@robinmordasiewicz/f5xc-terraform-mcp 3.1.0 → 3.2.0

package/dist/docs/specifications/api/domains/threat_campaign.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "Threat Campaign",
     "description": "F5 Distributed Cloud Threat Campaign API specifications",
-    "version": "2.0.13",
+    "version": "2.0.15",
     "contact": {
       "name": "F5 Distributed Cloud",
       "url": "https://docs.cloud.f5.com"
@@ -523,7 +523,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310309+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691137+00:00"
           },
           "namespace": {
             "type": "string",
@@ -542,7 +542,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310316+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691144+00:00"
           },
           "path": {
             "type": "string",
@@ -713,7 +713,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310332+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691158+00:00"
           },
           "namespace": {
             "type": "string",
@@ -732,7 +732,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310337+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691163+00:00"
           },
           "user_id": {
             "type": "string",
@@ -802,7 +802,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310345+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691170+00:00"
           },
           "rule": {
             "$ref": "#/components/schemas/common_wafSimpleClientSrcRule"
@@ -879,7 +879,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310357+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691181+00:00"
           },
           "namespace": {
             "type": "string",
@@ -898,7 +898,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310361+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691184+00:00"
           },
           "tls_fingerprint_matcher": {
             "$ref": "#/components/schemas/policyTlsFingerprintMatcherType"
@@ -1009,7 +1009,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310374+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691197+00:00"
           },
           "namespace": {
             "type": "string",
@@ -1028,7 +1028,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310378+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691201+00:00"
           },
           "path": {
             "type": "string",
@@ -1133,7 +1133,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310389+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691212+00:00"
           },
           "namespace": {
             "type": "string",
@@ -1152,7 +1152,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310393+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691216+00:00"
           },
           "path": {
             "type": "string",
@@ -1251,7 +1251,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310404+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691225+00:00"
           },
           "namespace": {
             "type": "string",
@@ -1270,7 +1270,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310408+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691229+00:00"
           },
           "path": {
             "type": "string",
@@ -1456,7 +1456,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310422+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691244+00:00"
           },
           "namespace": {
             "type": "string",
@@ -1475,7 +1475,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310427+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691248+00:00"
           },
           "sec_event_name": {
             "type": "string",
@@ -1606,7 +1606,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310439+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691259+00:00"
           },
           "rule": {
             "$ref": "#/components/schemas/common_wafSimpleClientSrcRule"
@@ -1662,7 +1662,7 @@
             "x-original-maxLength": 256,
             "format": "hostname",
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310448+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691268+00:00"
           },
           "exclude_bot_names": {
             "type": "array",
@@ -1759,7 +1759,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310458+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691278+00:00"
           },
           "namespace": {
             "type": "string",
@@ -1778,7 +1778,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310463+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691282+00:00"
           },
           "req_path": {
             "type": "string",
@@ -1872,7 +1872,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310472+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691291+00:00"
           },
           "waf_exclusion_policy": {
             "$ref": "#/components/schemas/schemaviewsObjectRefType"
@@ -1920,7 +1920,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310479+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691298+00:00"
           },
           "namespace": {
             "type": "string",
@@ -1939,7 +1939,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310484+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691302+00:00"
           },
           "request_data": {
             "$ref": "#/components/schemas/app_securityRequestData"
@@ -2073,7 +2073,7 @@
             "maxLength": 15,
             "minLength": 3,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310500+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691317+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -2179,7 +2179,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310507+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691324+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -2273,6 +2273,8 @@
