Mapping degli endpoint API SIEM
Supportato in:
Google SecOps
SIEM
Questo documento mappa gli endpoint API SIEM legacy (API Backstory, incluse l'API di gestione dei clienti e l'API Ingestion) ai relativi endpoint API Chronicle moderni.
Tabella di mappatura delle API
| Area delle funzionalità | Metodo API legacy | Versione API legacy | Metodo API Chronicle | Autorizzazione IAM richiesta | Mappatura dettagliata di richieste e risposte |
|---|---|---|---|---|---|
| BigQuery | UpdateBigQueryAccess |
v1 | ProvideBigQueryAccess | chronicle.googleapis.com/bigQueryAccesses.provide |
ProvideBigQueryAccess |
| CuratedRule | ListCuratedRuleDetections |
v2 | LegacySearchCuratedDetections | chronicle.googleapis.com/legacies.legacySearchCuratedDetections |
LegacySearchCuratedDetections |
| CuratedRule | ListCuratedRules |
v2 | ListCuratedRules | chronicle.googleapis.com/curatedRules.list |
ListCuratedRules |
| LegacyAlert | UpdateAlert |
v1 | LegacyUpdateAlert | chronicle.googleapis.com/legacies.legacyUpdateAlert |
LegacyUpdateAlert |
| LegacyAlert | CreateSoarAlert |
v1 | LegacyCreateSoarAlert | chronicle.googleapis.com/legacies.legacyCreateSoarAlert |
LegacyCreateSoarAlert |
| Richiesta | CreateOrUpdateCase |
v1 | LegacyCreateOrUpdateCase | chronicle.googleapis.com/legacies.legacyCreateOrUpdateCase |
LegacyCreateOrUpdateCase |
| Esportazione dei dati | CancelDataExport |
v1 | CancelDataExport | chronicle.googleapis.com/dataExports.cancel |
— |
| Esportazione dei dati | CreateDataExport |
v1 | CreateDataExport | chronicle.googleapis.com/dataExports.create |
— |
| Esportazione dei dati | GetDataExport |
v1 | GetDataExport | chronicle.googleapis.com/dataExports.get |
— |
| Esportazione dei dati | ListAvailableLogTypes |
v1 | FetchLogTypesAvailableForExport | chronicle.googleapis.com/dataExports.fetchAvailableLogTypes |
— |
| DataTap | CreateDataTap |
v1 | CreateDataTap | chronicle.googleapis.com/dataTaps.create |
CreateDataTap |
| DataTap | DeleteDataTap |
v1 | DeleteDataTap | chronicle.googleapis.com/dataTaps.delete |
DeleteDataTap |
| DataTap | GetDataTap |
v1 | GetDataTap | chronicle.googleapis.com/dataTaps.get |
GetDataTap |
| DataTap | ListDataTaps |
v1 | ListDataTaps | chronicle.googleapis.com/dataTaps.list |
ListDataTaps |
| DataTap | UpdateDataTap |
v1 | UpdateDataTap | chronicle.googleapis.com/dataTaps.update |
UpdateDataTap |
| Feed | CreateFeed |
v1 | CreateFeed | chronicle.googleapis.com/feeds.create |
CreateFeed |
| Feed | DeleteFeed |
v1 | DeleteFeed | chronicle.googleapis.com/feeds.delete |
DeleteFeed |
| Feed | DisableFeed |
v1 | DisableFeed | chronicle.googleapis.com/feeds.disable |
DisableFeed |
| Feed | EnableFeed |
v1 | EnableFeed | chronicle.googleapis.com/feeds.enable |
EnableFeed |
| Feed | FetchFeedServiceAccount |
v1 | FetchServiceAccountForCustomer | chronicle.googleapis.com/feedServiceAccounts.fetch |
FetchServiceAccountForCustomer |
| Feed | GetFeed |
v1 | GetFeed | chronicle.googleapis.com/feeds.get |
GetFeed |
| Feed | GetFeedSchema |
v1 | ListLogTypeSchemas | chronicle.googleapis.com/logTypeSchemas.list |
ListLogTypeSchemas |
| Feed | GetLogTypeSchema |
v1 | ListLogTypeSchemas | chronicle.googleapis.com/logTypeSchemas.list |
ListLogTypeSchemas |
| Feed | ListFeeds |
v1 | ListFeeds | chronicle.googleapis.com/feeds.list |
