# @!attribute [rw] authentication
|
|
1295
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1296
|
+
# Input only. Authentication.
|
|
1297
|
+
# @!attribute [rw] hostname
|
|
1298
|
+
# @return [::String]
|
|
1299
|
+
# API Hostname.
|
|
1300
|
+
class ThinkstCanarySettings
|
|
1301
|
+
include ::Google::Protobuf::MessageExts
|
|
1302
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1303
|
+
end
|
|
1304
|
+
|
|
1305
|
+
# RH-ISAC settings.
|
|
1306
|
+
# @!attribute [rw] authentication
|
|
1307
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthClientCredentials]
|
|
1308
|
+
# Input only. Authentication.
|
|
1309
|
+
class RHIsacIocSettings
|
|
1310
|
+
include ::Google::Protobuf::MessageExts
|
|
1311
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1312
|
+
end
|
|
1313
|
+
|
|
1314
|
+
# Rapid7 Insight settings.
|
|
1315
|
+
# @!attribute [rw] authentication
|
|
1316
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1317
|
+
# Input only. Authentication.
|
|
1318
|
+
# @!attribute [rw] endpoint
|
|
1319
|
+
# @return [::String]
|
|
1320
|
+
# Rapid7 API endpoint. Should be "vulnerabilities" or "assets".
|
|
1321
|
+
# @!attribute [rw] hostname
|
|
1322
|
+
# @return [::String]
|
|
1323
|
+
# API Hostname.
|
|
1324
|
+
class Rapid7InsightSettings
|
|
1325
|
+
include ::Google::Protobuf::MessageExts
|
|
1326
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1327
|
+
end
|
|
1328
|
+
|
|
1329
|
+
# Salesforce settings.
|
|
1330
|
+
# @!attribute [rw] oauth_password_grant_auth
|
|
1331
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthPasswordGrantCredentials]
|
|
1332
|
+
# Input only. OAuthPasswordGrantCredentials auth.
|
|
1333
|
+
#
|
|
1334
|
+
# Note: The following fields are mutually exclusive: `oauth_password_grant_auth`, `oauth_jwt_credentials`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
1335
|
+
# @!attribute [rw] oauth_jwt_credentials
|
|
1336
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1337
|
+
# Input only. OAuthJWTCredentials auth.
|
|
1338
|
+
#
|
|
1339
|
+
# Note: The following fields are mutually exclusive: `oauth_jwt_credentials`, `oauth_password_grant_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
1340
|
+
# @!attribute [rw] hostname
|
|
1341
|
+
# @return [::String]
|
|
1342
|
+
# API hostname.
|
|
1343
|
+
class SalesforceSettings
|
|
1344
|
+
include ::Google::Protobuf::MessageExts
|
|
1345
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1346
|
+
end
|
|
1347
|
+
|
|
1348
|
+
# Mandiant IOC settings.
|
|
1349
|
+
# @!attribute [rw] authentication
|
|
1350
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1351
|
+
# Input only. Authentication.
|
|
1352
|
+
# @!attribute [rw] start_time
|
|
1353
|
+
# @return [::Google::Protobuf::Timestamp]
|
|
1354
|
+
# time since when to start fetching the IOCs
|
|
1355
|
+
class MandiantIoCSettings
|
|
1356
|
+
include ::Google::Protobuf::MessageExts
|
|
1357
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1358
|
+
end
|
|
1359
|
+
|
|
1360
|
+
# Netskope Alert settings.
|
|
1361
|
+
# @!attribute [rw] authentication
|
|
1362
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1363
|
+
# Input only. Authentication.
|
|
1364
|
+
# @!attribute [rw] hostname
|
|
1365
|
+
# @return [::String]
|
|
1366
|
+
# API Hostname.
|
|
1367
|
+
# @!attribute [rw] feedname
|
|
1368
|
+
# @return [::String]
|
|
1369
|
+
# Feedname.
|
|
1370
|
+
# @!attribute [rw] content_type
|
|
1371
|
+
# @return [::String]
|
|
1372
|
+
# Content type.
|
|
1373
|
+
class NetskopeAlertSettings
|
|
1374
|
+
include ::Google::Protobuf::MessageExts
|
|
1375
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1376
|
+
end
|
|
1377
|
+
|
|
1378
|
+
# Netskope Alert V2 settings.
|
|
1379
|
+
# @!attribute [rw] authentication
|
|
1380
|
+
# @return [::Google::Cloud::Chronicle::V1::HttpHeaderAuth]
|
|
1381
|
+
# Input only. Authentication.
|
|
1382
|
+
# @!attribute [rw] hostname
|
|
1383
|
+
# @return [::String]
|
|
1384
|
+
# API Hostname.
|
|
1385
|
+
# @!attribute [rw] content_category
|
|
1386
|
+
# @return [::String]
|
|
1387
|
+
# Content Category.
|
|
1388
|
+
# @!attribute [rw] content_types
|
|
1389
|
+
# @return [::Array<::String>]
|
|
1390
|
+
# Content type.
|
|
1391
|
+
class NetskopeAlertV2Settings
|
|
1392
|
+
include ::Google::Protobuf::MessageExts
|
|
1393
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1394
|
+
end
|
|
1395
|
+
|
|
1396
|
+
# Azure MDM Intune settings.
|
|
1397
|
+
# @!attribute [rw] authentication
|
|
1398
|
+
# @return [::Google::Cloud::Chronicle::V1::MicrosoftOAuthClientCredentials]
|
|
1399
|
+
# Input only. Authentication.
|
|
1400
|
+
# @!attribute [rw] tenant_id
|
|
1401
|
+
# @return [::String]
|
|
1402
|
+
# Tenant ID.
|
|
1403
|
+
# @!attribute [rw] hostname
|
|
1404
|
+
# @return [::String]
|
|
1405
|
+
# API Hostname.
|
|
1406
|
+
# @!attribute [rw] auth_endpoint
|
|
1407
|
+
# @return [::String]
|
|
1408
|
+
# API Auth Endpoint.
|
|
1409
|
+
class AzureMDMIntuneSettings
|
|
1410
|
+
include ::Google::Protobuf::MessageExts
|
|
1411
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1412
|
+
end
|
|
1413
|
+
|
|
1414
|
+
# Workspace Users settings.
|
|
1415
|
+
# @!attribute [rw] authentication
|
|
1416
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1417
|
+
# Input only. Authentication.
|
|
1418
|
+
# @!attribute [rw] workspace_customer_id
|
|
1419
|
+
# @return [::String]
|
|
1420
|
+
# Customer ID.
|
|
1421
|
+
# @!attribute [rw] projection_type
|
|
1422
|
+
# @return [::Google::Cloud::Chronicle::V1::WorkspaceUsersSettings::ProjectionType]
|
|
1423
|
+
# Optional. Projection Type.
|
|
1424
|
+
class WorkspaceUsersSettings
|
|
1425
|
+
include ::Google::Protobuf::MessageExts
|
|
1426
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1427
|
+
|
|
1428
|
+
# Projection Type.
|
|
1429
|
+
module ProjectionType
|
|
1430
|
+
# For the feeds in which this field is not set.
|
|
1431
|
+
PROJECTION_TYPE_UNSPECIFIED = 0
|
|
1432
|
+
|
|
1433
|
+
# Do not include any custom fields for the user.
|
|
1434
|
+
BASIC_PROJECTION = 1
|
|
1435
|
+
|
|
1436
|
+
# Include both basic and custom fields associated with this user.
|
|
1437
|
+
FULL_PROJECTION = 2
|
|
1438
|
+
end
|
|
1439
|
+
end
|
|
1440
|
+
|
|
1441
|
+
# Workspace Activity settings.
|
|
1442
|
+
# @!attribute [rw] authentication
|
|
1443
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1444
|
+
# Input only. Authentication.
|
|
1445
|
+
# @!attribute [rw] workspace_customer_id
|
|
1446
|
+
# @return [::String]
|
|
1447
|
+
# Customer ID.
|
|
1448
|
+
# @!attribute [rw] applications
|
|
1449
|
+
# @return [::Array<::String>]
|
|
1450
|
+
# Applications.
|
|
1451
|
+
class WorkspaceActivitySettings
|
|
1452
|
+
include ::Google::Protobuf::MessageExts
|
|
1453
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1454
|
+
end
|
|
1455
|
+
|
|
1456
|
+
# Workspace Alert settings.
|
|
1457
|
+
# @!attribute [rw] authentication
|
|
1458
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1459
|
+
# Input only. Authentication.
|
|
1460
|
+
# @!attribute [rw] workspace_customer_id
|
|
1461
|
+
# @return [::String]
|
|
1462
|
+
# Customer ID.
|
|
1463
|
+
class WorkspaceAlertsSettings
|
|
1464
|
+
include ::Google::Protobuf::MessageExts
|
|
1465
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1466
|
+
end
|
|
1467
|
+
|
|
1468
|
+
# Workspace Privileges settings.
|
|
1469
|
+
# @!attribute [rw] authentication
|
|
1470
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1471
|
+
# Input only. Authentication.
|
|
1472
|
+
# @!attribute [rw] workspace_customer_id
|
|
1473
|
+
# @return [::String]
|
|
1474
|
+
# Customer ID.
|
|
1475
|
+
class WorkspacePrivilegesSettings
|
|
1476
|
+
include ::Google::Protobuf::MessageExts
|
|
1477
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1478
|
+
end
|
|
1479
|
+
|
|
1480
|
+
# Workspace Mobile settings.
|
|
1481
|
+
# @!attribute [rw] authentication
|
|
1482
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1483
|
+
# Input only. Authentication.
|
|
1484
|
+
# @!attribute [rw] workspace_customer_id
|
|
1485
|
+
# @return [::String]
|
|
1486
|
+
# Customer ID.
|
|
1487
|
+
class WorkspaceMobileSettings
|
|
1488
|
+
include ::Google::Protobuf::MessageExts
|
|
1489
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1490
|
+
end
|
|
1491
|
+
|
|
1492
|
+
# Workspace Chrome OS settings.
|
|
1493
|
+
# @!attribute [rw] authentication
|
|
1494
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1495
|
+
# Input only. Authentication.
|
|
1496
|
+
# @!attribute [rw] workspace_customer_id
|
|
1497
|
+
# @return [::String]
|
|
1498
|
+
# Customer ID.
|
|
1499
|
+
class WorkspaceChromeOSSettings
|
|
1500
|
+
include ::Google::Protobuf::MessageExts
|
|
1501
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1502
|
+
end
|
|
1503
|
+
|
|
1504
|
+
# Workspace Groups settings.
|
|
1505
|
+
# @!attribute [rw] authentication
|
|
1506
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1507
|
+
# Input only. Authentication.
|
|
1508
|
+
# @!attribute [rw] workspace_customer_id
|
|
1509
|
+
# @return [::String]
|
|
1510
|
+
# Customer ID.
|
|
1511
|
+
class WorkspaceGroupsSettings
|
|
1512
|
+
include ::Google::Protobuf::MessageExts
|
|
1513
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1514
|
+
end
|
|
1515
|
+
|
|
1516
|
+
# Google Cloud Identity Devices settings.
|
|
1517
|
+
# @!attribute [rw] authentication
|
|
1518
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1519
|
+
# Input only. Authentication
|
|
1520
|
+
# @!attribute [rw] api_version
|
|
1521
|
+
# @return [::String]
|
|
1522
|
+
# API Version
|
|
1523
|
+
class GoogleCloudIdentityDevicesSettings
|
|
1524
|
+
include ::Google::Protobuf::MessageExts
|
|
1525
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1526
|
+
end
|
|
1527
|
+
|
|
1528
|
+
# Google Cloud Identity Device Users settings.
|
|
1529
|
+
# @!attribute [rw] authentication
|
|
1530
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthJWTCredentials]
|
|
1531
|
+
# Input only. Authentication.
|
|
1532
|
+
class GoogleCloudIdentityDeviceUsersSettings
|
|
1533
|
+
include ::Google::Protobuf::MessageExts
|
|
1534
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1535
|
+
end
|
|
1536
|
+
|
|
1537
|
+
# Symantec Event Export settings.
|
|
1538
|
+
# @!attribute [rw] authentication
|
|
1539
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthRefreshToken]
|
|
1540
|
+
# Input only. Authentication.
|
|
1541
|
+
class SymantecEventExportSettings
|
|
1542
|
+
include ::Google::Protobuf::MessageExts
|
|
1543
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1544
|
+
end
|
|
1545
|
+
|
|
1546
|
+
# Qualys VM settings.
|
|
1547
|
+
# @!attribute [rw] authentication
|
|
1548
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1549
|
+
# Input only. Authentication.
|
|
1550
|
+
# @!attribute [rw] hostname
|
|
1551
|
+
# @return [::String]
|
|
1552
|
+
# API Hostname.
|
|
1553
|
+
class QualysVMSettings
|
|
1554
|
+
include ::Google::Protobuf::MessageExts
|
|
1555
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1556
|
+
end
|
|
1557
|
+
|
|
1558
|
+
# PAN Prisma Cloud settings.
|
|
1559
|
+
# @!attribute [rw] authentication
|
|
1560
|
+
# @return [::Google::Cloud::Chronicle::V1::PanPrismaAuth]
|
|
1561
|
+
# Input only. Authentication.
|
|
1562
|
+
# @!attribute [rw] hostname
|
|
1563
|
+
# @return [::String]
|
|
1564
|
+
# API Hostname.
|
|
1565
|
+
class PanPrismaCloudSettings
|
|
1566
|
+
include ::Google::Protobuf::MessageExts
|
|
1567
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1568
|
+
end
|
|
1569
|
+
|
|
1570
|
+
# SFTP settings.
|
|
1571
|
+
# @!attribute [rw] authentication
|
|
1572
|
+
# @return [::Google::Cloud::Chronicle::V1::SftpAuth]
|
|
1573
|
+
# Input only. Authentication.
|
|
1574
|
+
# @!attribute [rw] uri
|
|
1575
|
+
# @return [::String]
|
|
1576
|
+
# SFTP URI.
|
|
1577
|
+
# @!attribute [rw] source_type
|
|
1578
|
+
# @return [::Google::Cloud::Chronicle::V1::URISourceType]
|
|
1579
|
+
# The URI source type.
|
|
1580
|
+
# @!attribute [rw] source_deletion_option
|
|
1581
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOption]
