Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 28 additions & 0 deletions .generator/schemas/v2/openapi.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -105369,6 +105369,9 @@ components:
SecurityMonitoringStandardRuleResponse:
description: Rule.
properties:
blocking:
description: Whether the rule blocks requests.
type: boolean
calculatedFields:
description: Calculated fields. Only allowed for scheduled rules - in other words, when schedulingOptions is also defined.
items:
Expand All @@ -105389,12 +105392,16 @@ components:
description: User ID of the user who created the rule.
format: int64
type: integer
creator:
$ref: "#/components/schemas/SecurityMonitoringUser"
customMessage:
description: Custom/Overridden message for generated signals (used in case of Default rule update).
type: string
customName:
description: Custom/Overridden name of the rule (used in case of Default rule update).
type: string
dataSource:
$ref: "#/components/schemas/SecurityMonitoringStandardDataSource"
defaultTags:
description: Default Tags for default rules (included in tags)
example:
Expand All @@ -105403,6 +105410,12 @@ components:
description: Default Tag.
type: string
type: array
dependencies:
description: Dependencies used by the rule.
items:
description: A dependency used by the rule.
type: string
type: array
deprecationDate:
description: When the rule will be deprecated, timestamp in milliseconds.
format: int64
Expand All @@ -105426,18 +105439,31 @@ components:
id:
description: The ID of the rule.
type: string
isBeta:
description: Whether the rule is in beta.
type: boolean
isDefault:
description: Whether the rule is included by default.
type: boolean
isDeleted:
description: Whether the rule has been deleted.
type: boolean
isDeprecated:
description: Whether the rule is deprecated.
type: boolean
isEnabled:
description: Whether the rule is enabled.
type: boolean
isPartner:
description: Whether the rule is provided by a partner.
type: boolean
message:
description: Message for generated signals.
type: string
metadata:
additionalProperties: {}
description: Additional metadata about the rule.
type: object
name:
description: The name of the rule.
type: string
Expand Down Expand Up @@ -105477,6 +105503,8 @@ components:
description: The date the rule was last updated, in milliseconds.
format: int64
type: integer
updater:
$ref: "#/components/schemas/SecurityMonitoringUser"
version:
description: The version of the rule.
format: int64
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,9 @@ def __init__(self, **kwargs):
"""
Create a new rule.

:param blocking: Whether the rule blocks requests.
:type blocking: bool, optional

:param calculated_fields: Calculated fields. Only allowed for scheduled rules - in other words, when schedulingOptions is also defined.
:type calculated_fields: [CalculatedField], optional

Expand All @@ -30,15 +33,24 @@ def __init__(self, **kwargs):
:param creation_author_id: User ID of the user who created the rule.
:type creation_author_id: int, optional

:param creator: A user.
:type creator: SecurityMonitoringUser, optional

:param custom_message: Custom/Overridden message for generated signals (used in case of Default rule update).
:type custom_message: str, optional

:param custom_name: Custom/Overridden name of the rule (used in case of Default rule update).
:type custom_name: str, optional

:param data_source: Source of events, either logs, audit trail, security signals, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
:type data_source: SecurityMonitoringStandardDataSource, optional

:param default_tags: Default Tags for default rules (included in tags)
:type default_tags: [str], optional

:param dependencies: Dependencies used by the rule.
:type dependencies: [str], optional

:param deprecation_date: When the rule will be deprecated, timestamp in milliseconds.
:type deprecation_date: int, optional

Expand All @@ -54,18 +66,30 @@ def __init__(self, **kwargs):
:param id: The ID of the rule.
:type id: str, optional

:param is_beta: Whether the rule is in beta.
:type is_beta: bool, optional

:param is_default: Whether the rule is included by default.
:type is_default: bool, optional

:param is_deleted: Whether the rule has been deleted.
:type is_deleted: bool, optional

:param is_deprecated: Whether the rule is deprecated.
:type is_deprecated: bool, optional

:param is_enabled: Whether the rule is enabled.
:type is_enabled: bool, optional

:param is_partner: Whether the rule is provided by a partner.
:type is_partner: bool, optional

:param message: Message for generated signals.
:type message: str, optional

:param metadata: Additional metadata about the rule.
:type metadata: {str: (bool, date, datetime, dict, float, int, list, str, UUID, none_type,)}, optional

:param name: The name of the rule.
:type name: str, optional

Expand Down Expand Up @@ -96,6 +120,9 @@ def __init__(self, **kwargs):
:param updated_at: The date the rule was last updated, in milliseconds.
:type updated_at: int, optional

:param updater: A user.
:type updater: SecurityMonitoringUser, optional

:param version: The version of the rule.
:type version: int, optional
"""
Expand Down
Loading
Loading