ListFeeds |
| Feed | ListFeedSourceTypeSchemas |
v1 | ListFeedSourceTypeSchemas | chronicle.googleapis.com/feedSourceTypeSchemas.list |
ListFeedSourceTypeSchemas |
| Feed | ListLogTypeSchemas |
v1 | ListLogTypeSchemas | chronicle.googleapis.com/logTypeSchemas.list |
ListLogTypeSchemas |
| Feed | UpdateFeed |
v1 | UpdateFeed | chronicle.googleapis.com/feeds.update |
UpdateFeed |
| Agente di inoltro | CreateForwarder |
v2 | CreateForwarder | chronicle.googleapis.com/forwarders.create |
CreateForwarder |
| Agente di inoltro | GetForwarder |
v2 | GetForwarder | chronicle.googleapis.com/forwarders.get |
GetForwarder |
| Agente di inoltro | ListForwarders |
v2 | ListForwarders | chronicle.googleapis.com/forwarders.list |
ListForwarders |
| Agente di inoltro | UpdateForwarder |
v2 | UpdateForwarder | chronicle.googleapis.com/forwarders.update |
UpdateForwarder |
| Agente di inoltro | DeleteForwarder |
v2 | DeleteForwarder | chronicle.googleapis.com/forwarders.delete |
DeleteForwarder |
| Agente di inoltro | GenerateForwarderFiles |
v2 | GenerateForwarderFiles | chronicle.googleapis.com/forwarders.generateFiles |
— |
| Agente di inoltro | CreateCollector |
v2 | CreateCollector | chronicle.googleapis.com/collectors.create |
CreateCollector |
| Agente di inoltro | GetCollector |
v2 | GetCollector | chronicle.googleapis.com/collectors.get |
GetCollector |
| Agente di inoltro | ListCollectors |
v2 | ListCollectors | chronicle.googleapis.com/collectors.list |
ListCollectors |
| Agente di inoltro | UpdateCollector |
v2 | UpdateCollector | chronicle.googleapis.com/collectors.update |
UpdateCollector |
| Agente di inoltro | DeleteCollector |
v2 | DeleteCollector | chronicle.googleapis.com/collectors.delete |
DeleteCollector |
| Parser | ArchiveCbnParser |
v1 | DeactivateParser | chronicle.googleapis.com/parsers.deactivate |
DeactivateParser |
| Parser | CreateCbnParser |
v1 | CreateParser | chronicle.googleapis.com/parsers.create |
CreateParser |
| Parser | GetCbnParser |
v1 | GetParser | chronicle.googleapis.com/parsers.get |
GetParser |
| Parser | ListCbnParserHistory |
v1 | ListParsers | chronicle.googleapis.com/parsers.list |
ListParsers |
| Parser | ListCbnParsers |
v1 | ListParsers | chronicle.googleapis.com/parsers.list |
ListParsers |
| Parser | RetrieveSampleLogs |
v1 | ListLogs | chronicle.googleapis.com/logs.list |
ListLogs |
| Parser | ValidateCbnParser |
v1 | CreateParser | chronicle.googleapis.com/parsers.create |
CreateParser |
| Partner | CreateCustomer |
v1 | CreateTenant | chronicle.googleapis.com/tenants.create |
CreateTenant |
| Partner | GetCustomer |
v1 | GetInstance | chronicle.googleapis.com/instances.get |
— |
| Partner | GetForwarderConfigs |
v1 | GenerateForwarderFiles | chronicle.googleapis.com/forwarders.generateFiles |
— |
| Partner | ListCustomersOfPartner |
v1 | ListTenants | chronicle.googleapis.com/tenants.list |
— |
| Partner | SetAuthVersion |
v1 | UpdateInstance | chronicle.googleapis.com/instances.update |
— |
| Partner | SetComplianceRequirements |
v1 | UpdateInstance | chronicle.googleapis.com/instances.update |
— |
| Partner | SetUIState |
v1 | UpdateInstance | chronicle.googleapis.com/instances.update |
— |
| Partner | SetWorkforcePoolProvider |