|
|
1582
|
+
# Source deletion option.
|
|
1583
|
+
class SftpSettings
|
|
1584
|
+
include ::Google::Protobuf::MessageExts
|
|
1585
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1586
|
+
end
|
|
1587
|
+
|
|
1588
|
+
# Google Cloud Storage settings.
|
|
1589
|
+
# @!attribute [rw] bucket_uri
|
|
1590
|
+
# @return [::String]
|
|
1591
|
+
# Bucket URI.
|
|
1592
|
+
# @!attribute [rw] source_type
|
|
1593
|
+
# @return [::Google::Cloud::Chronicle::V1::URISourceType]
|
|
1594
|
+
# The URI source type.
|
|
1595
|
+
# @!attribute [rw] source_deletion_option
|
|
1596
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOption]
|
|
1597
|
+
# Source deletion option.
|
|
1598
|
+
# @!attribute [r] chronicle_service_account
|
|
1599
|
+
# @return [::String]
|
|
1600
|
+
# Output only. Service Account Chronicle will be using to pull data.
|
|
1601
|
+
class GoogleCloudStorageSettings
|
|
1602
|
+
include ::Google::Protobuf::MessageExts
|
|
1603
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1604
|
+
end
|
|
1605
|
+
|
|
1606
|
+
# HTTP settings.
|
|
1607
|
+
# @!attribute [rw] uri
|
|
1608
|
+
# @return [::String]
|
|
1609
|
+
# HTTP URI.
|
|
1610
|
+
# @!attribute [rw] source_type
|
|
1611
|
+
# @return [::Google::Cloud::Chronicle::V1::URISourceType]
|
|
1612
|
+
# The URI source type.
|
|
1613
|
+
# @!attribute [rw] source_deletion_option
|
|
1614
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOption]
|
|
1615
|
+
# Source deletion option.
|
|
1616
|
+
class HttpSettings
|
|
1617
|
+
include ::Google::Protobuf::MessageExts
|
|
1618
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1619
|
+
end
|
|
1620
|
+
|
|
1621
|
+
# Amazon S3 settings.
|
|
1622
|
+
# @!attribute [rw] authentication
|
|
1623
|
+
# @return [::Google::Cloud::Chronicle::V1::S3Auth]
|
|
1624
|
+
# Input only. Authentication.
|
|
1625
|
+
# @!attribute [rw] s3_uri
|
|
1626
|
+
# @return [::String]
|
|
1627
|
+
# S3 URI.
|
|
1628
|
+
# @!attribute [rw] source_type
|
|
1629
|
+
# @return [::Google::Cloud::Chronicle::V1::URISourceType]
|
|
1630
|
+
# The URI source type.
|
|
1631
|
+
# @!attribute [rw] source_deletion_option
|
|
1632
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOption]
|
|
1633
|
+
# Source deletion option.
|
|
1634
|
+
class AmazonS3Settings
|
|
1635
|
+
include ::Google::Protobuf::MessageExts
|
|
1636
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1637
|
+
end
|
|
1638
|
+
|
|
1639
|
+
# Azure Blob Storage settings.
|
|
1640
|
+
# @!attribute [rw] authentication
|
|
1641
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureAuth]
|
|
1642
|
+
# Input only. Authentication.
|
|
1643
|
+
# @!attribute [rw] azure_uri
|
|
1644
|
+
# @return [::String]
|
|
1645
|
+
# Azure URI.
|
|
1646
|
+
# @!attribute [rw] source_type
|
|
1647
|
+
# @return [::Google::Cloud::Chronicle::V1::URISourceType]
|
|
1648
|
+
# The URI source type.
|
|
1649
|
+
# @!attribute [rw] source_deletion_option
|
|
1650
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOption]
|
|
1651
|
+
# Source deletion option.
|
|
1652
|
+
class AzureBlobStoreSettings
|
|
1653
|
+
include ::Google::Protobuf::MessageExts
|
|
1654
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1655
|
+
end
|
|
1656
|
+
|
|
1657
|
+
# AWS EC2 Hosts Settings.
|
|
1658
|
+
# @!attribute [rw] authentication
|
|
1659
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1660
|
+
# Input only. UsernameSecretAuth.
|
|
1661
|
+
class AWSEC2HostsSettings
|
|
1662
|
+
include ::Google::Protobuf::MessageExts
|
|
1663
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1664
|
+
end
|
|
1665
|
+
|
|
1666
|
+
# AWS EC2 Instances Settings.
|
|
1667
|
+
# @!attribute [rw] authentication
|
|
1668
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1669
|
+
# Input only. UsernameSecretAuth.
|
|
1670
|
+
class AWSEC2InstancesSettings
|
|
1671
|
+
include ::Google::Protobuf::MessageExts
|
|
1672
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1673
|
+
end
|
|
1674
|
+
|
|
1675
|
+
# AWS EC2 Vpcs Settings.
|
|
1676
|
+
# @!attribute [rw] authentication
|
|
1677
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1678
|
+
# Input only. UsernameSecretAuth.
|
|
1679
|
+
class AWSEC2VpcsSettings
|
|
1680
|
+
include ::Google::Protobuf::MessageExts
|
|
1681
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1682
|
+
end
|
|
1683
|
+
|
|
1684
|
+
# AWSIAMSettings contains details needed for creating an AWS IAM feed.
|
|
1685
|
+
# @!attribute [rw] authentication
|
|
1686
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
1687
|
+
# Input only. Authentication
|
|
1688
|
+
# @!attribute [rw] api_type
|
|
1689
|
+
# @return [::Google::Cloud::Chronicle::V1::AWSIAMSettings::ApiType]
|
|
1690
|
+
# Supported AWS IAM api type.
|
|
1691
|
+
class AWSIAMSettings
|
|
1692
|
+
include ::Google::Protobuf::MessageExts
|
|
1693
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1694
|
+
|
|
1695
|
+
# API Type
|
|
1696
|
+
module ApiType
|
|
1697
|
+
# API Type Unspecified
|
|
1698
|
+
API_TYPE_UNSPECIFIED = 0
|
|
1699
|
+
|
|
1700
|
+
# Users.
|
|
1701
|
+
USERS = 1
|
|
1702
|
+
|
|
1703
|
+
# Roles.
|
|
1704
|
+
ROLES = 2
|
|
1705
|
+
|
|
1706
|
+
# Groups.
|
|
1707
|
+
GROUPS = 3
|
|
1708
|
+
end
|
|
1709
|
+
end
|
|
1710
|
+
|
|
1711
|
+
# Azure auth.
|
|
1712
|
+
# @!attribute [rw] shared_key
|
|
1713
|
+
# @return [::String]
|
|
1714
|
+
# Shared Key.
|
|
1715
|
+
#
|
|
1716
|
+
# Note: The following fields are mutually exclusive: `shared_key`, `sas_token`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
1717
|
+
# @!attribute [rw] sas_token
|
|
1718
|
+
# @return [::String]
|
|
1719
|
+
# SAS Token.
|
|
1720
|
+
#
|
|
1721
|
+
# Note: The following fields are mutually exclusive: `sas_token`, `shared_key`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
1722
|
+
class AzureAuth
|
|
1723
|
+
include ::Google::Protobuf::MessageExts
|
|
1724
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1725
|
+
end
|
|
1726
|
+
|
|
1727
|
+
# Amazon SQS auth.
|
|
1728
|
+
# @!attribute [rw] sqs_access_key_secret_auth
|
|
1729
|
+
# @return [::Google::Cloud::Chronicle::V1::SQSAccessKeySecretAuth]
|
|
1730
|
+
# SQS access key secret auth.
|
|
1731
|
+
# @!attribute [rw] additional_s3_access_key_secret_auth
|
|
1732
|
+
# @return [::Google::Cloud::Chronicle::V1::AdditionalS3AccessKeySecretAuth]
|
|
1733
|
+
# Authentication for the S3 bucket referred to by the items in the SQS queue.
|
|
1734
|
+
# This is only required if it is different from the authentication for the
|
|
1735
|
+
# queue.
|
|
1736
|
+
class SQSAuth
|
|
1737
|
+
include ::Google::Protobuf::MessageExts
|
|
1738
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1739
|
+
end
|
|
1740
|
+
|
|
1741
|
+
# A message containing fields used to authenticate with Amazon SQS.
|
|
1742
|
+
# @!attribute [rw] sqs_v2_access_key_secret_auth
|
|
1743
|
+
# @return [::Google::Cloud::Chronicle::V1::SQSV2AccessKeySecretAuth]
|
|
1744
|
+
# Required. Auth key and secret for the SQS queue.
|
|
1745
|
+
#
|
|
1746
|
+
# Note: The following fields are mutually exclusive: `sqs_v2_access_key_secret_auth`, `aws_iam_role_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
1747
|
+
# @!attribute [rw] aws_iam_role_auth
|
|
1748
|
+
# @return [::Google::Cloud::Chronicle::V1::SQSV2AwsIamRoleAuth]
|
|
1749
|
+
# Required. AWS IAM Role for Identity Federation.
|
|
1750
|
+
#
|
|
1751
|
+
# Note: The following fields are mutually exclusive: `aws_iam_role_auth`, `sqs_v2_access_key_secret_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
1752
|
+
class SQSAuthV2
|
|
1753
|
+
include ::Google::Protobuf::MessageExts
|
|
1754
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1755
|
+
end
|
|
1756
|
+
|
|
1757
|
+
# AWS IAM Role Auth for SQS V2.
|
|
1758
|
+
# @!attribute [rw] aws_iam_role_arn
|
|
1759
|
+
# @return [::String]
|
|
1760
|
+
# AWS IAM Role for Identity Federation.
|
|
1761
|
+
# @!attribute [rw] subject_id
|
|
1762
|
+
# @return [::String]
|
|
1763
|
+
# Subject ID to use for SQS.
|
|
1764
|
+
class SQSV2AwsIamRoleAuth
|
|
1765
|
+
include ::Google::Protobuf::MessageExts
|
|
1766
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1767
|
+
end
|
|
1768
|
+
|
|
1769
|
+
# SQS V2 access key and secret auth.
|
|
1770
|
+
# @!attribute [rw] access_key_id
|
|
1771
|
+
# @return [::String]
|
|
1772
|
+
# Access key ID of the S3 bucket. Ex: AKIABCDEFGHIJKL.
|
|
1773
|
+
# @!attribute [rw] secret_access_key
|
|
1774
|
+
# @return [::String]
|
|
1775
|
+
# Secret access key to access the S3 bucket.
|
|
1776
|
+
class SQSV2AccessKeySecretAuth
|
|
1777
|
+
include ::Google::Protobuf::MessageExts
|
|
1778
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1779
|
+
end
|
|
1780
|
+
|
|
1781
|
+
# Amazon SQS access key and secret auth.
|
|
1782
|
+
# @!attribute [rw] access_key_id
|
|
1783
|
+
# @return [::String]
|
|
1784
|
+
# Access key ID.
|
|
1785
|
+
# @!attribute [rw] secret_access_key
|
|
1786
|
+
# @return [::String]
|
|
1787
|
+
# Secret access key.
|
|
1788
|
+
class SQSAccessKeySecretAuth
|
|
1789
|
+
include ::Google::Protobuf::MessageExts
|
|
1790
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1791
|
+
end
|
|
1792
|
+
|
|
1793
|
+
# Additional S3 access key secret auth.
|
|
1794
|
+
# @!attribute [rw] access_key_id
|
|
1795
|
+
# @return [::String]
|
|
1796
|
+
# Access key ID.
|
|
1797
|
+
# @!attribute [rw] secret_access_key
|
|
1798
|
+
# @return [::String]
|
|
1799
|
+
# Secret access key.
|
|
1800
|
+
class AdditionalS3AccessKeySecretAuth
|
|
1801
|
+
include ::Google::Protobuf::MessageExts
|
|
1802
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1803
|
+
end
|
|
1804
|
+
|
|
1805
|
+
# Amazon S3 auth.
|
|
1806
|
+
# @!attribute [rw] access_key_id
|
|
1807
|
+
# @return [::String]
|
|
1808
|
+
# Access key ID. Used when using access key auth.
|
|
1809
|
+
# @!attribute [rw] secret_access_key
|
|
1810
|
+
# @return [::String]
|
|
1811
|
+
# Secret access key. Used when using access key auth.
|
|
1812
|
+
# @!attribute [rw] client_id
|
|
1813
|
+
# @return [::String]
|
|
1814
|
+
# Client ID. Used when using OAuth auth.
|
|
1815
|
+
# @!attribute [rw] client_secret
|
|
1816
|
+
# @return [::String]
|
|
1817
|
+
# Client secret. Used when using OAuth auth.
|
|
1818
|
+
# @!attribute [rw] refresh_uri
|
|
1819
|
+
# @return [::String]
|
|
1820
|
+
# Refresh URI. Used when using OAuth auth.
|
|
1821
|
+
# @!attribute [rw] region
|
|
1822
|
+
# @return [::Google::Cloud::Chronicle::V1::S3Region]
|
|
1823
|
+
# S3 Region.
|
|
1824
|
+
class S3Auth
|
|
1825
|
+
include ::Google::Protobuf::MessageExts
|
|
1826
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1827
|
+
end
|
|
1828
|
+
|
|
1829
|
+
# OAuth 2.0 refresh token grant. See https://tools.ietf.org/html/rfc6749.
|
|
1830
|
+
# @!attribute [rw] token_endpoint
|
|
1831
|
+
# @return [::String]
|
|
1832
|
+
# Token endpoint to get the OAuth token from.
|
|
1833
|
+
# @!attribute [rw] client_id
|
|
1834
|
+
# @return [::String]
|
|
1835
|
+
# Client ID.
|
|
1836
|
+
# @!attribute [rw] client_secret
|
|
1837
|
+
# @return [::String]
|
|
1838
|
+
# Client secret.
|
|
1839
|
+
# @!attribute [rw] refresh_token
|
|
1840
|
+
# @return [::String]
|
|
1841
|
+
# Refresh token.
|
|
1842
|
+
class OAuthRefreshToken
|
|
1843
|
+
include ::Google::Protobuf::MessageExts
|
|
1844
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1845
|
+
end
|
|
1846
|
+
|
|
1847
|
+
# SFTP Auth.
|
|
1848
|
+
# @!attribute [rw] username
|
|
1849
|
+
# @return [::String]
|
|
1850
|
+
# Username. Used for username and password authentication.
|
|
1851
|
+
# @!attribute [rw] password
|
|
1852
|
+
# @return [::String]
|
|
1853
|
+
# Password. Used for username and password authentication.
|
|
1854
|
+
# @!attribute [rw] private_key
|
|
1855
|
+
# @return [::String]
|
|
1856
|
+
# Private key. Used for private key authentication.
|
|
1857
|
+
# @!attribute [rw] private_key_passphrase
|
|
1858
|
+
# @return [::String]
|
|
1859
|
+
# Private key passphrase. Used for private key authentication.
|
|
1860
|
+
class SftpAuth
|
|
1861
|
+
include ::Google::Protobuf::MessageExts
|
|
1862
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1863
|
+
end
|
|
1864
|
+
|
|
1865
|
+
# HTTP header based authentication.
|
|
1866
|
+
# @!attribute [rw] header_key_values
|
|
1867
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::HeaderKeyValue>]
