@@ -10668,6 +10668,7 @@ components:
10668
10668
- $ref: '#/components/schemas/CustomDestinationForwardDestinationSplunk'
10669
10669
- $ref: '#/components/schemas/CustomDestinationForwardDestinationElasticsearch'
10670
10670
- $ref: '#/components/schemas/CustomDestinationForwardDestinationMicrosoftSentinel'
10671
+ - $ref: '#/components/schemas/CustomDestinationForwardDestinationGoogleSecurityOperations'
10671
10672
CustomDestinationForwardDestinationElasticsearch:
10672
10673
description: The Elasticsearch destination.
10673
10674
properties:
@@ -10725,6 +10726,42 @@ components:
10725
10726
type: string
10726
10727
x-enum-varnames:
10727
10728
- ELASTICSEARCH
10729
+ CustomDestinationForwardDestinationGoogleSecurityOperations:
10730
+ description: The Google Security Operations destination.
10731
+ properties:
10732
+ auth:
10733
+ $ref: '#/components/schemas/CustomDestinationGoogleSecurityOperationsDestinationAuth'
10734
+ customer_id:
10735
+ description: The customer ID of the Google Security Operations account.
10736
+ example: 123-456-7890
10737
+ type: string
10738
+ namespace:
10739
+ description: The namespace of the Google Security Operations account.
10740
+ example: google-security-operations-namespace
10741
+ type: string
10742
+ regional_endpoint:
10743
+ description: The `CustomDestinationForwardDestinationGoogleSecurityOperations`
10744
+ `regional_endpoint`.
10745
+ example: https://malachiteingestion-pa.googleapis.com
10746
+ type: string
10747
+ type:
10748
+ $ref: '#/components/schemas/CustomDestinationForwardDestinationGoogleSecurityOperationsType'
10749
+ required:
10750
+ - type
10751
+ - customer_id
10752
+ - regional_endpoint
10753
+ - namespace
10754
+ - auth
10755
+ type: object
10756
+ CustomDestinationForwardDestinationGoogleSecurityOperationsType:
10757
+ default: google_security_operations
10758
+ description: Type of the Google Security Operations destination.
10759
+ enum:
10760
+ - google_security_operations
10761
+ example: google_security_operations
10762
+ type: string
10763
+ x-enum-varnames:
10764
+ - GOOGLE_SECURITY_OPERATIONS
10728
10765
CustomDestinationForwardDestinationHttp:
10729
10766
description: The HTTP destination.
10730
10767
properties:
@@ -10826,6 +10863,55 @@ components:
10826
10863
type: string
10827
10864
x-enum-varnames:
10828
10865
- SPLUNK_HEC
10866
+ CustomDestinationGoogleSecurityOperationsDestinationAuth:
10867
+ description: Google Security Operations destination authentication.
10868
+ properties:
10869
+ client_email:
10870
+ description: The Google Security Operations client email.
10871
+
10872
+ type: string
10873
+ client_id:
10874
+ description: The Google Security Operations client ID. This field is not
10875
+ returned by the API.
10876
+ example: def123456
10877
+ type: string
10878
+ writeOnly: true
10879
+ private_key:
10880
+ description: The Google Security Operations private key. This field is not
10881
+ returned by the API.
10882
+ example: '-----BEGIN PRIVATE KEY-----\nMIIEvAIBADANBgkqhkiG9w0BAQEFAASCBK...\n-----END
10883
+ PRIVATE KEY-----\n'
10884
+ type: string
10885
+ writeOnly: true
10886
+ private_key_id:
10887
+ description: The Google Security Operations private key ID. This field is
10888
+ not returned by the API.
10889
+ example: abc12345678
10890
+ type: string
10891
+ writeOnly: true
10892
+ project_id:
10893
+ description: Google Security Operations project ID.
10894
+ example: gcp-project
10895
+ type: string
10896
+ type:
10897
+ $ref: '#/components/schemas/CustomDestinationGoogleSecurityOperationsDestinationAuthType'
10898
+ required:
10899
+ - type
10900
+ - project_id
10901
+ - private_key_id
10902
+ - client_email
10903
+ - client_id
10904
+ - private_key
10905
+ type: object
10906
+ CustomDestinationGoogleSecurityOperationsDestinationAuthType:
10907
+ default: gcp_private_key
10908
+ description: Type of the Google Security Operations destination authentication.