v1 | UpdateInstance | chronicle.googleapis.com/instances.update |
— |
| ReferenceList | CreateReferenceList |
v2 | CreateReferenceList | chronicle.googleapis.com/referenceLists.create |
CreateReferenceList |
| ReferenceList | VerifyReferenceList |
v2 | VerifyReferenceList | chronicle.googleapis.com/referenceLists.verifyReferenceList |
VerifyReferenceList |
| ReferenceList | GetReferenceList |
v2 | GetReferenceList | chronicle.googleapis.com/referenceLists.get |
GetReferenceList |
| ReferenceList | ListReferenceLists |
v2 | ListReferenceLists | chronicle.googleapis.com/referenceLists.list |
ListReferenceLists |
| ReferenceList | UpdateReferenceList |
v2 | UpdateReferenceList | chronicle.googleapis.com/referenceLists.update |
UpdateReferenceList |
| RetroHunt | RunRetrohunt |
v2 | CreateRetrohunt | chronicle.googleapis.com/retrohunts.create |
CreateRetrohunt |
| RetroHunt | ListRetrohunts |
v2 | ListRetrohunts | chronicle.googleapis.com/retrohunts.list |
ListRetrohunts |
| RetroHunt | GetRetrohunt |
v2 | GetRetrohunt | chronicle.googleapis.com/retrohunts.get |
GetRetrohunt |
| RetroHunt | CancelRetrohunt |
v2 | CancelOperation | chronicle.googleapis.com/operations.cancel |
— |
| RetroHunt | WaitRetrohunt |
v2 | GetOperation | chronicle.googleapis.com/operations.get |
— |
| Regola | GetRule |
v2 | GetRule | chronicle.googleapis.com/rules.get |
GetRule |
| Regola | CreateRule |
v2 | CreateRule | chronicle.googleapis.com/rules.create |
CreateRule |
| Regola | VerifyRule |
v2 | VerifyRuleText | chronicle.googleapis.com/rules.verifyRuleText |
VerifyRuleText |
| Regola | ListRules |
v2 | ListRules | chronicle.googleapis.com/rules.list |
ListRules |
| Regola | DeleteRule |
v2 | DeleteRule | chronicle.googleapis.com/rules.delete |
DeleteRule |
| Regola | ArchiveRule |
v2 | UpdateRuleDeployment | chronicle.googleapis.com/ruleDeployments.update |
UpdateRuleDeployment |
| Regola | UnarchiveRule |
v2 | UpdateRuleDeployment | chronicle.googleapis.com/ruleDeployments.update |
UpdateRuleDeployment |
| Regola | EnableLiveRule |
v2 | UpdateRuleDeployment | chronicle.googleapis.com/ruleDeployments.update |
UpdateRuleDeployment |
| Regola | DisableLiveRule |
v2 | UpdateRuleDeployment | chronicle.googleapis.com/ruleDeployments.update |
UpdateRuleDeployment |
| Regola | ListRuleVersions |
v2 | ListRuleVersions | chronicle.googleapis.com/ruleVersions.list |
— |
| Regola | CreateRuleVersion |
v2 | CreateRule | chronicle.googleapis.com/rules.create |
CreateRule |
| Regola | EnableAlerting |
v2 | UpdateRuleDeployment | chronicle.googleapis.com/ruleDeployments.update |
UpdateRuleDeployment |
| Regola | DisableAlerting |
v2 | UpdateRuleDeployment | chronicle.googleapis.com/ruleDeployments.update |
UpdateRuleDeployment |
| Regola | ListDetections |
v2 | LegacySearchDetections | chronicle.googleapis.com/legacies.legacySearchDetections |
LegacySearchDetections |
| Regola | GetDetection |
v2 | LegacyGetDetection | chronicle.googleapis.com/legacies.legacyGetDetection |
LegacyGetDetection |
| Regola | StreamDetectionAlerts |
v2 | LegacyStreamDetectionAlerts | chronicle.googleapis.com/legacies.legacyStreamDetectionAlerts |
LegacyStreamDetectionAlerts |
| Regola | StreamTestRule |
v2 | LegacyTestRuleStreaming | chronicle.googleapis.com/legacies.legacyTestRuleStreaming |