|
|
1868
|
+
# Header key-value pairs.
|
|
1869
|
+
class HttpHeaderAuth
|
|
1870
|
+
include ::Google::Protobuf::MessageExts
|
|
1871
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1872
|
+
end
|
|
1873
|
+
|
|
1874
|
+
# Header key-value pairs.
|
|
1875
|
+
# @!attribute [rw] key
|
|
1876
|
+
# @return [::String]
|
|
1877
|
+
# Key.
|
|
1878
|
+
# @!attribute [rw] value
|
|
1879
|
+
# @return [::String]
|
|
1880
|
+
# Value.
|
|
1881
|
+
class HeaderKeyValue
|
|
1882
|
+
include ::Google::Protobuf::MessageExts
|
|
1883
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1884
|
+
end
|
|
1885
|
+
|
|
1886
|
+
# Info for username and secret based authentication.
|
|
1887
|
+
# @!attribute [rw] user
|
|
1888
|
+
# @return [::String]
|
|
1889
|
+
# Username of an identity used for authentication.
|
|
1890
|
+
# @!attribute [rw] secret
|
|
1891
|
+
# @return [::String]
|
|
1892
|
+
# Secret of the account identified by user_name.
|
|
1893
|
+
class UsernameSecretAuth
|
|
1894
|
+
include ::Google::Protobuf::MessageExts
|
|
1895
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1896
|
+
end
|
|
1897
|
+
|
|
1898
|
+
# Microsoft OAuth 2.0 client credentials grant.
|
|
1899
|
+
# @!attribute [rw] client_id
|
|
1900
|
+
# @return [::String]
|
|
1901
|
+
# Client ID.
|
|
1902
|
+
# @!attribute [rw] client_secret
|
|
1903
|
+
# @return [::String]
|
|
1904
|
+
# Client secret.
|
|
1905
|
+
class MicrosoftOAuthClientCredentials
|
|
1906
|
+
include ::Google::Protobuf::MessageExts
|
|
1907
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1908
|
+
end
|
|
1909
|
+
|
|
1910
|
+
# OAuth 2.0 client credentials grant. See https://tools.ietf.org/html/rfc6749.
|
|
1911
|
+
# @!attribute [rw] token_endpoint
|
|
1912
|
+
# @return [::String]
|
|
1913
|
+
# Token endpoint.
|
|
1914
|
+
# @!attribute [rw] client_id
|
|
1915
|
+
# @return [::String]
|
|
1916
|
+
# Client ID.
|
|
1917
|
+
# @!attribute [rw] client_secret
|
|
1918
|
+
# @return [::String]
|
|
1919
|
+
# Client secret.
|
|
1920
|
+
class OAuthClientCredentials
|
|
1921
|
+
include ::Google::Protobuf::MessageExts
|
|
1922
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1923
|
+
end
|
|
1924
|
+
|
|
1925
|
+
# OAuth 2.0 password grant. See https://tools.ietf.org/html/rfc6749.
|
|
1926
|
+
# @!attribute [rw] token_endpoint
|
|
1927
|
+
# @return [::String]
|
|
1928
|
+
# Token endpoint to get the OAuth token from.
|
|
1929
|
+
# @!attribute [rw] client_id
|
|
1930
|
+
# @return [::String]
|
|
1931
|
+
# Client ID.
|
|
1932
|
+
# @!attribute [rw] client_secret
|
|
1933
|
+
# @return [::String]
|
|
1934
|
+
# Client secret.
|
|
1935
|
+
# @!attribute [rw] user
|
|
1936
|
+
# @return [::String]
|
|
1937
|
+
# Username.
|
|
1938
|
+
# @!attribute [rw] password
|
|
1939
|
+
# @return [::String]
|
|
1940
|
+
# Password.
|
|
1941
|
+
class OAuthPasswordGrantCredentials
|
|
1942
|
+
include ::Google::Protobuf::MessageExts
|
|
1943
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1944
|
+
end
|
|
1945
|
+
|
|
1946
|
+
# PAN Prisma Cloud auth.
|
|
1947
|
+
# @!attribute [rw] user
|
|
1948
|
+
# @return [::String]
|
|
1949
|
+
# Username.
|
|
1950
|
+
# @!attribute [rw] password
|
|
1951
|
+
# @return [::String]
|
|
1952
|
+
# Password.
|
|
1953
|
+
class PanPrismaAuth
|
|
1954
|
+
include ::Google::Protobuf::MessageExts
|
|
1955
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1956
|
+
end
|
|
1957
|
+
|
|
1958
|
+
# OAuth 2.0 JWT grant. See, https://tools.ietf.org/html/rfc7519
|
|
1959
|
+
# @!attribute [rw] rs_credentials
|
|
1960
|
+
# @return [::Google::Cloud::Chronicle::V1::RSCredentials]
|
|
1961
|
+
# RS credentials.
|
|
1962
|
+
# @!attribute [rw] token_endpoint
|
|
1963
|
+
# @return [::String]
|
|
1964
|
+
# Token endpoint to get the OAuth token from.
|
|
1965
|
+
# @!attribute [rw] claims
|
|
1966
|
+
# @return [::Google::Cloud::Chronicle::V1::Claims]
|
|
1967
|
+
# Claims.
|
|
1968
|
+
class OAuthJWTCredentials
|
|
1969
|
+
include ::Google::Protobuf::MessageExts
|
|
1970
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1971
|
+
end
|
|
1972
|
+
|
|
1973
|
+
# RS credentials.
|
|
1974
|
+
# @!attribute [rw] private_key
|
|
1975
|
+
# @return [::String]
|
|
1976
|
+
# Private key in PEM format.
|
|
1977
|
+
class RSCredentials
|
|
1978
|
+
include ::Google::Protobuf::MessageExts
|
|
1979
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1980
|
+
end
|
|
1981
|
+
|
|
1982
|
+
# Claims identifying a specific customer.
|
|
1983
|
+
# @!attribute [rw] issuer
|
|
1984
|
+
# @return [::String]
|
|
1985
|
+
# Issuer. Usually the client_id.
|
|
1986
|
+
# @!attribute [rw] subject
|
|
1987
|
+
# @return [::String]
|
|
1988
|
+
# Subject. Usually the email.
|
|
1989
|
+
# @!attribute [rw] audience
|
|
1990
|
+
# @return [::String]
|
|
1991
|
+
# Audience.
|
|
1992
|
+
class Claims
|
|
1993
|
+
include ::Google::Protobuf::MessageExts
|
|
1994
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1995
|
+
end
|
|
1996
|
+
|
|
1997
|
+
# An SSL client certificate keypair.
|
|
1998
|
+
# @!attribute [rw] encoded_private_key
|
|
1999
|
+
# @return [::String]
|
|
2000
|
+
# The encoded private key. The string should be a private key in PEM format,
|
|
2001
|
+
# and should include the begin header and end footer lines. It may also
|
|
2002
|
+
# include newlines.
|
|
2003
|
+
#
|
|
2004
|
+
# Example:
|
|
2005
|
+
# -----BEGIN RSA PRIVATE KEY-----
|
|
2006
|
+
# Proc-Type: 4,ENCRYPTED
|
|
2007
|
+
# DEK-Info: DES-EDE3-CBC,F23074E02CF47304
|
|
2008
|
+
#
|
|
2009
|
+
# <REDACTED>
|
|
2010
|
+
# -----END RSA PRIVATE KEY-----
|
|
2011
|
+
# @!attribute [rw] ssl_certificate
|
|
2012
|
+
# @return [::String]
|
|
2013
|
+
# The encoded SSL certificate. The string should be an SSL certificate in
|
|
2014
|
+
# PEM format, and should include the begin header and end footer lines. It
|
|
2015
|
+
# may also include newlines.
|
|
2016
|
+
#
|
|
2017
|
+
# Example:
|
|
2018
|
+
# -----BEGIN CERTIFICATE-----
|
|
2019
|
+
# <REDACTED>
|
|
2020
|
+
# -----END CERTIFICATE-----
|
|
2021
|
+
class SSLClientKeypair
|
|
2022
|
+
include ::Google::Protobuf::MessageExts
|
|
2023
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2024
|
+
end
|
|
2025
|
+
|
|
2026
|
+
# Authentication for Workday.
|
|
2027
|
+
# @!attribute [rw] user
|
|
2028
|
+
# @return [::String]
|
|
2029
|
+
# Username. This is unused: Workday feeds were originally configured using a
|
|
2030
|
+
# username and secret authentication method, but only the secret field was
|
|
2031
|
+
# used, and it was used to supply the OAuth access token.
|
|
2032
|
+
# @!attribute [rw] secret
|
|
2033
|
+
# @return [::String]
|
|
2034
|
+
# The access token used to authenticate against Workday. This field is called
|
|
2035
|
+
# "secret" to maintain backwards compatibility. Workday was (only) configured
|
|
2036
|
+
# using username (which was unused) and secret (which is used as the access
|
|
2037
|
+
# token). Either this field or all of the other OAuth fields below must be
|
|
2038
|
+
# specified.
|
|
2039
|
+
# @!attribute [rw] token_endpoint
|
|
2040
|
+
# @return [::String]
|
|
2041
|
+
# Token endpoint to get the OAuth token from.
|
|
2042
|
+
# @!attribute [rw] client_id
|
|
2043
|
+
# @return [::String]
|
|
2044
|
+
# Client ID.
|
|
2045
|
+
# @!attribute [rw] client_secret
|
|
2046
|
+
# @return [::String]
|
|
2047
|
+
# Client Secret.
|
|
2048
|
+
# @!attribute [rw] refresh_token
|
|
2049
|
+
# @return [::String]
|
|
2050
|
+
# Refresh Token.
|
|
2051
|
+
class WorkdayAuth
|
|
2052
|
+
include ::Google::Protobuf::MessageExts
|
|
2053
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2054
|
+
end
|
|
2055
|
+
|
|
2056
|
+
# GoogleCloudStorageV2Settings is the settings proto for Omniflow Google Cloud
|
|
2057
|
+
# Storage feeds.
|
|
2058
|
+
# @!attribute [rw] bucket_uri
|
|
2059
|
+
# @return [::String]
|
|
2060
|
+
# Required. Google Cloud Storage Bucket URI for the feed.
|
|
2061
|
+
# @!attribute [rw] source_deletion_option
|
|
2062
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOptionV2]
|
|
2063
|
+
# Optional. Source deletion option determines if the data from the source is
|
|
2064
|
+
# to be deleted after ingestion.
|
|
2065
|
+
# @!attribute [r] chronicle_service_account
|
|
2066
|
+
# @return [::String]
|
|
2067
|
+
# Output only. SA that will read data, this is Storage Transfer Service SA of
|
|
2068
|
+
# Customer's Tenancy Project.
|
|
2069
|
+
# @!attribute [rw] max_lookback_days
|
|
2070
|
+
# @return [::Integer]
|
|
2071
|
+
# Optional. Maximum File Age to ingest in days.
|
|
2072
|
+
# @!attribute [rw] include_prefixes
|
|
2073
|
+
# @return [::Array<::String>]
|
|
2074
|
+
# Optional. Optional list of object prefixes to include.
|
|
2075
|
+
class GoogleCloudStorageV2Settings
|
|
2076
|
+
include ::Google::Protobuf::MessageExts
|
|
2077
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2078
|
+
end
|
|
2079
|
+
|
|
2080
|
+
# GoogleCloudStorageEventDrivenSettings is the settings proto for Omniflow
|
|
2081
|
+
# Google Cloud Storage feeds driven by pubsub events.
|
|
2082
|
+
# @!attribute [rw] bucket_uri
|
|
2083
|
+
# @return [::String]
|
|
2084
|
+
# Required. Google Cloud Storage Bucket URI for the feed.
|
|
2085
|
+
# @!attribute [rw] pubsub_subscription
|
|
2086
|
+
# @return [::String]
|
|
2087
|
+
# Required. Subscription name for pubsub topic.
|
|
2088
|
+
# @!attribute [rw] source_deletion_option
|
|
2089
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOptionV2]
|
|
2090
|
+
# Optional. Source deletion option determines if the data from the source is
|
|
2091
|
+
# to be deleted after ingestion.
|
|
2092
|
+
# @!attribute [r] chronicle_service_account
|
|
2093
|
+
# @return [::String]
|
|
2094
|
+
# Output only. SA that will read data, this is Storage Transfer Service SA of
|
|
2095
|
+
# Customer's Tenancy Project.
|
|
2096
|
+
# @!attribute [rw] max_lookback_days
|
|
2097
|
+
# @return [::Integer]
|
|
2098
|
+
# Optional. Maximum File Age to ingest in days.
|
|
2099
|
+
# @!attribute [rw] include_prefixes
|
|
2100
|
+
# @return [::Array<::String>]
|
|
2101
|
+
# Optional. Optional list of object prefixes to include.
|
|
2102
|
+
class GoogleCloudStorageEventDrivenSettings
|
|
2103
|
+
include ::Google::Protobuf::MessageExts
|
|
2104
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2105
|
+
end
|
|
2106
|
+
|
|
2107
|
+
# A message containing fields used to authenticate with Amazon S3.
|
|
2108
|
+
# @!attribute [rw] access_key_secret_auth
|
|
2109
|
+
# @return [::Google::Cloud::Chronicle::V1::S3V2AccessKeySecretAuth]
|
|
2110
|
+
# Access Key ID and Secret Access Key for an AWS account.
|
|
2111
|
+
#
|
|
2112
|
+
# Note: The following fields are mutually exclusive: `access_key_secret_auth`, `aws_iam_role_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2113
|
+
# @!attribute [rw] aws_iam_role_auth
|
|
2114
|
+
# @return [::Google::Cloud::Chronicle::V1::S3V2AwsIamRoleAuth]
|
|
2115
|
+
# AWS IAM Role Auth for Identity Federation.
|
|
2116
|
+
#
|
|
2117
|
+
# Note: The following fields are mutually exclusive: `aws_iam_role_auth`, `access_key_secret_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2118
