@alicloud/cloud-siem20241212 1.0.0 → 2.0.0

package/src/models/ListDetectionRulesResponseBody.ts

@@ -145,11 +145,13 @@ export class ListDetectionRulesResponseBodyDetectionRules extends $dara.Model {
    * Discovery
    */
   alertAttCk?: string;
+  alertDescription?: string;
   /**
    * @example
    * 1
    */
   alertLevel?: string;
+  alertName?: string;
   /**
    * @example
    * ALERT_ACTIVITY
@@ -307,7 +309,9 @@ export class ListDetectionRulesResponseBodyDetectionRules extends $dara.Model {
   static names(): { [key: string]: string } {
     return {
       alertAttCk: 'AlertAttCk',
+      alertDescription: 'AlertDescription',
       alertLevel: 'AlertLevel',
+      alertName: 'AlertName',
       alertSchemaId: 'AlertSchemaId',
       alertTacticId: 'AlertTacticId',
       alertThresholdCount: 'AlertThresholdCount',
@@ -343,7 +347,9 @@ export class ListDetectionRulesResponseBodyDetectionRules extends $dara.Model {
   static types(): { [key: string]: any } {
     return {
       alertAttCk: 'string',
+      alertDescription: 'string',
       alertLevel: 'string',
+      alertName: 'string',
       alertSchemaId: 'string',
       alertTacticId: 'string',
       alertThresholdCount: 'number',

package/src/models/ListIncidentsRequest.ts

@@ -54,6 +54,7 @@ export class ListIncidentsRequest extends $dara.Model {
    * GmtModified
    */
   orderFieldName?: string;
+  owners?: string[];
   /**
    * @remarks
    * This parameter is required.
@@ -110,6 +111,7 @@ export class ListIncidentsRequest extends $dara.Model {
       nextToken: 'NextToken',
       orderDirection: 'OrderDirection',
       orderFieldName: 'OrderFieldName',
+      owners: 'Owners',
       pageNumber: 'PageNumber',
       pageSize: 'PageSize',
       regionId: 'RegionId',
@@ -135,6 +137,7 @@ export class ListIncidentsRequest extends $dara.Model {
       nextToken: 'string',
       orderDirection: 'string',
       orderFieldName: 'string',
+      owners: { 'type': 'array', 'itemType': 'string' },
       pageNumber: 'number',
       pageSize: 'number',
       regionId: 'string',
@@ -151,6 +154,9 @@ export class ListIncidentsRequest extends $dara.Model {
     if(Array.isArray(this.incidentUuids)) {
       $dara.Model.validateArray(this.incidentUuids);
     }
+    if(Array.isArray(this.owners)) {
+      $dara.Model.validateArray(this.owners);
+    }
     if(Array.isArray(this.threatLevel)) {
       $dara.Model.validateArray(this.threatLevel);
     }

package/src/models/ListIncidentsResponseBody.ts

@@ -8,6 +8,7 @@ export class ListIncidentsResponseBodyIncidents extends $dara.Model {
    * 1603248483000
    */
   createTime?: number;
+  detectionRuleId?: string;
   /**
    * @example
    * ECS unusual log in
@@ -23,11 +24,21 @@ export class ListIncidentsResponseBodyIncidents extends $dara.Model {
    * 0
    */
   incidentStatus?: number;
+  /**
+   * @example
+   * ["sys:data_source:siem","sys:trigger_type:auto"]
+   */
+  incidentTags?: string;
   /**
    * @example
    * dbb1d7211c9285c862aa89385098****
    */
   incidentUuid?: string;
+  /**
+   * @example
+   * 1234567890xxxxxx
+   */
+  owner?: string;
   /**
    * @example
    * 3
@@ -51,10 +62,13 @@ export class ListIncidentsResponseBodyIncidents extends $dara.Model {
   static names(): { [key: string]: string } {
     return {
       createTime: 'CreateTime',
+      detectionRuleId: 'DetectionRuleId',
       incidentName: 'IncidentName',
       incidentRemark: 'IncidentRemark',
       incidentStatus: 'IncidentStatus',
+      incidentTags: 'IncidentTags',
       incidentUuid: 'IncidentUuid',
+      owner: 'Owner',
       relateAlertCount: 'RelateAlertCount',
       relateAssetCount: 'RelateAssetCount',
       threatLevel: 'ThreatLevel',
@@ -65,10 +79,13 @@ export class ListIncidentsResponseBodyIncidents extends $dara.Model {
   static types(): { [key: string]: any } {
     return {
       createTime: 'number',
+      detectionRuleId: 'string',
       incidentName: 'string',
       incidentRemark: 'string',
       incidentStatus: 'number',
+      incidentTags: 'string',
       incidentUuid: 'string',
+      owner: 'string',
       relateAlertCount: 'number',
       relateAssetCount: 'number',
       threatLevel: 'string',