             "description": "Aggregations provide summary/analytics data over the security events response. If the number of security events that matched the query\nis large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations.\nThe aggregations are key'ed by user-defined aggregation name. The response will be key'ed with the same name.\nOptional.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over the security events response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over the security events response. If the number of security events that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregations are key'ed by...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -2319,7 +2321,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310518+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691334+00:00"
           },
           "query": {
             "type": "string",
@@ -2328,6 +2330,8 @@
             "x-displayname": "Query",
             "x-ves-example": "Query={app_type=\"blogging_app\"}",
             "x-f5xc-example": "\"query={app_type=\"blogging_app\"}\"",
+            "x-f5xc-description-short": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> :=...",
+            "x-f5xc-description-medium": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> := string One or more of these fields in the security event may be specified in the query. Vh_name - name of the virtual host src_site - source site city ...",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -2388,6 +2392,8 @@
             "description": "Aggregations provide summary/analytics data over the security events response. If the number of security events that matched the query\nis large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations.\nThe aggregation data is key'ed with the aggregation name specified in the request.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over the security events response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over the security events response. If the number of security events that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregation data is key'ed with the...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -2478,6 +2484,8 @@
               "$ref": "#/components/schemas/metricsSecurityMetricLabelFilter"
             },
             "x-displayname": "Label Filter.",
+            "x-f5xc-description-short": "List of label filter expressions of the form \"label\" \"value\". Response will only contain data that matches all the conditions specified in the .",
+            "x-f5xc-description-medium": "List of label filter expressions of the form \"label\" \"value\". Response will only contain data that matches all the conditions specified in the . One or more of the following labels can be specified in the label_filter. , , , .",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -2502,7 +2510,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310533+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691350+00:00"
           },
           "start_time": {
             "type": "string",
@@ -2539,6 +2547,8 @@
             "x-validation-rules": {
               "ves.io.schema.rules.string.query_step": "true"
             },
+            "x-f5xc-description-short": "Step is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in the response.",
+            "x-f5xc-description-medium": "Step is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in the response. The timestamps in the response will be t1=start_time, t2=t1+step, ... Tn=tn-1+step, where tn <= end_time.",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -2707,6 +2717,8 @@
             "description": "Aggregations provide summary/analytics data over the security events response. If the number of security events that matched the query\nis large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations.\nThe aggregations are key'ed by user-defined aggregation name. The response will be key'ed with the same name.\nOptional.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over the security events response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over the security events response. If the number of security events that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregations are key'ed by...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -2770,7 +2782,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310553+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691369+00:00"
           },
           "query": {
             "type": "string",
@@ -2779,6 +2791,8 @@
             "x-displayname": "Query",
             "x-ves-example": "Query={app_type=\"blogging_app\"}",
             "x-f5xc-example": "\"query={app_type=\"blogging_app\"}\"",
+            "x-f5xc-description-short": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> :=...",
+            "x-f5xc-description-medium": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> := string One or more of these fields in the security event may be specified in the query. Vh_name - name of the virtual host src_site - source site city ...",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -2796,6 +2810,8 @@
             "x-displayname": "Scroll",
             "x-ves-example": "True",
             "x-f5xc-example": "true",
+            "x-f5xc-description-short": "Scroll is used to retrieve large number of security events (or all security events) that matches the query.",
+            "x-f5xc-description-medium": "Scroll is used to retrieve large number of security events (or all security events) that matches the query. If scroll is set to true, the scroll_id in the response can be used in the scroll API to fetch the next batch of security events until there are no more security events left to return. The...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -2906,6 +2922,8 @@
             "x-displayname": "Scroll ID",
             "x-ves-example": "DXF1ZXJ5QW5kRmV0Y2gBAAAAAAAAAD4WYm9laVYtZndUQlNsdDcwakFMNjU1QQ==.",
             "x-f5xc-example": "DXF1ZXJ5QW5kRmV0Y2gBAAAAAAAAAD4WYm9laVYtZndUQlNsdDcwakFMNjU1QQ==",
+            "x-f5xc-description-short": "Long Base-64 encoded string which can be used to retrieve the next batch of security events using the scroll request.",