|
+
class S3AuthV2
|
|
2119
|
+
include ::Google::Protobuf::MessageExts
|
|
2120
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2121
|
+
end
|
|
2122
|
+
|
|
2123
|
+
# AWS IAM Role Auth for S3 V2.
|
|
2124
|
+
# @!attribute [rw] aws_iam_role_arn
|
|
2125
|
+
# @return [::String]
|
|
2126
|
+
# AWS IAM Role for Identity Federation.
|
|
2127
|
+
# @!attribute [rw] subject_id
|
|
2128
|
+
# @return [::String]
|
|
2129
|
+
# Subject ID to use for S3.
|
|
2130
|
+
class S3V2AwsIamRoleAuth
|
|
2131
|
+
include ::Google::Protobuf::MessageExts
|
|
2132
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2133
|
+
end
|
|
2134
|
+
|
|
2135
|
+
# S3 V2 access key and secret auth.
|
|
2136
|
+
# @!attribute [rw] access_key_id
|
|
2137
|
+
# @return [::String]
|
|
2138
|
+
# Required. Access Key ID for an AWS account (a 20-character, alphanumeric
|
|
2139
|
+
# string).
|
|
2140
|
+
# @!attribute [rw] secret_access_key
|
|
2141
|
+
# @return [::String]
|
|
2142
|
+
# Required. Secret Access Key for an AWS account (a 40-character string).
|
|
2143
|
+
class S3V2AccessKeySecretAuth
|
|
2144
|
+
include ::Google::Protobuf::MessageExts
|
|
2145
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2146
|
+
end
|
|
2147
|
+
|
|
2148
|
+
# AmazonS3V2Settings is the settings proto for Omniflow S3 feeds.
|
|
2149
|
+
# @!attribute [rw] authentication
|
|
2150
|
+
# @return [::Google::Cloud::Chronicle::V1::S3AuthV2]
|
|
2151
|
+
# Required. Authentication.
|
|
2152
|
+
# @!attribute [rw] s3_uri
|
|
2153
|
+
# @return [::String]
|
|
2154
|
+
# Required. S3 URI.
|
|
2155
|
+
# @!attribute [rw] source_deletion_option
|
|
2156
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOptionV2]
|
|
2157
|
+
# Optional. Source deletion option.
|
|
2158
|
+
# @!attribute [rw] max_lookback_days
|
|
2159
|
+
# @return [::Integer]
|
|
2160
|
+
# Optional. Maximum File Age to ingest in days.
|
|
2161
|
+
# @!attribute [r] chronicle_service_account
|
|
2162
|
+
# @return [::String]
|
|
2163
|
+
# Output only. SA that will read data, this is Storage Transfer Service SA of
|
|
2164
|
+
# Customer's Tenancy Project.
|
|
2165
|
+
# @!attribute [rw] include_prefixes
|
|
2166
|
+
# @return [::Array<::String>]
|
|
2167
|
+
# Optional. Optional list of object prefixes to include.
|
|
2168
|
+
class AmazonS3V2Settings
|
|
2169
|
+
include ::Google::Protobuf::MessageExts
|
|
2170
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2171
|
+
end
|
|
2172
|
+
|
|
2173
|
+
# Info for MssoAuthentication using a username, password, and login api
|
|
2174
|
+
# endpoint.
|
|
2175
|
+
# @!attribute [rw] username
|
|
2176
|
+
# @return [::String]
|
|
2177
|
+
# Required. Username for MSSO authentication.
|
|
2178
|
+
# There are no restrictions on the format of the username. It has no default,
|
|
2179
|
+
# specifically enforced min / max length or character set. The username
|
|
2180
|
+
# will have been provided by an MSSO administrator and it is assumed that
|
|
2181
|
+
# they have provided a username that is internally consistent with MSSO
|
|
2182
|
+
# authentication requirements / validation.
|
|
2183
|
+
# @!attribute [rw] password
|
|
2184
|
+
# @return [::String]
|
|
2185
|
+
# Required. Password of the account identified by username.
|
|
2186
|
+
# There are no restrictions on the format of the password. It has no default,
|
|
2187
|
+
# specifically enforced min / max length or character set. The password
|
|
2188
|
+
# will have been provided by an MSSO administrator and it is assumed that
|
|
2189
|
+
# they have provided a password that is internally consistent with MSSO
|
|
2190
|
+
# authentication requirements / validation.
|
|
2191
|
+
# @!attribute [rw] api_endpoint
|
|
2192
|
+
# @return [::String]
|
|
2193
|
+
# Required. The login api endpoint url.
|
|
2194
|
+
# This must be a valid URL with an http or https scheme. It has no default.
|
|
2195
|
+
class MssoAuthentication
|
|
2196
|
+
include ::Google::Protobuf::MessageExts
|
|
2197
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2198
|
+
end
|
|
2199
|
+
|
|
2200
|
+
# OAuth 2.0 client credentials grant. See https://tools.ietf.org/html/rfc6749.
|
|
2201
|
+
# @!attribute [rw] client_id
|
|
2202
|
+
# @return [::String]
|
|
2203
|
+
# Required. Client ID.
|
|
2204
|
+
# @!attribute [rw] client_secret
|
|
2205
|
+
# @return [::String]
|
|
2206
|
+
# Required. Client Secret.
|
|
2207
|
+
class MimecastV2OAuthClientCredentials
|
|
2208
|
+
include ::Google::Protobuf::MessageExts
|
|
2209
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2210
|
+
end
|
|
2211
|
+
|
|
2212
|
+
# Settings for TrellixIAMAuthentication.
|
|
2213
|
+
# @!attribute [rw] client_id
|
|
2214
|
+
# @return [::String]
|
|
2215
|
+
# Required. Client ID generated in Trellix IAM.
|
|
2216
|
+
# This is a unique identifier for the user that is generated in Trellix IAM.
|
|
2217
|
+
# It has no default, specifically enforced min / max length or character set.
|
|
2218
|
+
# It is assumed that the Client ID generated in Trellix IAM is internally
|
|
2219
|
+
# consistent with Trellix IAM authentication requirements / validation.
|
|
2220
|
+
# @!attribute [rw] client_secret
|
|
2221
|
+
# @return [::String]
|
|
2222
|
+
# Required. Secret associated with the Client ID.
|
|
2223
|
+
# This is the secret generated in Trellix IAM for the Client ID. It has no
|
|
2224
|
+
# default, specifically enforced min / max length or character set. It is
|
|
2225
|
+
# assumed that the secret generated in Trellix IAM is internally
|
|
2226
|
+
# consistent with Trellix IAM authentication requirements / validation.
|
|
2227
|
+
# @!attribute [rw] scope
|
|
2228
|
+
# @return [::String]
|
|
2229
|
+
# Required. OAUTH 2 scope to request for the authentication token.
|
|
2230
|
+
# This is the OAUTH 2 scope to request for the authentication token. It has
|
|
2231
|
+
# no default, specifically enforced min / max length or character set. It is
|
|
2232
|
+
# assumed that the scope provided is internally consistent with Trellix IAM
|
|
2233
|
+
# authentication requirements / validation.
|
|
2234
|
+
class TrellixIAMAuthentication
|
|
2235
|
+
include ::Google::Protobuf::MessageExts
|
|
2236
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2237
|
+
end
|
|
2238
|
+
|
|
2239
|
+
# Info for TrellixLocalAuthentication using a username, password, endpoint,
|
|
2240
|
+
# and header name.
|
|
2241
|
+
# @!attribute [rw] username
|
|
2242
|
+
# @return [::String]
|
|
2243
|
+
# Required. Username for Trellix Local authentication.
|
|
2244
|
+
# This is a unique username for the user that is generated on a Trellix
|
|
2245
|
+
# device. It has no default, specifically enforced min / max length,
|
|
2246
|
+
# or character set.
|
|
2247
|
+
# @!attribute [rw] password
|
|
2248
|
+
# @return [::String]
|
|
2249
|
+
# Required. Password of the account identified by username.
|
|
2250
|
+
# There are no restrictions on the format of the password. It has no default,
|
|
2251
|
+
# specifically enforced min / max length or character set. The password
|
|
2252
|
+
# will have been provided by the Trellix administrator.
|
|
2253
|
+
# @!attribute [rw] token_endpoint
|
|
2254
|
+
# @return [::String]
|
|
2255
|
+
# Required. The endpoint to fetch the token from.
|
|
2256
|
+
# This must be a valid URL with an http or https scheme. It has no default.
|
|
2257
|
+
# @!attribute [rw] token_header
|
|
2258
|
+
# @return [::String]
|
|
2259
|
+
# Required. The HTTP header name to use for the token for authentcated
|
|
2260
|
+
# requests. It varies per Trellix product. Refer to the Trellix API
|
|
2261
|
+
# documentation for the correct value. It has no default.
|
|
2262
|
+
class TrellixLocalAuthentication
|
|
2263
|
+
include ::Google::Protobuf::MessageExts
|
|
2264
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2265
|
+
end
|
|
2266
|
+
|
|
2267
|
+
# TrellixStarXAuthentication contains a oneof with all of the authentication
|
|
2268
|
+
# types supported by Trellix *X devices.
|
|
2269
|
+
# @!attribute [rw] msso
|
|
2270
|
+
# @return [::Google::Cloud::Chronicle::V1::MssoAuthentication]
|
|
2271
|
+
# Input only. MssoAuthentication auth type.
|
|
2272
|
+
#
|
|
2273
|
+
# Note: The following fields are mutually exclusive: `msso`, `trellix_iam`, `trellix_local`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2274
|
+
# @!attribute [rw] trellix_iam
|
|
2275
|
+
# @return [::Google::Cloud::Chronicle::V1::TrellixIAMAuthentication]
|
|
2276
|
+
# Input only. TrellixIAMAuthentication auth type.
|
|
2277
|
+
#
|
|
2278
|
+
# Note: The following fields are mutually exclusive: `trellix_iam`, `msso`, `trellix_local`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2279
|
+
# @!attribute [rw] trellix_local
|
|
2280
|
+
# @return [::Google::Cloud::Chronicle::V1::TrellixLocalAuthentication]
|
|
2281
|
+
# Input only. TrellixLocalAuthentication auth type.
|
|
2282
|
+
#
|
|
2283
|
+
# Note: The following fields are mutually exclusive: `trellix_local`, `msso`, `trellix_iam`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2284
|
+
class TrellixStarXAuthentication
|
|
2285
|
+
include ::Google::Protobuf::MessageExts
|
|
2286
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2287
|
+
end
|
|
2288
|
+
|
|
2289
|
+
# Settings required by Feeds of TrellixHxHosts.
|
|
2290
|
+
# @!attribute [rw] authentication
|
|
2291
|
+
# @return [::Google::Cloud::Chronicle::V1::TrellixStarXAuthentication]
|
|
2292
|
+
# Required. Authentication.
|
|
2293
|
+
# @!attribute [rw] endpoint
|
|
2294
|
+
# @return [::String]
|
|
2295
|
+
# Required. Trellix HX Device URL.
|
|
2296
|
+
# This must be a valid URL with an http or https scheme. It has no default.
|
|
2297
|
+
# Usually a device URL is in the form of either:
|
|
2298
|
+
# https://xxx.trellix.com/hx/id/<hx id>/
|
|
2299
|
+
# - or -
|
|
2300
|
+
# https://htapdeviceproxy.md.mandiant.net/dphb/hx/<device uuid>/
|
|
2301
|
+
class TrellixHxHostsSettings
|
|
2302
|
+
include ::Google::Protobuf::MessageExts
|
|
2303
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2304
|
+
end
|
|
2305
|
+
|
|
2306
|
+
# Settings required by Feeds of TrellixHxAlerts.
|
|
2307
|
+
# @!attribute [rw] authentication
|
|
2308
|
+
# @return [::Google::Cloud::Chronicle::V1::TrellixStarXAuthentication]
|
|
2309
|
+
# Required. Authentication.
|
|
2310
|
+
# @!attribute [rw] endpoint
|
|
2311
|
+
# @return [::String]
|
|
2312
|
+
# Required. Trellix HX Device URL.
|
|
2313
|
+
# This must be a valid URL with an http or https scheme. It has no default.
|
|
2314
|
+
# Usually a device URL is in the form of either:
|
|
2315
|
+
# https://xxx.trellix.com/hx/id/<hx id>/
|
|
2316
|
+
# - or -
|
|
2317
|
+
# https://htapdeviceproxy.md.mandiant.net/dphb/hx/<device uuid>/
|
|
2318
|
+
class TrellixHxAlertsSettings
|
|
2319
|
+
include ::Google::Protobuf::MessageExts
|
|
2320
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2321
|
+
end
|
|
2322
|
+
|
|
2323
|
+
# Settings required by Feeds of TrellixHxBulkAcqs.
|
|
2324
|
+
# @!attribute [rw] authentication
|
|
2325
|
+
# @return [::Google::Cloud::Chronicle::V1::TrellixStarXAuthentication]
|
|
2326
|
+
# Required. Authentication.
|
|
2327
|
+
# @!attribute [rw] endpoint
|
|
2328
|
+
# @return [::String]
|
|
2329
|
+
# Required. Trellix HX Device URL.
|
|
2330
|
+
# This must be a valid URL with an http or https scheme. It has no default.
|
|
2331
|
+
# Usually a device URL is in the form of either:
|
|
2332
|
+
# https://xxx.trellix.com/hx/id/<hx id>/
|
|
2333
|
+
# - or -
|
|
2334
|
+
# https://htapdeviceproxy.md.mandiant.net/dphb/hx/<device uuid>/
|
|
2335
|
+
class TrellixHxBulkAcqsSettings
|
|
2336
|
+
include ::Google::Protobuf::MessageExts
|
|
2337
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2338
|
+
end
|
|
2339
|
+
|
|
2340
|
+
# Settings required by Azure Event Hub Feeds.
|
|
2341
|
+
# @!attribute [rw] name
|
|
2342
|
+
# @return [::String]
|
|
2343
|
+
# Required. Event hub to read from.
|
|
2344
|
+
# @!attribute [rw] consumer_group
|
|
2345
|
+
# @return [::String]
|
|
2346
|
+
# Required. Event hub consumer group to read from.
|
|
2347
|
+
# @!attribute [rw] event_hub_connection_string
|
|
2348
|
+
# @return [::String]
|
|
2349
|
+
# Required. Event hub connection string for authentication.
|
|
2350
|
+
# @!attribute [rw] azure_storage_connection_string
|
|
2351
|
+
# @return [::String]
|
|
2352
|
+
# Optional. Blob store connection string for authentication.
|
|
2353
|
+
# @!attribute [rw] azure_storage_container
|
|
2354
|
+
# @return [::String]
|
|
2355
|
+
# Optional. Blob storage container name.
|
|
2356
|
+
# @!attribute [rw] azure_sas_token
|
|
2357
|
+
# @return [::String]
|
|
2358
|
+
# Optional. SAS token
|
|
2359
|
+
# @!attribute [r] event_hub_namespace
|
|
2360
|
+
# @return [::String]
|
|
2361
|
+
# Output only. Event hub namespace
|
|
2362
|
+
class AzureEventHubSettings
|
|
2363
|
+
include ::Google::Protobuf::MessageExts
|
|
2364
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2365
|
+
end
|
|
2366
|
+
|
|
2367
|
+
# AmazonSQSV2Settings is the settings proto for Omniflow SQS feeds.
|
|
2368
|
+
# @!attribute [rw] queue
|
|
2369
|
+
# @return [::String]
|
|
2370
|
+
# Required. Amazon Resource Name(ARN) of the queue.
|
|
2371
|
+
# @!attribute [rw] s3_uri
|
|
2372
|
+
# @return [::String]
|
|
2373
|
+
# Required. S3 URI.
|
|
2374
|
+
# @!attribute [rw] authentication
|
|
2375
|
+
# @return [::Google::Cloud::Chronicle::V1::SQSAuthV2]
|
|
2376
|
+
# Required. Authentication.
|
|
2377
|
+
# @!attribute [rw] source_deletion_option
|
|
2378
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOptionV2]
