LINT.IfChange(dataSources)
| Enums | |
|---|---|
DATA_SOURCE_UNSPECIFIED |
|
UDM |
|
ENTITY |
|
INGESTION_METRICS |
|
RULE_DETECTIONS |
Used for the detections data source. |
RULESETS |
Used for rulesets with the detections data source. |
GLOBAL |
Used for the standard time range filter. |
IOC_MATCHES |
Used for the iocMatches data source. |
RULES |
Used for the rules data source. |
SOAR_CASES |
SOAR cases, identified as case. |
SOAR_PLAYBOOKS |
SOAR playbooks, identified as playbook. |
SOAR_CASE_HISTORY |
SOAR case history, identified as caseHistory. |
DATA_TABLE |
Used for the data tables source. |
INVESTIGATION |
Used as the data source for triage agent investigations. Identified as gemini_investigation. |
INVESTIGATION_FEEDBACK |
Used as the data source for user feedback on triage agent investigations. Identified as gemini_investigation_feedback. |