10909
+ enum:
10910
+ - gcp_private_key
10911
+ example: gcp_private_key
10912
+ type: string
10913
+ x-enum-varnames:
10914
+ - GCP_PRIVATE_KEY
10829
10915
CustomDestinationHttpDestinationAuth:
10830
10916
description: Authentication method of the HTTP requests.
10831
10917
oneOf:
@@ -10971,6 +11057,7 @@ components:
10971
11057
- $ref: '#/components/schemas/CustomDestinationResponseForwardDestinationSplunk'
10972
11058
- $ref: '#/components/schemas/CustomDestinationResponseForwardDestinationElasticsearch'
10973
11059
- $ref: '#/components/schemas/CustomDestinationResponseForwardDestinationMicrosoftSentinel'
11060
+ - $ref: '#/components/schemas/CustomDestinationResponseForwardDestinationGoogleSecurityOperations'
10974
11061
CustomDestinationResponseForwardDestinationElasticsearch:
10975
11062
description: The Elasticsearch destination.
10976
11063
properties:
@@ -11028,6 +11115,42 @@ components:
11028
11115
type: string
11029
11116
x-enum-varnames:
11030
11117
- ELASTICSEARCH
11118
+ CustomDestinationResponseForwardDestinationGoogleSecurityOperations:
11119
+ description: The Google Security Operations destination.
11120
+ properties:
11121
+ auth:
11122
+ $ref: '#/components/schemas/CustomDestinationResponseGoogleSecurityOperationsDestinationAuth'
11123
+ customer_id:
11124
+ description: The customer ID of the Google Security Operations account.
11125
+ example: 123-456-7890
11126
+ type: string
11127
+ namespace:
11128
+ description: The namespace of the Google Security Operations account.
11129
+ example: google-security-operations-namespace
11130
+ type: string
11131
+ regional_endpoint:
11132
+ description: The `CustomDestinationResponseForwardDestinationGoogleSecurityOperations`
11133
+ `regional_endpoint`.
11134
+ example: https://malachiteingestion-pa.googleapis.com
11135
+ type: string
11136
+ type:
11137
+ $ref: '#/components/schemas/CustomDestinationResponseForwardDestinationGoogleSecurityOperationsType'
11138
+ required:
11139
+ - type
11140
+ - customer_id
11141
+ - regional_endpoint
11142
+ - namespace
11143
+ - auth
11144
+ type: object
11145
+ CustomDestinationResponseForwardDestinationGoogleSecurityOperationsType:
11146
+ default: google_security_operations
11147
+ description: Type of the Google Security Operations destination.
11148
+ enum:
11149
+ - google_security_operations
11150
+ example: google_security_operations
11151
+ type: string
11152
+ x-enum-varnames:
11153
+ - GOOGLE_SECURITY_OPERATIONS
11031
11154
CustomDestinationResponseForwardDestinationHttp:
11032
11155
description: The HTTP destination.
11033
11156
properties:
@@ -11122,6 +11245,33 @@ components:
11122
11245
type: string
11123
11246
x-enum-varnames:
11124
11247
- SPLUNK_HEC
11248
+ CustomDestinationResponseGoogleSecurityOperationsDestinationAuth:
11249
+ description: Google Security Operations destination authentication.
11250
+ properties:
11251
+ client_email:
11252
+ description: The Google Security Operations client email.
11253
+
11254
+ type: string
11255
+ project_id:
11256
+ description: Google Security Operations project ID.
11257
+ example: gcp-project
11258
+ type: string
11259
+ type:
11260
+ $ref: '#/components/schemas/CustomDestinationResponseGoogleSecurityOperationsDestinationAuthType'
11261
+ required:
11262
+ - type
11263
+ - project_id
11264
+ - client_email
11265
+ type: object
11266
+ CustomDestinationResponseGoogleSecurityOperationsDestinationAuthType:
11267
+ default: gcp_private_key
11268
+ description: Type of the Google Security Operations destination authentication.
11269
+ enum:
11270
+ - gcp_private_key
11271
+ example: gcp_private_key
11272
+ type: string
11273
+ x-enum-varnames:
11274
+ - GCP_PRIVATE_KEY
11125
11275
CustomDestinationResponseHttpDestinationAuth:
11126
11276
description: Authentication method of the HTTP requests.
11127
11277
oneOf:
0 commit comments