|
|
2379
|
+
# Optional. Source deletion option.
|
|
2380
|
+
# @!attribute [rw] max_lookback_days
|
|
2381
|
+
# @return [::Integer]
|
|
2382
|
+
# Optional. Maximum File Age to ingest in days.
|
|
2383
|
+
# @!attribute [r] chronicle_service_account
|
|
2384
|
+
# @return [::String]
|
|
2385
|
+
# Output only. SA that will read data, this is Storage Transfer Service SA of
|
|
2386
|
+
# Customer's Tenancy Project.
|
|
2387
|
+
# @!attribute [rw] include_prefixes
|
|
2388
|
+
# @return [::Array<::String>]
|
|
2389
|
+
# Optional. Optional list of object prefixes to include.
|
|
2390
|
+
class AmazonSQSV2Settings
|
|
2391
|
+
include ::Google::Protobuf::MessageExts
|
|
2392
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2393
|
+
end
|
|
2394
|
+
|
|
2395
|
+
# AzureBlobStoreV2Settings is the settings proto for Azure Blob Storage feeds.
|
|
2396
|
+
# @!attribute [rw] azure_uri
|
|
2397
|
+
# @return [::String]
|
|
2398
|
+
# Required. Azure URI.
|
|
2399
|
+
# @!attribute [rw] authentication
|
|
2400
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureAuthV2]
|
|
2401
|
+
# Required. Authentication.
|
|
2402
|
+
# @!attribute [rw] source_deletion_option
|
|
2403
|
+
# @return [::Google::Cloud::Chronicle::V1::SourceDeletionOptionV2]
|
|
2404
|
+
# Optional. Source deletion option.
|
|
2405
|
+
# @!attribute [rw] max_lookback_days
|
|
2406
|
+
# @return [::Integer]
|
|
2407
|
+
# Optional. Maximum File Age to ingest in days.
|
|
2408
|
+
# @!attribute [r] chronicle_service_account
|
|
2409
|
+
# @return [::String]
|
|
2410
|
+
# Output only. SA that will read data, this is Storage Transfer Service SA of
|
|
2411
|
+
# Customer's Tenancy Project.
|
|
2412
|
+
# @!attribute [rw] include_prefixes
|
|
2413
|
+
# @return [::Array<::String>]
|
|
2414
|
+
# Optional. Optional list of object prefixes to include.
|
|
2415
|
+
class AzureBlobStoreV2Settings
|
|
2416
|
+
include ::Google::Protobuf::MessageExts
|
|
2417
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2418
|
+
end
|
|
2419
|
+
|
|
2420
|
+
# Azure V2 Workload Identity Federation.
|
|
2421
|
+
# @!attribute [rw] client_id
|
|
2422
|
+
# @return [::String]
|
|
2423
|
+
# Required. OAuth client ID.
|
|
2424
|
+
# @!attribute [rw] tenant_id
|
|
2425
|
+
# @return [::String]
|
|
2426
|
+
# Required. Tenant ID.
|
|
2427
|
+
# @!attribute [rw] subject_id
|
|
2428
|
+
# @return [::String]
|
|
2429
|
+
# Required. Subject ID of the Azure subscription.
|
|
2430
|
+
class AzureV2WorkloadIdentityFederation
|
|
2431
|
+
include ::Google::Protobuf::MessageExts
|
|
2432
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2433
|
+
end
|
|
2434
|
+
|
|
2435
|
+
# A message containing fields used to authenticate with Azure Blob Storage.
|
|
2436
|
+
# @!attribute [rw] access_key
|
|
2437
|
+
# @return [::String]
|
|
2438
|
+
# Required. Access Key also known as shared key.
|
|
2439
|
+
#
|
|
2440
|
+
# Note: The following fields are mutually exclusive: `access_key`, `sas_token`, `azure_v2_workload_identity_federation`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2441
|
+
# @!attribute [rw] sas_token
|
|
2442
|
+
# @return [::String]
|
|
2443
|
+
# Required. SAS Token.
|
|
2444
|
+
#
|
|
2445
|
+
# Note: The following fields are mutually exclusive: `sas_token`, `access_key`, `azure_v2_workload_identity_federation`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2446
|
+
# @!attribute [rw] azure_v2_workload_identity_federation
|
|
2447
|
+
# @return [::Google::Cloud::Chronicle::V1::AzureV2WorkloadIdentityFederation]
|
|
2448
|
+
# Required. Azure V2 Workload Identity Federation.
|
|
2449
|
+
#
|
|
2450
|
+
# Note: The following fields are mutually exclusive: `azure_v2_workload_identity_federation`, `access_key`, `sas_token`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2451
|
+
class AzureAuthV2
|
|
2452
|
+
include ::Google::Protobuf::MessageExts
|
|
2453
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2454
|
+
end
|
|
2455
|
+
|
|
2456
|
+
# Metadata that pertains to feed source types (see
|
|
2457
|
+
# Feed.FeedDetails.FeedSourceType) that is useful for building interfaces to
|
|
2458
|
+
# construct valid Feed messages.
|
|
2459
|
+
# @!attribute [rw] name
|
|
2460
|
+
# @return [::String]
|
|
2461
|
+
# The resource name for this FeedSourceTypeSchema.
|
|
2462
|
+
# Format:
|
|
2463
|
+
# "projects/\\{project}/locations/\\{location}/instances/\\{instance}/feedSourceTypeSchemas/\\{feed_source_type}".
|
|
2464
|
+
# @!attribute [rw] display_name
|
|
2465
|
+
# @return [::String]
|
|
2466
|
+
# A human-readable name for this feed source type.
|
|
2467
|
+
# @!attribute [rw] description
|
|
2468
|
+
# @return [::String]
|
|
2469
|
+
# A human-readable description for this feed source type.
|
|
2470
|
+
# @!attribute [rw] read_only
|
|
2471
|
+
# @return [::Boolean]
|
|
2472
|
+
# Whether feeds having this source type, while they are expected to exist,
|
|
2473
|
+
# should not be modified (created, edited, or deleted).
|
|
2474
|
+
# @!attribute [rw] feed_source_type
|
|
2475
|
+
# @return [::Google::Cloud::Chronicle::V1::FeedDetails::FeedSourceType]
|
|
2476
|
+
# The value to be used in the `details.feed_source_type` field in the Feed
|
|
2477
|
+
# message.
|
|
2478
|
+
class FeedSourceTypeSchema
|
|
2479
|
+
include ::Google::Protobuf::MessageExts
|
|
2480
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2481
|
+
end
|
|
2482
|
+
|
|
2483
|
+
# Metadata that pertains to a log type in the context of Feeds, and is useful
|
|
2484
|
+
# for building interfaces to construct valid Feed messages.
|
|
2485
|
+
# @!attribute [rw] name
|
|
2486
|
+
# @return [::String]
|
|
2487
|
+
# The resource name.
|
|
2488
|
+
# Format:
|
|
2489
|
+
# "projects/\\{project}/locations/\\{location}/instances/\\{instance}/feedSourceTypeSchemas/\\{feed_source_type}/logTypeSchemas/\\{log_type}"
|
|
2490
|
+
# @!attribute [rw] display_name
|
|
2491
|
+
# @return [::String]
|
|
2492
|
+
# A human-readable name for this log type.
|
|
2493
|
+
# @!attribute [rw] log_type
|
|
2494
|
+
# @return [::String]
|
|
2495
|
+
# The log type to be used in the `details.log_type` field.
|
|
2496
|
+
# @!attribute [rw] read_only
|
|
2497
|
+
# @return [::Boolean]
|
|
2498
|
+
# Whether this log type schema represents a feed configuration that may
|
|
2499
|
+
# exist, but should not be modified (created, edited, or deleted).
|
|
2500
|
+
# @!attribute [rw] supporting_documentation
|
|
2501
|
+
# @return [::String]
|
|
2502
|
+
# A description that is displayed when users create or edit feeds.
|
|
2503
|
+
# @!attribute [rw] details_field_schemas
|
|
2504
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::LogTypeSchema::DetailsFieldSchema>]
|
|
2505
|
+
# The schemas for `detail` fields that are compatible with this log
|
|
2506
|
+
# type and feed source type. All fields for this log type and feed source
|
|
2507
|
+
# type are either contained here or within
|
|
2508
|
+
# details_field_schema_alternatives.
|
|
2509
|
+
# @!attribute [rw] details_field_schema_alternatives
|
|
2510
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::LogTypeSchema::DetailsFieldSchemaAlternative>]
|
|
2511
|
+
# There are sets of fields which represent alternatives to one another. A
|
|
2512
|
+
# user would only fill in one set of fields for any one alternative.
|
|
2513
|
+
class LogTypeSchema
|
|
2514
|
+
include ::Google::Protobuf::MessageExts
|
|
2515
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2516
|
+
|
|
2517
|
+
# A collection of `details` field schema sets. The user must provide values
|
|
2518
|
+
# for only one set of fields within an alternative.
|
|
2519
|
+
# @!attribute [rw] details_field_schema_sets
|
|
2520
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::LogTypeSchema::DetailsFieldSchemaSet>]
|
|
2521
|
+
# The schemas for each alternative set of fields.
|
|
2522
|
+
class DetailsFieldSchemaAlternative
|
|
2523
|
+
include ::Google::Protobuf::MessageExts
|
|
2524
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2525
|
+
end
|
|
2526
|
+
|
|
2527
|
+
# A collection of schemas for related fields within `details`.
|
|
2528
|
+
# @!attribute [rw] display_name
|
|
2529
|
+
# @return [::String]
|
|
2530
|
+
# A human-readable name for this collection of `details` fields.
|
|
2531
|
+
# @!attribute [rw] description
|
|
2532
|
+
# @return [::String]
|
|
2533
|
+
# A human-readable description for this collection of `details` fields.
|
|
2534
|
+
# @!attribute [rw] details_field_schemas
|
|
2535
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::LogTypeSchema::DetailsFieldSchema>]
|
|
2536
|
+
# Schemas for the fields in this set.
|
|
2537
|
+
class DetailsFieldSchemaSet
|
|
2538
|
+
include ::Google::Protobuf::MessageExts
|
|
2539
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2540
|
+
end
|
|
2541
|
+
|
|
2542
|
+
# A schema for a particular `details` field on the Feed proto message.
|
|
2543
|
+
# @!attribute [rw] field_path
|
|
2544
|
+
# @return [::String]
|
|
2545
|
+
# The protocol buffer field path. For example,
|
|
2546
|
+
# "details.azure_ad_context_settings.authentication.token_endpoint".
|
|
2547
|
+
# @!attribute [rw] display_name
|
|
2548
|
+
# @return [::String]
|
|
2549
|
+
# A human-readable name for this field.
|
|
2550
|
+
# @!attribute [rw] description
|
|
2551
|
+
# @return [::String]
|
|
2552
|
+
# A human-readable description for this field.
|
|
2553
|
+
# @!attribute [rw] type
|
|
2554
|
+
# @return [::Google::Cloud::Chronicle::V1::SemanticType]
|
|
2555
|
+
# A type that represents both the encoding and the semantics of this field.
|
|
2556
|
+
# @!attribute [rw] enum_field_schemas
|
|
2557
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::LogTypeSchema::EnumFieldSchema>]
|
|
2558
|
+
# If a field has an enum type, this is the schema describing the possible
|
|
2559
|
+
# values.
|
|
2560
|
+
# @!attribute [rw] required
|
|
2561
|
+
# @return [::Boolean]
|
|
2562
|
+
# Whether this field must be specified to have a valid feed configuration.
|
|
2563
|
+
# @!attribute [rw] example_input
|
|
2564
|
+
# @return [::String]
|
|
2565
|
+
# For those fields with input requirements that aren't adequately expressed
|
|
2566
|
+
# by the SemanticType it is often useful to supply an example input.
|
|
2567
|
+
# @!attribute [rw] read_only
|
|
2568
|
+
# @return [::Boolean]
|
|
2569
|
+
# For those fields which are read only.
|
|
2570
|
+
class DetailsFieldSchema
|
|
2571
|
+
include ::Google::Protobuf::MessageExts
|
|
2572
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2573
|
+
end
|
|
2574
|
+
|
|
2575
|
+
# A schema for a particular value, for a particular enum `details` field on
|
|
2576
|
+
# the Feed proto message.
|
|
2577
|
+
# @!attribute [rw] value
|
|
2578
|
+
# @return [::String]
|
|
2579
|
+
# The value to assign to the field.
|
|
2580
|
+
# @!attribute [rw] display_name
|
|
2581
|
+
# @return [::String]
|
|
2582
|
+
# A human-readable name for this value.
|
|
2583
|
+
# @!attribute [rw] description
|
|
2584
|
+
# @return [::String]
|
|
2585
|
+
# A human-readable description for this value.
|
|
2586
|
+
class EnumFieldSchema
|
|
2587
|
+
include ::Google::Protobuf::MessageExts
|
|
2588
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2589
|
+
end
|
|
2590
|
+
end
|
|
2591
|
+
|
|
2592
|
+
# Request message for FetchServiceAccountForCustomer.
|
|
2593
|
+
# @!attribute [rw] parent
|
|
2594
|
+
# @return [::String]
|
|
2595
|
+
# Required. The parent resource where this FeedServiceAccount will be
|
|
2596
|
+
# created. Format:
|
|
2597
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}
|
|
2598
|
+
class FetchServiceAccountForCustomerRequest
|
|
2599
|
+
include ::Google::Protobuf::MessageExts
|
|
2600
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2601
|
+
end
|
|
2602
|
+
|
|
2603
|
+
# ListFeedSourceTypeSchemas request message. Note that Feed schemas do not
|
|
2604
|
+
# contain customer data, so are not scoped to a particular customer.
|
|
2605
|
+
# @!attribute [rw] parent
|
|
2606
|
+
# @return [::String]
|
|
2607
|
+
# Required. The parent, which owns this collection of FeedSourceTypeSchemas.
|
|
2608
|
+
# Format: projects/\\{project}/locations/\\{location}/instances/\\{instance}
|
|
2609
|
+
# @!attribute [rw] page_size
|
|
2610
|
+
# @return [::Integer]
|
|
2611
|
+
# The maximum number of FeedSourceTypeSchemas to return. The service may
|
|
2612
|
+
# return fewer than this value. If unspecified all FeedSourceTypeSchemas will
|
|
2613
|
+
# be returned, meaning one FeedSourceTypeSchema for each
|
|
2614
|
+
# FeedDetails.FeedSourceType.
|
|
2615
|
+
# The maximum value is 100; values above 100 will be coerced to 100.
|
|
2616
|
+
# @!attribute [rw] page_token
|
|
2617
|
+
# @return [::String]
|
|
2618
|
+
# A page token, received from a previous `ListFeedSourceTypeSchemas` call.
|
|
2619
|
+
# Provide this to retrieve the subsequent page.
|
|
2620
|
+
class ListFeedSourceTypeSchemasRequest
|
|
2621
|
+
include ::Google::Protobuf::MessageExts
|
|
2622
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2623
|
+
end
|
|
2624
|
+
|
|
2625
|
+
# ListFeedSourceTypeSchemas response message.
|
|
2626
|
+
# @!attribute [rw] feed_source_type_schemas
|
|
2627
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::FeedSourceTypeSchema>]