package/src/models/ListIncidentsShrinkRequest.ts

@@ -54,6 +54,7 @@ export class ListIncidentsShrinkRequest extends $dara.Model {
    * GmtModified
    */
   orderFieldName?: string;
+  owners?: string[];
   /**
    * @remarks
    * This parameter is required.
@@ -110,6 +111,7 @@ export class ListIncidentsShrinkRequest extends $dara.Model {
       nextToken: 'NextToken',
       orderDirection: 'OrderDirection',
       orderFieldName: 'OrderFieldName',
+      owners: 'Owners',
       pageNumber: 'PageNumber',
       pageSize: 'PageSize',
       regionId: 'RegionId',
@@ -135,6 +137,7 @@ export class ListIncidentsShrinkRequest extends $dara.Model {
       nextToken: 'string',
       orderDirection: 'string',
       orderFieldName: 'string',
+      owners: { 'type': 'array', 'itemType': 'string' },
       pageNumber: 'number',
       pageSize: 'number',
       regionId: 'string',
@@ -148,6 +151,9 @@ export class ListIncidentsShrinkRequest extends $dara.Model {
   }
 
   validate() {
+    if(Array.isArray(this.owners)) {
+      $dara.Model.validateArray(this.owners);
+    }
     if(Array.isArray(this.threatLevel)) {
       $dara.Model.validateArray(this.threatLevel);
     }

package/src/models/ListNormalizationFieldsResponseBody.ts

@@ -2,7 +2,90 @@
 import * as $dara from '@darabonba/typescript';
 
