We've reorganized our navigation structure to align directly with your operational workflows. See the Google SecOps release notes for more information.
The enrichment source that an enrichment is from. For source that comes from external and does not have a log type, for example, GEO_IP_SERVICE, the ExternalEnrichmentSource field should be set.
JSON representation
{// Union field source can be only one of the following:"logType": string,"externalEnrichmentSource": enum (ExternalEnrichmentSource)// End of list of possible types for union field source.}
Fields
Union field source. The source of an enrichment can be either a log type or an external enrichment source that does not have a log type. source can be only one of the following:
logType
string
Required. Raw LogType of an enrichment source. Format: projects/{project}/locations/{location}/instances/{instance}/logTypes/{logType}
Required. Represents an enrichment source from external that does not have a log type. For example, GEO_IP_SERVICE for enrichment from the GeoIP service.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-05-18 UTC."],[],[]]