|
|
2628
|
+
# Schemas describing each FeedSourceType.
|
|
2629
|
+
# @!attribute [rw] next_page_token
|
|
2630
|
+
# @return [::String]
|
|
2631
|
+
# A token, which can be sent as `page_token` to retrieve the next page.
|
|
2632
|
+
# If this field is omitted, there are no subsequent pages.
|
|
2633
|
+
class ListFeedSourceTypeSchemasResponse
|
|
2634
|
+
include ::Google::Protobuf::MessageExts
|
|
2635
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2636
|
+
end
|
|
2637
|
+
|
|
2638
|
+
# ListLogTypeSchemas request message. Note that feed schemas do not contain
|
|
2639
|
+
# customer data, so are not scoped to a particular customer.
|
|
2640
|
+
# @!attribute [rw] parent
|
|
2641
|
+
# @return [::String]
|
|
2642
|
+
# Required. The parent, which owns this collection of LogTypeSchemas.
|
|
2643
|
+
# Format: Format:
|
|
2644
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feedSourceTypeSchemas/\\{feed_source_type}
|
|
2645
|
+
# @!attribute [rw] page_size
|
|
2646
|
+
# @return [::Integer]
|
|
2647
|
+
# The maximum number of LogTypeSchemas to return. The service may return
|
|
2648
|
+
# fewer than this value.
|
|
2649
|
+
# If unspecified, at most 5000 LogTypeSchemas will be returned.
|
|
2650
|
+
# The maximum value is 10000; values above 10000 will be coerced to 10000.
|
|
2651
|
+
# @!attribute [rw] page_token
|
|
2652
|
+
# @return [::String]
|
|
2653
|
+
# A page token, received from a previous `ListLogTypeSchemas` call. Provide
|
|
2654
|
+
# this to retrieve the subsequent page.
|
|
2655
|
+
class ListLogTypeSchemasRequest
|
|
2656
|
+
include ::Google::Protobuf::MessageExts
|
|
2657
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2658
|
+
end
|
|
2659
|
+
|
|
2660
|
+
# ListLogTypeSchemas response message.
|
|
2661
|
+
# @!attribute [rw] log_type_schemas
|
|
2662
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::LogTypeSchema>]
|
|
2663
|
+
# LogTypeSchemas.
|
|
2664
|
+
# @!attribute [rw] next_page_token
|
|
2665
|
+
# @return [::String]
|
|
2666
|
+
# A token, which can be sent as `page_token` to retrieve the next page.
|
|
2667
|
+
# If this field is omitted, there are no subsequent pages.
|
|
2668
|
+
class ListLogTypeSchemasResponse
|
|
2669
|
+
include ::Google::Protobuf::MessageExts
|
|
2670
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2671
|
+
end
|
|
2672
|
+
|
|
2673
|
+
# ImportPushLogsRequest request message.
|
|
2674
|
+
# @!attribute [rw] parent
|
|
2675
|
+
# @return [::String]
|
|
2676
|
+
# Required. The parent, which owns this collection of logs.
|
|
2677
|
+
# Format:
|
|
2678
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feeds/\\{feed}
|
|
2679
|
+
# @!attribute [rw] http_body
|
|
2680
|
+
# @return [::Google::Api::HttpBody]
|
|
2681
|
+
# Required. The raw HTTP body is bound to this field.
|
|
2682
|
+
# All log entries must be valid UTF-8. A single invalid event will cause the
|
|
2683
|
+
# entire request to be rejected.
|
|
2684
|
+
# @!attribute [rw] secret
|
|
2685
|
+
# @return [::String]
|
|
2686
|
+
# Immutable. The secret for the feed.
|
|
2687
|
+
class ImportPushLogsRequest
|
|
2688
|
+
include ::Google::Protobuf::MessageExts
|
|
2689
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2690
|
+
end
|
|
2691
|
+
|
|
2692
|
+
# Request message for UpdateFeed.
|
|
2693
|
+
# @!attribute [rw] feed
|
|
2694
|
+
# @return [::Google::Cloud::Chronicle::V1::Feed]
|
|
2695
|
+
# Required. Feed to update. Updates full feed object.
|
|
2696
|
+
# @!attribute [rw] update_mask
|
|
2697
|
+
# @return [::Google::Protobuf::FieldMask]
|
|
2698
|
+
# Optional. Specifies which fields to update. If empty, update the full feed.
|
|
2699
|
+
# To update the display name, pass only `displayName` and no other
|
|
2700
|
+
# fields. To update other fields, pass a comma-separated list of fields to
|
|
2701
|
+
# update and omit `displayName`. The update fails if an existing
|
|
2702
|
+
# `displayName` is sent in the update request.
|
|
2703
|
+
class UpdateFeedRequest
|
|
2704
|
+
include ::Google::Protobuf::MessageExts
|
|
2705
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2706
|
+
end
|
|
2707
|
+
|
|
2708
|
+
# Request message for ListFeed.
|
|
2709
|
+
# @!attribute [rw] parent
|
|
2710
|
+
# @return [::String]
|
|
2711
|
+
# Required. The parent resource where this Feed will be created.
|
|
2712
|
+
# Format: projects/\\{project}/locations/\\{location}/instances/\\{instance}
|
|
2713
|
+
# @!attribute [rw] page_size
|
|
2714
|
+
# @return [::Integer]
|
|
2715
|
+
# The maximum number of feeds to return. The service may return fewer than
|
|
2716
|
+
# this value.
|
|
2717
|
+
# If unspecified, at most 100 feeds will be returned.
|
|
2718
|
+
# The maximum value is 1000; values above 1000 will be coerced to 1000.
|
|
2719
|
+
# @!attribute [rw] page_token
|
|
2720
|
+
# @return [::String]
|
|
2721
|
+
# A page token, received from a previous `ListFeeds` call. Provide this to
|
|
2722
|
+
# retrieve the subsequent page.
|
|
2723
|
+
class ListFeedsRequest
|
|
2724
|
+
include ::Google::Protobuf::MessageExts
|
|
2725
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2726
|
+
end
|
|
2727
|
+
|
|
2728
|
+
# Response message for ListFeed.
|
|
2729
|
+
# @!attribute [rw] feeds
|
|
2730
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::Feed>]
|
|
2731
|
+
# List of feeds.
|
|
2732
|
+
# @!attribute [rw] next_page_token
|
|
2733
|
+
# @return [::String]
|
|
2734
|
+
# A token, which can be sent as `page_token` to retrieve the next page.
|
|
2735
|
+
# If this field is omitted, there are no subsequent pages.
|
|
2736
|
+
class ListFeedsResponse
|
|
2737
|
+
include ::Google::Protobuf::MessageExts
|
|
2738
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2739
|
+
end
|
|
2740
|
+
|
|
2741
|
+
# Request message for ListFeedPacks.
|
|
2742
|
+
# @!attribute [rw] parent
|
|
2743
|
+
# @return [::String]
|
|
2744
|
+
# Required. The parent resource where this content pack will be created.
|
|
2745
|
+
# Format: projects/\\{project}/locations/\\{location}/instances/\\{instance}
|
|
2746
|
+
# @!attribute [rw] page_size
|
|
2747
|
+
# @return [::Integer]
|
|
2748
|
+
# Optional. The maximum number of feed content packs to return. The service
|
|
2749
|
+
# may return fewer than this value. If unspecified, at most 50 feed content
|
|
2750
|
+
# packs will be returned. The maximum value is 1000; values above 1000 will
|
|
2751
|
+
# be coerced to 1000.
|
|
2752
|
+
# @!attribute [rw] page_token
|
|
2753
|
+
# @return [::String]
|
|
2754
|
+
# Optional. A page token, received from a previous `ListFeedPacks` call.
|
|
2755
|
+
# Provide this to retrieve the subsequent page. When paginating, all other
|
|
2756
|
+
# parameters provided to `ListFeedPacks` must match the call that provided
|
|
2757
|
+
# the page token.
|
|
2758
|
+
class ListFeedPacksRequest
|
|
2759
|
+
include ::Google::Protobuf::MessageExts
|
|
2760
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2761
|
+
end
|
|
2762
|
+
|
|
2763
|
+
# Response message for ListFeedPacks.
|
|
2764
|
+
# @!attribute [rw] feed_packs
|
|
2765
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::FeedPack>]
|
|
2766
|
+
# List of feeds packs.
|
|
2767
|
+
# @!attribute [rw] next_page_token
|
|
2768
|
+
# @return [::String]
|
|
2769
|
+
# A token, which can be sent as `page_token` to retrieve the next page.
|
|
2770
|
+
# If this field is omitted, there are no subsequent pages.
|
|
2771
|
+
class ListFeedPacksResponse
|
|
2772
|
+
include ::Google::Protobuf::MessageExts
|
|
2773
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2774
|
+
end
|
|
2775
|
+
|
|
2776
|
+
# Request message for GetFeedPack.
|
|
2777
|
+
# @!attribute [rw] name
|
|
2778
|
+
# @return [::String]
|
|
2779
|
+
# Required. The ID of the feed pack to retrieve.
|
|
2780
|
+
# Format:
|
|
2781
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feedPacks/\\{feedPack}
|
|
2782
|
+
class GetFeedPackRequest
|
|
2783
|
+
include ::Google::Protobuf::MessageExts
|
|
2784
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2785
|
+
end
|
|
2786
|
+
|
|
2787
|
+
# Request message for CreateFeed.
|
|
2788
|
+
# @!attribute [rw] parent
|
|
2789
|
+
# @return [::String]
|
|
2790
|
+
# Required. The parent resource where this Feed will be created.
|
|
2791
|
+
# Format: projects/\\{project}/locations/\\{location}/instances/\\{instance}
|
|
2792
|
+
# @!attribute [rw] feed
|
|
2793
|
+
# @return [::Google::Cloud::Chronicle::V1::Feed]
|
|
2794
|
+
# Required. Feed to create.
|
|
2795
|
+
class CreateFeedRequest
|
|
2796
|
+
include ::Google::Protobuf::MessageExts
|
|
2797
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2798
|
+
end
|
|
2799
|
+
|
|
2800
|
+
# Request message to retrieve a feed.
|
|
2801
|
+
# @!attribute [rw] name
|
|
2802
|
+
# @return [::String]
|
|
2803
|
+
# Required. The ID of the feed to retrieve.
|
|
2804
|
+
# Format:
|
|
2805
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feeds/\\{feed}
|
|
2806
|
+
class GetFeedRequest
|
|
2807
|
+
include ::Google::Protobuf::MessageExts
|
|
2808
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2809
|
+
end
|
|
2810
|
+
|
|
2811
|
+
# Request message to delete a feed.
|
|
2812
|
+
# @!attribute [rw] name
|
|
2813
|
+
# @return [::String]
|
|
2814
|
+
# Required. The ID of the feed to retrieve.
|
|
2815
|
+
# Format:
|
|
2816
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feeds/\\{feed}
|
|
2817
|
+
# @!attribute [rw] delete_backlog
|
|
2818
|
+
# @return [::Boolean]
|
|
2819
|
+
# Optional. If true, delete the uningested backlog in OOB retry queue for the
|
|
2820
|
+
# feed.
|
|
2821
|
+
class DeleteFeedRequest
|
|
2822
|
+
include ::Google::Protobuf::MessageExts
|
|
2823
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2824
|
+
end
|
|
2825
|
+
|
|
2826
|
+
# EnableFeed request message.
|
|
2827
|
+
# @!attribute [rw] name
|
|
2828
|
+
# @return [::String]
|
|
2829
|
+
# Required. The name of the feed to enable.
|
|
2830
|
+
# Format:
|
|
2831
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feeds/\\{feed}
|
|
2832
|
+
class EnableFeedRequest
|
|
2833
|
+
include ::Google::Protobuf::MessageExts
|
|
2834
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2835
|
+
end
|
|
2836
|
+
|
|
2837
|
+
# GenerateSecret request message.
|
|
2838
|
+
# @!attribute [rw] name
|
|
2839
|
+
# @return [::String]
|
|
2840
|
+
# Required. The name of the feed to for which to generate secret.
|
|
2841
|
+
# Format:
|
|
2842
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feeds/\\{feed}
|
|
2843
|
+
class GenerateSecretRequest
|
|
2844
|
+
include ::Google::Protobuf::MessageExts
|
|
2845
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2846
|
+
end
|
|
2847
|
+
|
|
2848
|
+
# GenerateSecret response message.
|
|
2849
|
+
# @!attribute [rw] secret
|
|
2850
|
+
# @return [::String]
|
|
2851
|
+
# The generated secret. Store the secret value at a safe place and use it
|
|
2852
|
+
# while configuring your https push feed.
|
|
2853
|
+
class GenerateSecretResponse
|
|
2854
|
+
include ::Google::Protobuf::MessageExts
|
|
2855
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2856
|
+
end
|
|
2857
|
+
|
|
2858
|
+
# DisableFeed request message.
|
|
2859
|
+
# @!attribute [rw] name
|
|
2860
|
+
# @return [::String]
|
|
2861
|
+
# Required. The name of the feed to disable.
|
|
2862
|
+
# Format:
|
|
2863
|
+
# projects/\\{project}/locations/\\{location}/instances/\\{instance}/feeds/\\{feed}
|
|
2864
|
+
class DisableFeedRequest
|
|
2865
|
+
include ::Google::Protobuf::MessageExts
|
|
2866
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2867
|
+
end
|
|
2868
|
+
|
|
2869
|
+
# CustomAPIHeaderKeyValue defines dynamic headers key-values for Custom API.
|
|
2870
|
+
# @!attribute [rw] key
|
|
2871
|
+
# @return [::String]
|
|
2872
|
+
# Required. Enter the name of the HTTP Request header (e.g., Authorization or
|
|
2873
|
+
# X-API-Key).
|
|
2874
|
+
# @!attribute [rw] value
|
|
2875
|
+
# @return [::String]
|
|
2876
|
+
# Required. Enter the API Key, Bearer Token, or credential value associated
|
|
2877
|
+
# with the header.
|
|
2878
|
+
class CustomAPIHeaderKeyValue
|
|
2879
|
+
include ::Google::Protobuf::MessageExts
|
|
2880
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2881
|
+
end
|
|
2882
|
+
|
|
2883
|
+
# CustomAPIHeaderAuth lists HTTP headers for custom API auth.
|
|
2884
|
+
# @!attribute [rw] header_key_values
|
|
2885
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::CustomAPIHeaderKeyValue>]