 
+export class ListNormalizationFieldsResponseBodyNormalizationFieldsNormalizationFieldJsonKeys extends $dara.Model {
+  /**
+   * @example
+   * 1736386610000
+   */
+  createTime?: number;
+  /**
+   * @example
+   * 告警等级
+   */
+  normalizationFieldDescription?: string;
+  /**
+   * @example
+   * 枚举值：1、2、3、4、5
+   */
+  normalizationFieldExample?: string;
+  /**
+   * @example
+   * preset
+   */
+  normalizationFieldFrom?: string;
+  /**
+   * @example
+   * alert_name
+   */
+  normalizationFieldName?: string;
+  normalizationFieldRequired?: boolean;
+  normalizationFieldReserved?: boolean;
+  normalizationFieldTokenize?: boolean;
+  /**
+   * @example
+   * text
+   */
+  normalizationFieldType?: string;
+  /**
+   * @example
+   * 1736386610000
+   */
+  updateTime?: number;
+  static names(): { [key: string]: string } {
+    return {
+      createTime: 'CreateTime',
+      normalizationFieldDescription: 'NormalizationFieldDescription',
+      normalizationFieldExample: 'NormalizationFieldExample',
+      normalizationFieldFrom: 'NormalizationFieldFrom',
+      normalizationFieldName: 'NormalizationFieldName',
+      normalizationFieldRequired: 'NormalizationFieldRequired',
+      normalizationFieldReserved: 'NormalizationFieldReserved',
+      normalizationFieldTokenize: 'NormalizationFieldTokenize',
+      normalizationFieldType: 'NormalizationFieldType',
+      updateTime: 'UpdateTime',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      createTime: 'number',
+      normalizationFieldDescription: 'string',
+      normalizationFieldExample: 'string',
+      normalizationFieldFrom: 'string',
+      normalizationFieldName: 'string',
+      normalizationFieldRequired: 'boolean',
+      normalizationFieldReserved: 'boolean',
+      normalizationFieldTokenize: 'boolean',
+      normalizationFieldType: 'string',
+      updateTime: 'number',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class ListNormalizationFieldsResponseBodyNormalizationFields extends $dara.Model {
+  /**
+   * @example
+   * 1736386610000
+   */
+  createTime?: number;
   /**
    * @example
    * NETWORK_CATEGORY。
@@ -18,11 +101,19 @@ export class ListNormalizationFieldsResponseBodyNormalizationFields extends $dar
    * 173326*******。
    */
   normalizationFieldExample?: string;
+  /**
+   * @example
+   * preset
+   */
+  normalizationFieldFrom?: string;
+  normalizationFieldJsonIndexAll?: boolean;
+  normalizationFieldJsonKeys?: ListNormalizationFieldsResponseBodyNormalizationFieldsNormalizationFieldJsonKeys[];
   /**
    * @example
    * cloud_user。
    */
   normalizationFieldName?: string;
+  normalizationFieldRequired?: boolean;
   /**
    * @example
    * true。
@@ -33,6 +124,7 @@ export class ListNormalizationFieldsResponseBodyNormalizationFields extends $dar
    * true。
    */
   normalizationFieldReserved?: boolean;
+  normalizationFieldTokenize?: boolean;
   /**
    * @example
    * varchar。
@@ -43,33 +135,55 @@ export class ListNormalizationFieldsResponseBodyNormalizationFields extends $dar
    * NETWORK_SESSION_ACTIVITY。
    */
   normalizationSchemaId?: string;
+  /**
+   * @example
+   * 1736386610000
+   */
+  updateTime?: number;
   static names(): { [key: string]: string } {
     return {
+      createTime: 'CreateTime',
       normalizationCategoryId: 'NormalizationCategoryId',
       normalizationFieldDescription: 'NormalizationFieldDescription',
       normalizationFieldExample: 'NormalizationFieldExample',
+      normalizationFieldFrom: 'NormalizationFieldFrom',
+      normalizationFieldJsonIndexAll: 'NormalizationFieldJsonIndexAll',
+      normalizationFieldJsonKeys: 'NormalizationFieldJsonKeys',
       normalizationFieldName: 'NormalizationFieldName',
+      normalizationFieldRequired: 'NormalizationFieldRequired',
       normalizationFieldRequirement: 'NormalizationFieldRequirement',
       normalizationFieldReserved: 'NormalizationFieldReserved',
+      normalizationFieldTokenize: 'NormalizationFieldTokenize',
       normalizationFieldType: 'NormalizationFieldType',
       normalizationSchemaId: 'NormalizationSchemaId',
+      updateTime: 'UpdateTime',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
+      createTime: 'number',
       normalizationCategoryId: 'string',
       normalizationFieldDescription: 'string',
       normalizationFieldExample: 'string',
+      normalizationFieldFrom: 'string',
+      normalizationFieldJsonIndexAll: 'boolean',
+      normalizationFieldJsonKeys: { 'type': 'array', 'itemType': ListNormalizationFieldsResponseBodyNormalizationFieldsNormalizationFieldJsonKeys },
       normalizationFieldName: 'string',
+      normalizationFieldRequired: 'boolean',
       normalizationFieldRequirement: 'boolean',
       normalizationFieldReserved: 'boolean',
+      normalizationFieldTokenize: 'boolean',
       normalizationFieldType: 'string',
       normalizationSchemaId: 'string',
+      updateTime: 'number',
     };
   }
 
   validate() {
+    if(Array.isArray(this.normalizationFieldJsonKeys)) {
+      $dara.Model.validateArray(this.normalizationFieldJsonKeys);
+    }
     super.validate();
   }
 

package/src/models/ListNormalizationRulesResponseBody.ts

@@ -36,6 +36,11 @@ export class ListNormalizationRulesResponseBodyNormalizationRules extends $dara.
    */
   createTime?: number;
   extendContentPacked?: string;
+  /**
+   * @example
+   * flat
+   */
+  extendFieldStoreMode?: string;
   /**
    * @example
    * NETWORK_CATEGORY。
@@ -111,6 +116,7 @@ export class ListNormalizationRulesResponseBodyNormalizationRules extends $dara.
     return {
       createTime: 'CreateTime',
       extendContentPacked: 'ExtendContentPacked',
+      extendFieldStoreMode: 'ExtendFieldStoreMode',
       normalizationCategoryId: 'NormalizationCategoryId',
       normalizationRuleDescription: 'NormalizationRuleDescription',
       normalizationRuleExpression: 'NormalizationRuleExpression',
@@ -133,6 +139,7 @@ export class ListNormalizationRulesResponseBodyNormalizationRules extends $dara.
     return {
       createTime: 'number',
       extendContentPacked: 'string',
+      extendFieldStoreMode: 'string',
       normalizationCategoryId: 'string',
       normalizationRuleDescription: 'string',
       normalizationRuleExpression: 'string',

package/src/models/ListNormalizationSchemasResponseBody.ts

@@ -3,11 +3,26 @@ import * as $dara from '@darabonba/typescript';
 