+            "x-f5xc-description-medium": "Long Base-64 encoded string which can be used to retrieve the next batch of security events using the scroll request. Empty scroll_id indicates no more messages to scroll (EOF).",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -2973,7 +2991,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310571+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691387+00:00"
           },
           "scroll_id": {
             "type": "string",
@@ -3018,6 +3036,8 @@
             "description": "Aggregations provide summary/analytics data over security incidents response. If the number of security incidents\nthat matched the query is large and cannot be returned in a single response message, user can GET helpful\ninsights/summary using aggregations. The aggregations are key'ed by user-defined aggregation name.\nThe response will be key'ed with the same name.\nOptional.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over security incidents response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over security incidents response. If the number of security incidents that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregations are key'ed by...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -3064,7 +3084,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310580+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691396+00:00"
           },
           "query": {
             "type": "string",
@@ -3073,6 +3093,8 @@
             "x-displayname": "Query",
             "x-ves-example": "Query={app_type=\"blogging_app\"}",
             "x-f5xc-example": "\"query={app_type=\"blogging_app\"}\"",
+            "x-f5xc-description-short": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> :=...",
+            "x-f5xc-description-medium": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> := string One or more of these fields in the security event may be specified in the query. Vh_name - name of the virtual host src_site - source site city ...",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -3133,6 +3155,8 @@
             "description": "Aggregations provide summary/analytics data over the security incidents response. If the number of security incidents\nthat matched the query is large and cannot be returned in a single response message, user can GET helpful\ninsights/summary using aggregations. The aggregation data is key'ed with the aggregation name specified in the request.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over the security incidents response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over the security incidents response. If the number of security incidents that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregation data is key'ed with...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -3183,6 +3207,8 @@
             "description": "Aggregations provide summary/analytics data over the security incidents response. If the number of security incidents\nthat matched the query is large and cannot be returned in a single response message, user can GET helpful\ninsights/summary using aggregations. The aggregations are key'ed by user-defined aggregation name. The response\nwill be key'ed with the same name.\nOptional.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over the security incidents response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over the security incidents response. If the number of security incidents that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregations are key'ed by...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -3246,7 +3272,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310595+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691411+00:00"
           },
           "query": {
             "type": "string",
@@ -3255,6 +3281,8 @@
             "x-displayname": "Query",
             "x-ves-example": "Query={app_type=\"blogging_app\"}",
             "x-f5xc-example": "\"query={app_type=\"blogging_app\"}\"",
+            "x-f5xc-description-short": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> :=...",
+            "x-f5xc-description-medium": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> := string One or more of these fields in the security incident may be specified in the query. Vh_name - name of the virtual host src_site - source site city ...",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -3272,6 +3300,8 @@
             "x-displayname": "Scroll",
             "x-ves-example": "True",
             "x-f5xc-example": "true",
+            "x-f5xc-description-short": "Scroll is used to retrieve large number of security incidents (or all security incidents) that matches the query.",
+            "x-f5xc-description-medium": "Scroll is used to retrieve large number of security incidents (or all security incidents) that matches the query. If scroll is set to true, the scroll_id in the response can be used in the scroll API to fetch the next batch of security events until there are no more security events left to...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -3382,6 +3412,8 @@
             "x-displayname": "Scroll ID",
             "x-ves-example": "DXF1ZXJ5QW5kRmV0Y2gBAAAAAAAAAD4WYm9laVYtZndUQlNsdDcwakFMNjU1QQ==.",
             "x-f5xc-example": "DXF1ZXJ5QW5kRmV0Y2gBAAAAAAAAAD4WYm9laVYtZndUQlNsdDcwakFMNjU1QQ==",
+            "x-f5xc-description-short": "Long Base-64 encoded string which can be used to retrieve the next batch of security incidents using the scroll request.",
+            "x-f5xc-description-medium": "Long Base-64 encoded string which can be used to retrieve the next batch of security incidents using the scroll request. Empty scroll_id indicates no more messages to scroll (EOF).",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -3449,7 +3481,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310613+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691451+00:00"
           },
           "scroll_id": {
             "type": "string",
@@ -3494,6 +3526,8 @@