LegacyTestRuleStreaming |
| Regole | CreateRule |
v1 | CreateRule | chronicle.googleapis.com/rules.create |
CreateRule |
| Regole | GetRule |
v1 | GetRule | chronicle.googleapis.com/rules.get |
GetRule |
| Regole | UpdateRule |
v1 | UpdateRule | chronicle.googleapis.com/rules.update |
UpdateRule |
| Regole | DeleteRule |
v1 | DeleteRule | chronicle.googleapis.com/rules.delete |
DeleteRule |
| Regole | EnableLiveRule |
v1 | UpdateRuleDeployment | chronicle.googleapis.com/ruleDeployments.update |
UpdateRuleDeployment |
| Regole | ListResults |
v1 | LegacySearchRuleResults | chronicle.googleapis.com/legacies.legacySearchRuleResults |
LegacySearchRuleResults |
| Regole | ListRules |
v1 | ListRules | chronicle.googleapis.com/rules.list |
ListRules |
| Regole | RunRule |
v1 | CreateRetrohunt | chronicle.googleapis.com/retrohunts.create |
CreateRetrohunt |
| Avvisi | StreamDetections |
v1 | StreamDetectionAlerts | chronicle.googleapis.com/legacies.streamDetectionAlerts |
LegacyStreamDetectionAlerts |
| Avvisi | StreamRuleNotifications |
v1 | StreamDetectionAlerts | chronicle.googleapis.com/legacies.streamDetectionAlerts |
LegacyStreamDetectionAlerts |
| Cerca | FetchUdmSearchView |
v1 | LegacyFetchUdmSearchView | chronicle.googleapis.com/legacies.legacyFetchUdmSearchView |
LegacyFetchUdmSearchView |
| Cerca | GetEvent |
v1 | GetEvent | chronicle.googleapis.com/events.get |
GetEvent |
| Log | GetLog |
v1 | GetLog | chronicle.googleapis.com/logs.get |
— |
| Cerca | ListArtifactAssets |
v1 | FindRelatedEntities | chronicle.googleapis.com/entities.findRelated |
FindRelatedEntities |
| IOC | ListArtifactIoCDetails |
v1 | LegacySearchArtifactIoCDetails | chronicle.googleapis.com/legacies.legacySearchArtifactIoCDetails |
— |
| Cerca | ListEvents |
v1 | LegacySearchAssetEvents | chronicle.googleapis.com/legacies.legacySearchAssetEvents |
LegacySearchAssetEvents |
| IOC | ListIoCs |
v1 | ListIocMatches | chronicle.googleapis.com/iocMatches.list |
— |
| Cerca | SearchRawLogs |
v1 | SearchRawLogs | chronicle.googleapis.com/rawLogs.search |
SearchRawLogs |
| Cerca | UdmSearch |
v1 | UdmSearch | chronicle.googleapis.com/events.udmSearch |
UdmSearch |
| Cerca | ListAliases |
v1 | SummarizeEntity | chronicle.googleapis.com/entities.summarize |
SummarizeEntity |
| Cerca | ListAssetAliases |
v1 | SummarizeEntity | chronicle.googleapis.com/entities.summarize |
SummarizeEntity |
| Cerca | ListUserAliases |
v1 | SummarizeEntity | chronicle.googleapis.com/entities.summarize |
SummarizeEntity |
| Avvisi in maiuscolo | GetUppercaseAlert |
v1 | LegacySearchFindings | chronicle.googleapis.com/legacies.legacySearchFindings. Nota: l'implementazione dell'endpoint è stata rimossa da Backstory a metà del 2023. |
— |
| Avvisi in maiuscolo | ListUppercaseAlerts |
v1 | LegacySearchFindings | chronicle.googleapis.com/legacies.legacySearchFindings. Nota: l'implementazione dell'endpoint è stata rimossa da Backstory a metà del 2023. |
— |
| API Ingestion | BatchCreateEntities |
v2 | ImportEntities | chronicle.googleapis.com/entities.import |
ImportEntities |
| API Ingestion | BatchCreateEvents |
v2 | ImportStatsEvents | chronicle.googleapis.com/forwarders.importStatsEvents |
ImportStatsEvents |
| API Ingestion | BatchCreateLogs |