|
|
2886
|
+
# Optional. Add HTTP request header key-value pairs.
|
|
2887
|
+
class CustomAPIHeaderAuth
|
|
2888
|
+
include ::Google::Protobuf::MessageExts
|
|
2889
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2890
|
+
end
|
|
2891
|
+
|
|
2892
|
+
# CustomAPIQueryKeyValue defines dynamic query parameters key-values for Custom
|
|
2893
|
+
# API Auth.
|
|
2894
|
+
# @!attribute [rw] key
|
|
2895
|
+
# @return [::String]
|
|
2896
|
+
# Required. Enter the name of the URL Query Parameter (e.g., api_key or
|
|
2897
|
+
# token).
|
|
2898
|
+
# @!attribute [rw] value
|
|
2899
|
+
# @return [::String]
|
|
2900
|
+
# Required. Enter the API Key or credential value associated with the query
|
|
2901
|
+
# parameter.
|
|
2902
|
+
class CustomAPIQueryKeyValue
|
|
2903
|
+
include ::Google::Protobuf::MessageExts
|
|
2904
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2905
|
+
end
|
|
2906
|
+
|
|
2907
|
+
# CustomAPIQueryAuth lists URL Query parameters for custom API auth.
|
|
2908
|
+
# @!attribute [rw] query_key_values
|
|
2909
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::CustomAPIQueryKeyValue>]
|
|
2910
|
+
# Optional. Add URL Query parameter key-value pairs.
|
|
2911
|
+
class CustomAPIQueryAuth
|
|
2912
|
+
include ::Google::Protobuf::MessageExts
|
|
2913
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2914
|
+
end
|
|
2915
|
+
|
|
2916
|
+
# Info for No-Authentication custom API feeds.
|
|
2917
|
+
class CustomAPINoAuth
|
|
2918
|
+
include ::Google::Protobuf::MessageExts
|
|
2919
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2920
|
+
end
|
|
2921
|
+
|
|
2922
|
+
# Settings required by Feeds of Custom API (Codeless).
|
|
2923
|
+
# Supports fetching data from third-party APIs with configurable pagination,
|
|
2924
|
+
# authentication, and response parsing.
|
|
2925
|
+
# @!attribute [rw] no_auth
|
|
2926
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPINoAuth]
|
|
2927
|
+
# Authenticate without credentials or secrets.
|
|
2928
|
+
#
|
|
2929
|
+
# Note: The following fields are mutually exclusive: `no_auth`, `basic_auth`, `oauth_client_credentials`, `header_auth`, `query_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2930
|
+
# @!attribute [rw] basic_auth
|
|
2931
|
+
# @return [::Google::Cloud::Chronicle::V1::UsernameSecretAuth]
|
|
2932
|
+
# Authenticate using Username/Password credentials.
|
|
2933
|
+
#
|
|
2934
|
+
# Note: The following fields are mutually exclusive: `basic_auth`, `no_auth`, `oauth_client_credentials`, `header_auth`, `query_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2935
|
+
# @!attribute [rw] oauth_client_credentials
|
|
2936
|
+
# @return [::Google::Cloud::Chronicle::V1::OAuthClientCredentials]
|
|
2937
|
+
# Authenticate using OAuth 2.0 Client Credentials Grant flow.
|
|
2938
|
+
#
|
|
2939
|
+
# Note: The following fields are mutually exclusive: `oauth_client_credentials`, `no_auth`, `basic_auth`, `header_auth`, `query_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2940
|
+
# @!attribute [rw] header_auth
|
|
2941
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIHeaderAuth]
|
|
2942
|
+
# Authenticate using custom API Keys injected into request headers.
|
|
2943
|
+
#
|
|
2944
|
+
# Note: The following fields are mutually exclusive: `header_auth`, `no_auth`, `basic_auth`, `oauth_client_credentials`, `query_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2945
|
+
# @!attribute [rw] query_auth
|
|
2946
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIQueryAuth]
|
|
2947
|
+
# Authenticate using custom API Keys injected into URL query parameters.
|
|
2948
|
+
#
|
|
2949
|
+
# Note: The following fields are mutually exclusive: `query_auth`, `no_auth`, `basic_auth`, `oauth_client_credentials`, `header_auth`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
2950
|
+
# @!attribute [rw] base_url
|
|
2951
|
+
# @return [::String]
|
|
2952
|
+
# Required. Enter the primary web address of the third-party API (e.g.,
|
|
2953
|
+
# https://api.vendor.com).
|
|
2954
|
+
# @!attribute [rw] polling_frequency
|
|
2955
|
+
# @return [::Integer]
|
|
2956
|
+
# Optional. Specify how often the platform checks the API for new data in
|
|
2957
|
+
# minutes (default is 15 minutes).
|
|
2958
|
+
# @!attribute [rw] primary_request
|
|
2959
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPITransferNode]
|
|
2960
|
+
# Required. Configure the initial API call used to fetch the main list of
|
|
2961
|
+
# logs or events.
|
|
2962
|
+
class CustomAPISettings
|
|
2963
|
+
include ::Google::Protobuf::MessageExts
|
|
2964
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2965
|
+
end
|
|
2966
|
+
|
|
2967
|
+
# Container for a specific API interaction.
|
|
2968
|
+
# @!attribute [rw] request_settings
|
|
2969
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIRequestConfig]
|
|
2970
|
+
# Required. Define the technical parameters for the outgoing API call,
|
|
2971
|
+
# including paths, headers, and payloads.
|
|
2972
|
+
# @!attribute [rw] response_mapping
|
|
2973
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIResponseConfig]
|
|
2974
|
+
# Required. Provide rules that tell the platform how to locate and extract
|
|
2975
|
+
# the relevant security data from the API's reply.
|
|
2976
|
+
# @!attribute [rw] pagination_strategy
|
|
2977
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIPagination]
|
|
2978
|
+
# Required. Select how the connector should request subsequent pages when the
|
|
2979
|
+
# data is too large for a single response.
|
|
2980
|
+
# @!attribute [rw] checkpointing
|
|
2981
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPICheckpointConfig]
|
|
2982
|
+
# Required. Configure settings that allow the connector to remember where it
|
|
2983
|
+
# left off in the previous poll (e.g., tracking the last fetched timestamp).
|
|
2984
|
+
# @!attribute [rw] dependent_requests_config
|
|
2985
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIDependentRequestsConfig]
|
|
2986
|
+
# Optional. Configuration for dependent requests (child chaining).
|
|
2987
|
+
class CustomAPITransferNode
|
|
2988
|
+
include ::Google::Protobuf::MessageExts
|
|
2989
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
2990
|
+
end
|
|
2991
|
+
|
|
2992
|
+
# Configuration for dependent requests (child chaining).
|
|
2993
|
+
# @!attribute [rw] item_id_json_path
|
|
2994
|
+
# @return [::String]
|
|
2995
|
+
# Required. Enter the specific field in the response that uniquely identifies
|
|
2996
|
+
# an individual record or alert.
|
|
2997
|
+
# @!attribute [rw] item_id_variable
|
|
2998
|
+
# @return [::String]
|
|
2999
|
+
# Optional. Specify a custom variable name to hold the extracted ID, which
|
|
3000
|
+
# can be linked as a placeholder in dependent requests.
|
|
3001
|
+
# @!attribute [rw] dependent_requests
|
|
3002
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::CustomAPITransferNode>]
|
|
3003
|
+
# Optional. Add follow-up API calls triggered for each item found in the
|
|
3004
|
+
# primary request (e.g., fetching full event details for a list of basic
|
|
3005
|
+
# alert IDs). Note: In MVP, the child depth fan-out limit is capped at 1.
|
|
3006
|
+
class CustomAPIDependentRequestsConfig
|
|
3007
|
+
include ::Google::Protobuf::MessageExts
|
|
3008
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3009
|
+
end
|
|
3010
|
+
|
|
3011
|
+
# Configuration for the outgoing API request.
|
|
3012
|
+
# @!attribute [rw] endpoint_path
|
|
3013
|
+
# @return [::String]
|
|
3014
|
+
# Required. Enter the specific API route appended to the Base URL to fetch
|
|
3015
|
+
# the data (e.g., /v1/alerts).
|
|
3016
|
+
# @!attribute [rw] http_method
|
|
3017
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIRequestConfig::HttpMethod]
|
|
3018
|
+
# Required. Select the type of action to perform on the API endpoint (usually
|
|
3019
|
+
# GET to retrieve data or POST to submit a query).
|
|
3020
|
+
# @!attribute [rw] request_body
|
|
3021
|
+
# @return [::String]
|
|
3022
|
+
# Optional. Provide the data payload sent to the API to specify what
|
|
3023
|
+
# information you want, typically formatted in JSON.
|
|
3024
|
+
# @!attribute [rw] query_parameters
|
|
3025
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::HeaderKeyValue>]
|
|
3026
|
+
# Optional. Add extra filters or settings appended to the end of the URL
|
|
3027
|
+
# (e.g., ?status=critical).
|
|
3028
|
+
# @!attribute [rw] custom_headers
|
|
3029
|
+
# @return [::Array<::Google::Cloud::Chronicle::V1::HeaderKeyValue>]
|
|
3030
|
+
# Optional. Define specialized key-value pairs sent with the request, often
|
|
3031
|
+
# used for custom API versioning or specific vendor requirements.
|
|
3032
|
+
# @!attribute [rw] max_requests_per_minute
|
|
3033
|
+
# @return [::Integer]
|
|
3034
|
+
# Optional. Set a safety limit to ensure the connector does not exceed the
|
|
3035
|
+
# third-party vendor's API rate limits.
|
|
3036
|
+
class CustomAPIRequestConfig
|
|
3037
|
+
include ::Google::Protobuf::MessageExts
|
|
3038
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3039
|
+
|
|
3040
|
+
# HTTPS methods supported.
|
|
3041
|
+
module HttpMethod
|
|
3042
|
+
# Unspecified method.
|
|
3043
|
+
HTTP_METHOD_UNSPECIFIED = 0
|
|
3044
|
+
|
|
3045
|
+
# HTTP GET method.
|
|
3046
|
+
GET = 1
|
|
3047
|
+
|
|
3048
|
+
# HTTP POST method.
|
|
3049
|
+
POST = 2
|
|
3050
|
+
end
|
|
3051
|
+
end
|
|
3052
|
+
|
|
3053
|
+
# Configuration for handling the API response.
|
|
3054
|
+
# @!attribute [rw] target_data_path
|
|
3055
|
+
# @return [::Array<::String>]
|
|
3056
|
+
# Required. Enter the exact path in the API's response payload where the list
|
|
3057
|
+
# of target log entries is located.
|
|
3058
|
+
class CustomAPIResponseConfig
|
|
3059
|
+
include ::Google::Protobuf::MessageExts
|
|
3060
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3061
|
+
end
|
|
3062
|
+
|
|
3063
|
+
# Checkpoint configuration to enable sequential (cursor-based) polling.
|
|
3064
|
+
# @!attribute [rw] none_strategy
|
|
3065
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPICheckpointConfig::NoneStrategy]
|
|
3066
|
+
# Fetch all available data in one go without tracking progress.
|
|
3067
|
+
#
|
|
3068
|
+
# Note: The following fields are mutually exclusive: `none_strategy`, `latest_timestamp_strategy`, `latest_record_strategy`, `iterator_strategy`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3069
|
+
# @!attribute [rw] latest_timestamp_strategy
|
|
3070
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPICheckpointConfig::LatestTimestampStrategy]
|
|
3071
|
+
# Track the timestamp of the newest record to fetch newer ones next.
|
|
3072
|
+
#
|
|
3073
|
+
# Note: The following fields are mutually exclusive: `latest_timestamp_strategy`, `none_strategy`, `latest_record_strategy`, `iterator_strategy`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3074
|
+
# @!attribute [rw] latest_record_strategy
|
|
3075
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPICheckpointConfig::LatestRecordStrategy]
|
|
3076
|
+
# Track the highest record ID to fetch only new records next.
|
|
3077
|
+
#
|
|
3078
|
+
# Note: The following fields are mutually exclusive: `latest_record_strategy`, `none_strategy`, `latest_timestamp_strategy`, `iterator_strategy`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3079
|
+
# @!attribute [rw] iterator_strategy
|
|
3080
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPICheckpointConfig::IteratorStrategy]
|
|
3081
|
+
# Use progress tokens provided by the API.
|
|
3082
|
+
#
|
|
3083
|
+
# Note: The following fields are mutually exclusive: `iterator_strategy`, `none_strategy`, `latest_timestamp_strategy`, `latest_record_strategy`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3084
|
+
class CustomAPICheckpointConfig
|
|
3085
|
+
include ::Google::Protobuf::MessageExts
|
|
3086
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3087
|
+
|
|
3088
|
+
# Fetch all available data in one go without tracking progress.
|
|
3089
|
+
class NoneStrategy
|
|
3090
|
+
include ::Google::Protobuf::MessageExts
|
|
3091
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3092
|
+
end
|
|
3093
|
+
|
|
3094
|
+
# Track the timestamp of the newest record to fetch newer ones next.
|
|
3095
|
+
# @!attribute [rw] checkpoint_value_path
|
|
3096
|
+
# @return [::String]
|
|
3097
|
+
# Required. Enter the exact location within a log record where the
|
|
3098
|
+
# checkpoint value (like a timestamp or ID) is found.
|
|
3099
|
+
# @!attribute [rw] checkpoint_variable
|
|
3100
|
+
# @return [::String]
|
|
3101
|
+
# Required. Specify a custom name you assign to store and reference the
|
|
3102
|
+
# checkpoint value between polling cycles.
|
|
3103
|
+
class LatestTimestampStrategy
|
|
3104
|
+
include ::Google::Protobuf::MessageExts
|
|
3105
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3106
|
+
end
|
|
3107
|
+
|
|
3108
|
+
# Track the highest record ID to fetch only new records next.
|
|
3109
|
+
# @!attribute [rw] checkpoint_value_path
|
|
3110
|
+
# @return [::String]
|
|
3111
|
+
# Required. Enter the exact location within a log record where the
|
|
3112
|
+
# checkpoint value (like a timestamp or ID) is found.
|
|
3113
|
+
# @!attribute [rw] checkpoint_variable
|
|
3114
|
+
# @return [::String]
|
|
3115
|
+
# Required. Specify a custom name you assign to store and reference the
|
|
3116
|
+
# checkpoint value between polling cycles.
|
|
3117
|
+
class LatestRecordStrategy
|
|
3118
|
+
include ::Google::Protobuf::MessageExts
|
|
3119
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3120
|
+
end
|
|
3121
|
+
|
|
3122
|
+
# Use progress tokens provided by the API.
|
|
3123
|
+
# @!attribute [rw] checkpoint_value_path
|
|
3124
|
+
# @return [::String]
|
|
3125
|
+
# Required. Enter the exact location within a log record where the
|
|
3126
|
+
# checkpoint value (like a timestamp or ID) is found.
|
|
3127
|
+
# @!attribute [rw] checkpoint_variable
|
|
3128
|
+
# @return [::String]
|
|
3129
|
+
# Required. Specify a custom name you assign to store and reference the
|
|
3130
|
+
# checkpoint value between polling cycles.
|
|
3131
|
+
class IteratorStrategy
|
|
3132
|
+
include ::Google::Protobuf::MessageExts
|
|
3133
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3134
|
+
end
|
|
3135
|
+
end
|
|
3136
|
+
|
|
3137
|
+
# Pagination strategy for the request.
|
|
3138
|
+
# @!attribute [rw] none
|
|
3139
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIPagination::NonePagination]
|
|
3140
|
+
# Fetch data in a single request without paging.
|
|
3141
|
+
#
|
|
3142
|
+
# Note: The following fields are mutually exclusive: `none`, `token`, `link`, `offset`, `page_number`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3143
|
+
# @!attribute [rw] token
|
|
3144
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIPagination::TokenPagination]
|
|
3145
|
+
# Use tokens (custom keys) to get the next page of data.
|
|
3146
|
+
#
|
|
3147
|
+
# Note: The following fields are mutually exclusive: `token`, `none`, `link`, `offset`, `page_number`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3148
|
+
# @!attribute [rw] link
|
|
3149
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIPagination::LinkPagination]
|
|
3150
|
+
# Follow links provided in the response to get more data.
|
|
3151
|
+
#
|
|
3152
|
+
# Note: The following fields are mutually exclusive: `link`, `none`, `token`, `offset`, `page_number`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3153
|
+
# @!attribute [rw] offset
|
|
3154
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIPagination::OffsetPagination]
|
|
3155
|
+
# Skip a set number of records to get the next set.
|
|
3156
|
+
#
|
|
3157
|
+
# Note: The following fields are mutually exclusive: `offset`, `none`, `token`, `link`, `page_number`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3158
|
+
# @!attribute [rw] page_number
|
|
3159
|
+
# @return [::Google::Cloud::Chronicle::V1::CustomAPIPagination::PageNumberPagination]
|
|
3160
|
+
# Go to the next page number (e.g., page 2).
|
|
3161
|
+
#
|
|
3162
|
+
# Note: The following fields are mutually exclusive: `page_number`, `none`, `token`, `link`, `offset`. If a field in that set is populated, all other fields in the set will automatically be cleared.