             "description": "Aggregations provide summary/analytics data over the suspicious user logs response. If the number of logs that matched the query\nis large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations.\nThe aggregations are key'ed by user-defined aggregation name. The response will be key'ed with the same name.\nOptional.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over the suspicious user logs response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over the suspicious user logs response. If the number of logs that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregations are key'ed by user-defined...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -3540,7 +3574,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310622+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691461+00:00"
           },
           "query": {
             "type": "string",
@@ -3549,6 +3583,8 @@
             "x-displayname": "Query",
             "x-ves-example": "Query={vh_name=\"vh-1\", site=\"CE-01\"}",
             "x-f5xc-example": "\"query={vh_name=\"vh-1\", site=\"ce-01\"}\"",
+            "x-f5xc-description-short": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> :=...",
+            "x-f5xc-description-medium": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> := string One or more of these fields in the suspicious user logs may be specified in the query. Vh_name - name of the virtual host user - user ID site ...",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -3609,6 +3645,8 @@
             "description": "Aggregations provide summary/analytics data over the suspicious user logs response. If the number of logs that matched the query\nis large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations.\nThe aggregation data is key'ed with the aggregation name specified in the request.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over the suspicious user logs response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over the suspicious user logs response. If the number of logs that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregation data is key'ed with the...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -3659,6 +3697,8 @@
             "description": "Aggregations provide summary/analytics data over the suspicious user logs response. If the number of logs that matched the query\nis large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations.\nThe aggregations are key'ed by user-defined aggregation name. The response will be key'ed with the same name.\nOptional.",
             "title": "Aggregations.",
             "x-displayname": "Aggregations.",
+            "x-f5xc-description-short": "Aggregations provide summary/analytics data over the suspicious user logs response.",
+            "x-f5xc-description-medium": "Aggregations provide summary/analytics data over the suspicious user logs response. If the number of logs that matched the query is large and cannot be returned in a single response message, user can GET helpful insights/summary using aggregations. The aggregations are key'ed by user-defined...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -3722,7 +3762,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310638+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691477+00:00"
           },
           "query": {
             "type": "string",
@@ -3731,6 +3771,8 @@
             "x-displayname": "Query",
             "x-ves-example": "Query={vh_name=\"vh-1\", site=\"CE-01\"}",
             "x-f5xc-example": "\"query={vh_name=\"vh-1\", site=\"ce-01\"}\"",
+            "x-f5xc-description-short": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> :=...",
+            "x-f5xc-description-medium": "Query is used to specify the list of matchers syntax for query := {[<matcher>]} <matcher> := <field_name><operator>\"<value>\" <field_name> := string One or more of these fields in the suspicious user logs may be specified in the query. Vh_name - name of the virtual host user - user ID site ...",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -3748,6 +3790,8 @@
             "x-displayname": "Scroll",
             "x-ves-example": "True",
             "x-f5xc-example": "true",
+            "x-f5xc-description-short": "Scroll is used to retrieve large number of logs (or all logs) that matches the query.",
+            "x-f5xc-description-medium": "Scroll is used to retrieve large number of logs (or all logs) that matches the query. If scroll is set to true, the scroll_id in the response can be used in the scroll API to fetch the next batch of logs until there are no logs left to return. The number of logs in each batch is determined by...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -3858,6 +3902,8 @@
             "x-displayname": "Scroll ID",
             "x-ves-example": "DXF1ZXJ5QW5kRmV0Y2gBAAAAAAAAAD4WYm9laVYtZndUQlNsdDcwakFMNjU1QQ==.",
             "x-f5xc-example": "DXF1ZXJ5QW5kRmV0Y2gBAAAAAAAAAD4WYm9laVYtZndUQlNsdDcwakFMNjU1QQ==",
+            "x-f5xc-description-short": "Long Base-64 encoded string which can be used to retrieve the next batch of suspicous user logs using the scroll request.",
+            "x-f5xc-description-medium": "Long Base-64 encoded string which can be used to retrieve the next batch of suspicous user logs using the scroll request. Empty scroll_id indicates no more messages to scroll (EOF).",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -3925,7 +3971,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310655+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691495+00:00"
           },
           "scroll_id": {
             "type": "string",
@@ -3998,7 +4044,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310662+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691502+00:00"
           },
           "id": {
             "type": "string",
@@ -4112,7 +4158,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310673+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691513+00:00"
           },
           "references": {
             "type": "array",
@@ -4268,6 +4314,8 @@