 
 export class ListNormalizationSchemasResponseBodyNormalizationSchemas extends $dara.Model {
+  /**
+   * @example
+   * 1736386610000
+   */
+  createTime?: number;
   /**
    * @example
    * NETWORK_CATEGORY。
    */
   normalizationCategoryId?: string;
+  /**
+   * @example
+   * 网络五元组日志
+   */
+  normalizationSchemaDescription?: string;
+  /**
+   * @example
+   * preset
+   */
+  normalizationSchemaFrom?: string;
   /**
    * @example
    * HTTP_ACTIVITY。
@@ -23,21 +38,48 @@ export class ListNormalizationSchemasResponseBodyNormalizationSchemas extends $d
    * network-activity。
    */
   normalizationSchemaTargetLogStore?: string;
+  /**
+   * @example
+   * network-activity
+   */
+  targetLogStore?: string;
+  /**
+   * @example
+   * network-activity
+   */
+  targetStoreView?: string;
+  /**
+   * @example
+   * 1736386610000
+   */
+  updateTime?: number;
   static names(): { [key: string]: string } {
     return {
+      createTime: 'CreateTime',
       normalizationCategoryId: 'NormalizationCategoryId',
+      normalizationSchemaDescription: 'NormalizationSchemaDescription',
+      normalizationSchemaFrom: 'NormalizationSchemaFrom',
       normalizationSchemaId: 'NormalizationSchemaId',
       normalizationSchemaName: 'NormalizationSchemaName',
       normalizationSchemaTargetLogStore: 'NormalizationSchemaTargetLogStore',
+      targetLogStore: 'TargetLogStore',
+      targetStoreView: 'TargetStoreView',
+      updateTime: 'UpdateTime',
     };
   }
 
   static types(): { [key: string]: any } {
     return {
+      createTime: 'number',
       normalizationCategoryId: 'string',
+      normalizationSchemaDescription: 'string',
+      normalizationSchemaFrom: 'string',
       normalizationSchemaId: 'string',
       normalizationSchemaName: 'string',
       normalizationSchemaTargetLogStore: 'string',
+      targetLogStore: 'string',
+      targetStoreView: 'string',
+      updateTime: 'number',
     };
   }
 

package/src/models/RefreshDataSourceRequest.ts

@@ -0,0 +1,52 @@
+// This file is auto-generated, don't edit it
+import * as $dara from '@darabonba/typescript';
+
+
+export class RefreshDataSourceRequest extends $dara.Model {
+  /**
+   * @example
+   * ds-jl67vixpe1scwysgyu3x
+   */
+  dataSourceId?: string;
+  /**
+   * @example
+   * zh
+   */
+  lang?: string;
+  /**
+   * @example
+   * cn-hangzhou
+   */
+  regionId?: string;
+  /**
+   * @example
+   * 113091674488****
+   */
+  roleFor?: number;
+  static names(): { [key: string]: string } {
+    return {
+      dataSourceId: 'DataSourceId',
+      lang: 'Lang',
+      regionId: 'RegionId',
+      roleFor: 'RoleFor',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      dataSourceId: 'string',
+      lang: 'string',
+      regionId: 'string',
+      roleFor: 'number',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+

package/src/models/RefreshDataSourceResponse.ts

@@ -0,0 +1,40 @@
+// This file is auto-generated, don't edit it
+import * as $dara from '@darabonba/typescript';
+import { RefreshDataSourceResponseBody } from "./RefreshDataSourceResponseBody";
+
+
+export class RefreshDataSourceResponse extends $dara.Model {
+  headers?: { [key: string]: string };
+  statusCode?: number;
+  body?: RefreshDataSourceResponseBody;
+  static names(): { [key: string]: string } {
+    return {
+      headers: 'headers',
+      statusCode: 'statusCode',
+      body: 'body',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
+      statusCode: 'number',
+      body: RefreshDataSourceResponseBody,
+    };
+  }
+
+  validate() {
+    if(this.headers) {
+      $dara.Model.validateMap(this.headers);
+    }
+    if(this.body && typeof (this.body as any).validate === 'function') {
+      (this.body as any).validate();
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+

package/src/models/RefreshDataSourceResponseBody.ts

@@ -0,0 +1,34 @@
+// This file is auto-generated, don't edit it
+import * as $dara from '@darabonba/typescript';
+
+
+export class RefreshDataSourceResponseBody extends $dara.Model {
+  /**
+   * @remarks
+   * Id of the request
+   * 
+   * @example
+   * 9AAA9ED9-78F4-5021-86DC-D51C7511****
+   */
+  requestId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      requestId: 'RequestId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      requestId: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+