|
|
3163
|
+
class CustomAPIPagination
|
|
3164
|
+
include ::Google::Protobuf::MessageExts
|
|
3165
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3166
|
+
|
|
3167
|
+
# Fetch data in a single request without paging.
|
|
3168
|
+
class NonePagination
|
|
3169
|
+
include ::Google::Protobuf::MessageExts
|
|
3170
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3171
|
+
end
|
|
3172
|
+
|
|
3173
|
+
# Use tokens (custom keys) to get the next page of data.
|
|
3174
|
+
# @!attribute [rw] next_page_token_json_path
|
|
3175
|
+
# @return [::String]
|
|
3176
|
+
# Required. Enter the field in the API response that contains the URL or
|
|
3177
|
+
# token needed to fetch the next page of data.
|
|
3178
|
+
# @!attribute [rw] query_param
|
|
3179
|
+
# @return [::String]
|
|
3180
|
+
# Required. Specify the name of the query parameter for next page token in
|
|
3181
|
+
# request.
|
|
3182
|
+
class TokenPagination
|
|
3183
|
+
include ::Google::Protobuf::MessageExts
|
|
3184
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3185
|
+
end
|
|
3186
|
+
|
|
3187
|
+
# Follow links provided in the response to get more data.
|
|
3188
|
+
# @!attribute [rw] next_page_link_json_path
|
|
3189
|
+
# @return [::String]
|
|
3190
|
+
# Required. Enter the field in the API response that contains the URL or
|
|
3191
|
+
# token needed to fetch the next page of data.
|
|
3192
|
+
class LinkPagination
|
|
3193
|
+
include ::Google::Protobuf::MessageExts
|
|
3194
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3195
|
+
end
|
|
3196
|
+
|
|
3197
|
+
# Skip a set number of records to get the next set.
|
|
3198
|
+
# @!attribute [rw] offset_query_param
|
|
3199
|
+
# @return [::String]
|
|
3200
|
+
# Required. Specify the name of the query parameter for offset in request.
|
|
3201
|
+
class OffsetPagination
|
|
3202
|
+
include ::Google::Protobuf::MessageExts
|
|
3203
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3204
|
+
end
|
|
3205
|
+
|
|
3206
|
+
# Go to the next page number (e.g., page 2).
|
|
3207
|
+
# @!attribute [rw] page_number_query_param
|
|
3208
|
+
# @return [::String]
|
|
3209
|
+
# Required. Specify the name of the query parameter for page number in
|
|
3210
|
+
# request.
|
|
3211
|
+
class PageNumberPagination
|
|
3212
|
+
include ::Google::Protobuf::MessageExts
|
|
3213
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
3214
|
+
end
|
|
3215
|
+
end
|
|
3216
|
+
|
|
3217
|
+
# The type of URIs specified in the source URIs.
|
|
3218
|
+
module URISourceType
|
|
3219
|
+
# If encountered, will throw an `INVALID_ARGUMENT` error.
|
|
3220
|
+
URI_SOURCE_TYPE_UNSPECIFIED = 0
|
|
3221
|
+
|
|
3222
|
+
# The type of files pointed to by `source_uris` are files.
|
|
3223
|
+
FILES = 1
|
|
3224
|
+
|
|
3225
|
+
# The type of files pointed to by `source_uris` are folders and Xenon
|
|
3226
|
+
# should not descend into subfolders of those folders.
|
|
3227
|
+
FOLDERS = 2
|
|
3228
|
+
|
|
3229
|
+
# The type of files pointed to by `source_uris` are folders and Xenon
|
|
3230
|
+
# should descend into subfolders of those folders.
|
|
3231
|
+
FOLDERS_RECURSIVE = 3
|
|
3232
|
+
end
|
|
3233
|
+
|
|
3234
|
+
# Source deletion option controls whether source files should be deleted after
|
|
3235
|
+
# transferring.
|
|
3236
|
+
module SourceDeletionOption
|
|
3237
|
+
# If encountered, will be treated as `SOURCE_DELETION_NEVER`.
|
|
3238
|
+
SOURCE_DELETION_OPTION_UNSPECIFIED = 0
|
|
3239
|
+
|
|
3240
|
+
# Never delete files from the source.
|
|
3241
|
+
SOURCE_DELETION_NEVER = 1
|
|
3242
|
+
|
|
3243
|
+
# After the fetch completes, if there are no errors, delete files and any
|
|
3244
|
+
# directories made empty by the file deletion from the source.
|
|
3245
|
+
SOURCE_DELETION_ON_SUCCESS = 2
|
|
3246
|
+
|
|
3247
|
+
# After the fetch completes, if there are no errors, delete files (leaving
|
|
3248
|
+
# any directories) from the source.
|
|
3249
|
+
SOURCE_DELETION_ON_SUCCESS_FILES_ONLY = 3
|
|
3250
|
+
end
|
|
3251
|
+
|
|
3252
|
+
# Source deletion option determines whether source files should be deleted
|
|
3253
|
+
# after transferring.
|
|
3254
|
+
module SourceDeletionOptionV2
|
|
3255
|
+
# If encountered, will be treated as `SOURCE_DELETION_NEVER`.
|
|
3256
|
+
SOURCE_DELETION_OPTION_V2_UNSPECIFIED = 0
|
|
3257
|
+
|
|
3258
|
+
# Never delete files from the source.
|
|
3259
|
+
NEVER = 1
|
|
3260
|
+
|
|
3261
|
+
# After the fetch completes, if there are no errors, delete files and any
|
|
3262
|
+
# directories made empty by the file deletion from the source.
|
|
3263
|
+
ON_SUCCESS = 2
|
|
3264
|
+
end
|
|
3265
|
+
|
|
3266
|
+
# AWS S3 regions:
|
|
3267
|
+
# https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region.
|
|
3268
|
+
module S3Region
|
|
3269
|
+
# Unspecified region means Auto detect.
|
|
3270
|
+
# Auto detect does not successfully detect GOV Cloud.
|
|
3271
|
+
S3_REGION_UNSPECIFIED = 0
|
|
3272
|
+
|
|
3273
|
+
# US.
|
|
3274
|
+
# N. Virginia (previously known as US_STANDARD).
|
|
3275
|
+
US_EAST_1 = 1
|
|
3276
|
+
|
|
3277
|
+
# Ohio.
|
|
3278
|
+
US_EAST_2 = 2
|
|
3279
|
+
|
|
3280
|
+
# N. California.
|
|
3281
|
+
US_WEST_1 = 3
|
|
3282
|
+
|
|
3283
|
+
# Oregon.
|
|
3284
|
+
US_WEST_2 = 4
|
|
3285
|
+
|
|
3286
|
+
# Not accessible unless AWS US Govt. account.
|
|
3287
|
+
US_GOV_CLOUD = 5
|
|
3288
|
+
|
|
3289
|
+
# Not accessible unless AWS US Govt. account.
|
|
3290
|
+
US_GOV_EAST_1 = 6
|
|
3291
|
+
|
|
3292
|
+
# Europe.
|
|
3293
|
+
# Ireland.
|
|
3294
|
+
EU_WEST_1 = 7
|
|
3295
|
+
|
|
3296
|
+
# London.
|
|
3297
|
+
EU_WEST_2 = 8
|
|
3298
|
+
|
|
3299
|
+
# Paris.
|
|
3300
|
+
EU_WEST_3 = 9
|
|
3301
|
+
|
|
3302
|
+
# Frankfurt.
|
|
3303
|
+
EU_CENTRAL_1 = 10
|
|
3304
|
+
|
|
3305
|
+
# Stockholm.
|
|
3306
|
+
EU_NORTH_1 = 11
|
|
3307
|
+
|
|
3308
|
+
# Milan.
|
|
3309
|
+
EU_SOUTH_1 = 21
|
|
3310
|
+
|
|
3311
|
+
# Asia Pacific
|
|
3312
|
+
# Mumbai.
|
|
3313
|
+
AP_SOUTH_1 = 12
|
|
3314
|
+
|
|
3315
|
+
# Singapore.
|
|
3316
|
+
AP_SOUTHEAST_1 = 13
|
|
3317
|
+
|
|
3318
|
+
# Sydney.
|
|
3319
|
+
AP_SOUTHEAST_2 = 14
|
|
3320
|
+
|
|
3321
|
+
# Jakarta.
|
|
3322
|
+
AP_SOUTHEAST_3 = 22
|
|
3323
|
+
|
|
3324
|
+
# Tokyo.
|
|
3325
|
+
AP_NORTHEAST_1 = 15
|
|
3326
|
+
|
|
3327
|
+
# Seoul.
|
|
3328
|
+
AP_NORTHEAST_2 = 16
|
|
3329
|
+
|
|
3330
|
+
# Osaka.
|
|
3331
|
+
AP_NORTHEAST_3 = 23
|
|
3332
|
+
|
|
3333
|
+
# Hong Kong.
|
|
3334
|
+
AP_EAST_1 = 24
|
|
3335
|
+
|
|
3336
|
+
# South America.
|
|
3337
|
+
# Sao Paulo.
|
|
3338
|
+
SA_EAST_1 = 17
|
|
3339
|
+
|
|
3340
|
+
# China - Not accessible unless AWS China account.
|
|
3341
|
+
# China - Beijing.
|
|
3342
|
+
CN_NORTH_1 = 18
|
|
3343
|
+
|
|
3344
|
+
# China - Ningxia.
|
|
3345
|
+
CN_NORTHWEST_1 = 19
|
|
3346
|
+
|
|
3347
|
+
# Canada.
|
|
3348
|
+
# Canada Central.
|
|
3349
|
+
CA_CENTRAL_1 = 20
|
|
3350
|
+
|
|
3351
|
+
# Africa.
|
|
3352
|
+
# Capetown.
|
|
3353
|
+
AF_SOUTH_1 = 25
|
|
3354
|
+
|
|
3355
|
+
# Middle East.
|
|
3356
|
+
# Bahrain.
|
|
3357
|
+
ME_SOUTH_1 = 26
|
|
3358
|
+
|
|
3359
|
+
# Asia Pacific (Hyderabad).
|
|
3360
|
+
AP_SOUTH_2 = 27
|
|
3361
|
+
|
|
3362
|
+
# Asia Pacific (Melbourne).
|
|
3363
|
+
AP_SOUTHEAST_4 = 28
|
|
3364
|
+
|
|
3365
|
+
# Canada West (Calgary).
|
|
3366
|
+
CA_WEST_1 = 29
|
|
3367
|
+
|
|
3368
|
+
# Europe (Spain).
|
|
3369
|
+
EU_SOUTH_2 = 30
|
|
3370
|
+
|
|
3371
|
+
# Europe (Zurich).
|
|
3372
|
+
EU_CENTRAL_2 = 31
|
|
3373
|
+
|
|
3374
|
+
# Israel (Tel Aviv).
|
|
3375
|
+
IL_CENTRAL_1 = 32
|
|
3376
|
+
|
|
3377
|
+
# Middle East (UAE).
|
|
3378
|
+
ME_CENTRAL_1 = 33
|
|
3379
|
+
end
|
|
3380
|
+
|
|
3381
|
+
# An enumeration of the possible types of a `Feed.details` field, where type
|
|
3382
|
+
# implies both encoding and semantics. This is used in constructing a schema in
|
|
3383
|
+
# order to construct a UI for creating well formed feeds.
|
|
3384
|
+
module SemanticType
|
|
3385
|
+
# No semantic type. All fields must specify a semantic type.
|
|
3386
|
+
SEMANTIC_TYPE_UNSPECIFIED = 0
|
|
3387
|
+
|
|
3388
|
+
# A boolean (with no special semantics).
|
|
3389
|
+
BOOL = 1
|
|
3390
|
+
|
|
3391
|
+
# An enum (with no special semantics).
|
|
3392
|
+
ENUM = 2
|
|
3393
|
+
|
|
3394
|
+
# A repeated field with a Message type where the Message contains two
|
|
3395
|
+
# fields: `key` and `value`.
|
|
3396
|
+
KEY_VALUE_LIST = 3
|
|
3397
|
+
|
|
3398
|
+
# A `map<string, string>` (with no special semantics).
|
|
3399
|
+
MAP_STRING_STRING = 4
|
|
3400
|
+
|
|
3401
|
+
# A string (with no special semantics).
|
|
3402
|
+
STRING = 5
|
|
3403
|
+
|
|
3404
|
+
# A repeated string (with no special semantics).
|
|
3405
|
+
STRING_LIST = 6
|
|
3406
|
+
|
|
3407
|
+
# A string that may contain any whitespace characters (with no special
|
|
3408
|
+
# semantics).
|
|
3409
|
+
STRING_MULTILINE = 7
|
|
3410
|
+
|
|
3411
|
+
# A string that may contain any whitespace characters and that encodes a
|
|
3412
|
+
# secret.
|
|
3413
|
+
STRING_MULTILINE_SECRET = 8
|
|
3414
|
+
|
|
3415
|
+
# A string which encodes a secret.
|
|
3416
|
+
STRING_SECRET = 9
|
|
3417
|
+
|
|
3418
|
+
# A string which encodes a URI.
|
|
3419
|
+
STRING_URI = 10
|
|
3420
|
+
|
|
3421
|
+
# A repeated string which encodes URIs.
|
|
3422
|
+
STRING_URI_LIST = 11
|
|
3423
|
+
end
|
|
3424
|
+
end
|
|
3425
|
+
end
|
|
3426
|
+
end
|
|
3427
|
+
end
|