             "description": "X-displayName: \"Step\"\nx-required\nstep is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in the response.\nThe timestamps in the response will be t1=start_time, t2=t1+step, ... Tn=tn-1+step, where tn <= end_time.\nFormat: [0-9][smhd], where s - seconds, m - minutes, h - hours, d - days.",
             "title": "Step",
             "x-f5xc-example": "5m",
+            "x-f5xc-description-short": "X-displayName: \"Step\" x-required step is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in...",
+            "x-f5xc-description-medium": "X-displayName: \"Step\" x-required step is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in the response. The timestamps in the response will be t1=start_time, t2=t1+step, ... Tn=tn-1+step, where tn <= end_time.",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -4671,6 +4719,8 @@
             "description": "X-displayName: \"Step\"\nx-required\nstep is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in the response.\nThe timestamps in the response will be t1=start_time, t2=t1+step, ... Tn=tn-1+step, where tn <= end_time.\nFormat: [0-9][smhd], where s - seconds, m - minutes, h - hours, d - days.",
             "title": "Step",
             "x-f5xc-example": "5m",
+            "x-f5xc-description-short": "X-displayName: \"Step\" x-required step is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in...",
+            "x-f5xc-description-medium": "X-displayName: \"Step\" x-required step is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in the response. The timestamps in the response will be t1=start_time, t2=t1+step, ... Tn=tn-1+step, where tn <= end_time.",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -6372,7 +6422,7 @@
             },
             "x-original-maxLength": 256,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310858+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691697+00:00"
           },
           "presence": {
             "type": "boolean",
@@ -6453,7 +6503,7 @@
             "readOnly": true,
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310865+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691705+00:00"
           },
           "name": {
             "type": "string",
@@ -6472,7 +6522,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310870+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691710+00:00"
           },
           "namespace": {
             "type": "string",
@@ -6491,7 +6541,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310874+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691714+00:00"
           },
           "tenant": {
             "type": "string",
@@ -6512,7 +6562,7 @@
             "x-field-mutability": "read-only",
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310879+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691718+00:00"
           },
           "uid": {
             "type": "string",
@@ -6534,7 +6584,7 @@
             "x-original-maxLength": 1024,
             "format": "uuid",
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310884+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691724+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -6572,7 +6622,7 @@
             "maxLength": 15,
             "minLength": 3,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310890+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691729+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -6792,7 +6842,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310911+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691751+00:00"
           },
           "order_by": {
             "$ref": "#/components/schemas/logOrderByData"
@@ -6894,7 +6944,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310923+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691764+00:00"
           },
           "order_by": {
             "$ref": "#/components/schemas/logOrderByData"
@@ -7004,7 +7054,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310938+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691779+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -7162,7 +7212,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310951+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691792+00:00"
           },
           "sub_aggs": {
             "type": "object",
@@ -7266,7 +7316,7 @@
             "maxLength": 15,
             "minLength": 3,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310969+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691811+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -7321,7 +7371,7 @@
             "maxLength": 15,
             "minLength": 3,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310975+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691818+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -7538,7 +7588,7 @@
             "maxLength": 16,
             "minLength": 7,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.310998+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691839+00:00"
           },
           "value": {
             "type": "number",
@@ -7554,7 +7604,7 @@
             "maxLength": 15,
             "minLength": 3,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311002+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691844+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -7680,7 +7730,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311014+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691855+00:00"
           },
           "sec_event_type": {
             "type": "string",
@@ -7815,7 +7865,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311027+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691868+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -7892,7 +7942,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311055+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691874+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -8458,7 +8508,7 @@
             },
             "x-original-maxLength": 256,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311109+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691920+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -9033,7 +9083,7 @@