v2 | ImportLogs | chronicle.googleapis.com/logs.import |
ImportLogs |
| API Ingestion | BatchCreateUDMEvents |
v2 | ImportEvents | chronicle.googleapis.com/events.import |
ImportEvents |
| API Ingestion | BatchCreateUnstructuredLogEntries |
v2 | ImportLogs | chronicle.googleapis.com/logs.import |
— |
| API Ingestion | CreateEntities |
v1 | ImportEntities | chronicle.googleapis.com/entities.import |
ImportEntities |
| API Ingestion | CreateUDMEvents |
v1 | ImportEvents | chronicle.googleapis.com/events.import |
ImportEvents |
| API Ingestion | CreateUnstructuredLogEntries |
v1 | ImportLogs | chronicle.googleapis.com/logs.import |
ImportLogs |
| API Ingestion | ListLogTypes |
v1 | ListLogTypes | chronicle.googleapis.com/logTypes.list |
ListLogTypes |
| API Ingestion | ListSupportedLogTypes |
v2 | ListLogTypeSettings | chronicle.googleapis.com/logTypeSettings.list |
ListLogTypeSettings |
| API Ingestion | PutEvent |
v1 | ImportEvents | chronicle.googleapis.com/events.import |
ImportEvents |
| API Ingestion | PutLog |
v1 | UpdateLogType | chronicle.googleapis.com/logTypes.update |
UpdateLogType |
Per saperne di più sulla migrazione dall'API Ingestion all'API Chronicle, consulta Metodi di importazione dell'API Chronicle.
Endpoint non mappati e rimossi
La tabella seguente elenca gli endpoint API legacy che non sono mappati alla moderna API Chronicle e la cui rimozione è pianificata, insieme alla motivazione aziendale:
| Area delle funzionalità | Metodo API legacy | Versione API legacy | Motivazione |
|---|---|---|---|
| RBAC legacy | CreateSubject |
v1 | Obsoleto. controllo dell'accesso è ora regolato da ruoli IAM granulari Google Cloud . |
| RBAC legacy | DeleteSubject |
v1 | Obsoleto. controllo dell'accesso è ora regolato da ruoli IAM granulari Google Cloud . |
| RBAC legacy | GetSubject |
v1 | Obsoleto. controllo dell'accesso è ora regolato da ruoli IAM granulari Google Cloud . |
| RBAC legacy | ListRoles |
v1 | Obsoleto. controllo dell'accesso è ora regolato da ruoli IAM granulari Google Cloud . |
| RBAC legacy | ListSubjects |
v1 | Obsoleto. controllo dell'accesso è ora regolato da ruoli IAM granulari Google Cloud . |
| RBAC legacy | UpdateRole |
v1 | Obsoleto. controllo dell'accesso è ora regolato da ruoli IAM granulari Google Cloud . |
| RBAC legacy | UpdateSubject |
v1 | Obsoleto. controllo dell'accesso è ora regolato da ruoli IAM granulari Google Cloud . |
| Parser | ListCbnParserErrors |
v1 | Non più richiesto o disponibile nel workflow di gestione dell'analizzatore moderno. |
| Partner | EnableIAM |
v1 | La funzionalità è già stata ritirata e viene gestita utilizzando meccanismi Google Cloud standard. |
| Partner | GenerateIamMigrationCommands |
v1 | La funzionalità è già stata ritirata ed è ridondante nell'architettura moderna. |
| Partner | GenerateIdPMetadata |
v1 | Ridondante nell'architettura moderna Google Cloudintegrata. |
| Partner | GetIngestionFilter |
v1 | Ridondante nell'architettura moderna Google Cloudintegrata. |
| Partner | SetGCPProjectLink |
v1 | Ridondante nell'architettura moderna Google Cloudintegrata. |
| Avvisi in maiuscolo | CreateCorrespondence |
v1 | La funzionalità è già stata ritirata. |
Hai bisogno di ulteriore assistenza? Ricevi risposte dai membri della community e dai professionisti di Google SecOps.