package/src/models/UpdateDetectionRuleRequest.ts

@@ -8,11 +8,13 @@ export class UpdateDetectionRuleRequest extends $dara.Model {
    * Discovery
    */
   alertAttCk?: string;
+  alertDescription?: string;
   /**
    * @example
    * 1
    */
   alertLevel?: string;
+  alertName?: string;
   /**
    * @example
    * ALERT_ACTIVITY
@@ -179,7 +181,9 @@ export class UpdateDetectionRuleRequest extends $dara.Model {
   static names(): { [key: string]: string } {
     return {
       alertAttCk: 'AlertAttCk',
+      alertDescription: 'AlertDescription',
       alertLevel: 'AlertLevel',
+      alertName: 'AlertName',
       alertSchemaId: 'AlertSchemaId',
       alertTacticId: 'AlertTacticId',
       alertThresholdCount: 'AlertThresholdCount',
@@ -214,7 +218,9 @@ export class UpdateDetectionRuleRequest extends $dara.Model {
   static types(): { [key: string]: any } {
     return {
       alertAttCk: 'string',
+      alertDescription: 'string',
       alertLevel: 'string',
+      alertName: 'string',
       alertSchemaId: 'string',
       alertTacticId: 'string',
       alertThresholdCount: 'number',

package/src/models/UpdateNormalizationRuleRequest.ts

@@ -4,11 +4,21 @@ import * as $dara from '@darabonba/typescript';
 
 export class UpdateNormalizationRuleRequest extends $dara.Model {
   extendContentPacked?: string;
+  /**
+   * @example
+   * flat
+   */
+  extendFieldStoreMode?: string;
   /**
    * @example
    * zh。
    */
   lang?: string;
+  /**
+   * @example
+   * NETWORK_CATEGORY。
+   */
+  normalizationCategoryId?: string;
   /**
    * @example
    * normalization_rule_Z57np。
@@ -70,7 +80,9 @@ export class UpdateNormalizationRuleRequest extends $dara.Model {
   static names(): { [key: string]: string } {
     return {
       extendContentPacked: 'ExtendContentPacked',
+      extendFieldStoreMode: 'ExtendFieldStoreMode',
       lang: 'Lang',
+      normalizationCategoryId: 'NormalizationCategoryId',
       normalizationRuleDescription: 'NormalizationRuleDescription',
       normalizationRuleExpression: 'NormalizationRuleExpression',
       normalizationRuleFormat: 'NormalizationRuleFormat',
@@ -91,7 +103,9 @@ export class UpdateNormalizationRuleRequest extends $dara.Model {
   static types(): { [key: string]: any } {
     return {
       extendContentPacked: 'string',
+      extendFieldStoreMode: 'string',
       lang: 'string',
+      normalizationCategoryId: 'string',
       normalizationRuleDescription: 'string',
       normalizationRuleExpression: 'string',
       normalizationRuleFormat: 'string',

package/src/models/UpdateNormalizationRuleShrinkRequest.ts

@@ -4,11 +4,21 @@ import * as $dara from '@darabonba/typescript';
 
 export class UpdateNormalizationRuleShrinkRequest extends $dara.Model {
   extendContentPacked?: string;
+  /**
+   * @example
+   * flat
+   */
+  extendFieldStoreMode?: string;
   /**
    * @example
    * zh。
    */
   lang?: string;
+  /**
+   * @example
+   * NETWORK_CATEGORY。
+   */
+  normalizationCategoryId?: string;
   /**
    * @example
    * normalization_rule_Z57np。
@@ -70,7 +80,9 @@ export class UpdateNormalizationRuleShrinkRequest extends $dara.Model {
   static names(): { [key: string]: string } {
     return {
       extendContentPacked: 'ExtendContentPacked',
+      extendFieldStoreMode: 'ExtendFieldStoreMode',
       lang: 'Lang',
+      normalizationCategoryId: 'NormalizationCategoryId',
       normalizationRuleDescription: 'NormalizationRuleDescription',
       normalizationRuleExpression: 'NormalizationRuleExpression',
       normalizationRuleFormat: 'NormalizationRuleFormat',
@@ -91,7 +103,9 @@ export class UpdateNormalizationRuleShrinkRequest extends $dara.Model {
   static types(): { [key: string]: any } {
     return {
       extendContentPacked: 'string',
+      extendFieldStoreMode: 'string',
       lang: 'string',
+      normalizationCategoryId: 'string',
       normalizationRuleDescription: 'string',
       normalizationRuleExpression: 'string',
       normalizationRuleFormat: 'string',