             },
             "x-original-maxLength": 256,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311128+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691938+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -9282,6 +9332,8 @@
             "x-validation-rules": {
               "ves.io.schema.rules.repeated.max_items": "16"
             },
+            "x-f5xc-description-short": "List of predicates for all cookies that need to be matched.",
+            "x-f5xc-description-medium": "List of predicates for all cookies that need to be matched. The criteria for matching each cookie is described in individual instances of CookieMatcherType. The actual cookie values are extracted from the request API as a list of strings for each cookie name.",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -9304,6 +9356,8 @@
             "x-validation-rules": {
               "ves.io.schema.rules.repeated.max_items": "16"
             },
+            "x-f5xc-description-short": "List of predicates for various HTTP headers that need to match.",
+            "x-f5xc-description-medium": "List of predicates for various HTTP headers that need to match. The criteria for matching each HTTP header are described in individual HeaderMatcherType instances. The actual HTTP header values are extracted from the request API as a list of strings for each HTTP header type.",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -9326,6 +9380,8 @@
             "x-validation-rules": {
               "ves.io.schema.rules.repeated.max_items": "16"
             },
+            "x-f5xc-description-short": "List of predicates for various JWT claims that need to match.",
+            "x-f5xc-description-medium": "List of predicates for various JWT claims that need to match. The criteria for matching each JWT claim are described in individual JWTClaimMatcherType instances. The actual JWT claims values are extracted from the JWT payload as a list of strings.",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -9348,6 +9404,8 @@
             "x-validation-rules": {
               "ves.io.schema.rules.repeated.max_items": "16"
             },
+            "x-f5xc-description-short": "List of predicates for all query parameters that need to be matched.",
+            "x-f5xc-description-medium": "List of predicates for all query parameters that need to be matched. The criteria for matching each query parameter are described in individual instances of QueryParameterMatcherType. The actual query parameter values are extracted from the request API as a list of strings for each query...",
             "x-f5xc-required-for": {
               "minimum_config": false,
               "create": false,
@@ -9849,7 +9907,7 @@
             },
             "x-original-maxLength": 256,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311170+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691980+00:00"
           },
           "name": {
             "type": "string",
@@ -9879,7 +9937,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311174+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691984+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -9983,7 +10041,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311180+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691990+00:00"
           },
           "previous_value": {
             "type": "string",
@@ -10017,7 +10075,7 @@
             },
             "x-original-maxLength": 1024,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311187+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.691996+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -10116,6 +10174,8 @@
             "description": "X-displayName: \"Step\"\nx-required\nstep is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in the response.\nThe timestamps in the response will be t1=start_time, t2=t1+step, ... Tn=tn-1+step, where tn <= end_time.\nFormat: [0-9][smhd], where s - seconds, m - minutes, h - hours, d - days.",
             "title": "Step",
             "x-f5xc-example": "5m",
+            "x-f5xc-description-short": "X-displayName: \"Step\" x-required step is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in...",
+            "x-f5xc-description-medium": "X-displayName: \"Step\" x-required step is the resolution width, which determines the number of the data points [x-axis (time)] to be returned in the response. The timestamps in the response will be t1=start_time, t2=t1+step, ... Tn=tn-1+step, where tn <= end_time.",
             "minLength": 0,
             "maxLength": 1024,
             "x-f5xc-required-for": {
@@ -10565,7 +10625,7 @@
             },
             "x-original-maxLength": 256,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311231+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.692040+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -10688,7 +10748,7 @@
             },
             "x-original-maxLength": 256,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311242+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.692052+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {
@@ -10742,7 +10802,7 @@
             },
             "x-original-maxLength": 128,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311247+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.692056+00:00"
           },
           "namespace": {
             "type": "string",
@@ -10767,7 +10827,7 @@
             },
             "x-original-maxLength": 64,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311251+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.692060+00:00"
           },
           "tenant": {
             "type": "string",
@@ -10794,7 +10854,7 @@
             "x-field-mutability": "read-only",
             "x-original-maxLength": 64,
             "x-reconciled-from-discovery": true,
-            "x-reconciled-at": "2026-01-05T18:28:44.311255+00:00"
+            "x-reconciled-at": "2026-01-06T16:57:01.692064+00:00"
           }
         },
         "x-f5xc-minimum-configuration": {