Skip to main content
Google Cloud Documentation
Technology areas
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Generative AI
  • Industry solutions
  • Networking
  • Observability and monitoring
  • Security
  • Storage
Cross-product tools
  • Access and resources management
  • Costs and usage management
  • Infrastructure as code
  • Migration
  • SDK, languages, frameworks, and tools
/
Console
  • English
  • Deutsch
  • Español – América Latina
  • Français
  • Português – Brasil
  • 中文 – 简体
  • 日本語
  • 한국어
Sign in
  • Google Security Operations
Start free
Overview Guides Reference Resources
Google Cloud Documentation
  • Technology areas
    • More
    • Overview
    • Guides
    • Reference
    • Resources
  • Cross-product tools
    • More
  • Console
  • Google SecOps API reference
  • APIs and libraries overview
  • Chronicle API reference
    • Chronicle API overview
    • Permissions to Chronicle API
    • v1
      • REST Resources
      • projects.locations.instances
        • Overview
        • get
      • projects.locations.instances.dataAccessLabels
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.dataAccessScopes
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.operations
        • Overview
        • cancel
        • delete
        • get
        • list
      • projects.locations.instances.referenceLists
        • Overview
        • create
        • get
        • list
        • patch
      • projects.locations.instances.rules
        • Overview
        • create
        • delete
        • get
        • getDeployment
        • list
        • listRevisions
        • patch
        • updateDeployment
      • projects.locations.instances.rules.deployments
        • Overview
        • list
      • projects.locations.instances.rules.retrohunts
        • Overview
        • create
        • get
        • list
      • projects.locations.instances.watchlists
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • Types
      • ReferenceListView
      • RuleDeployment
      • RuleView
    • v1beta
      • REST Resources
      • projects.locations.instances
        • Overview
        • generateCollectionAgentAuth
        • get
        • getThreatCollectionFilterSet
        • submitResponseFeedback
      • projects.locations.instances.alertGroupingRules
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.announcements
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.caseCloseDefinitions
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.caseQueueFilters
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.caseStageDefinitions
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.caseTagDefinitions
        • Overview
        • create
        • delete
        • get
        • import
        • list
        • patch
      • projects.locations.instances.cases
        • Overview
        • addTag
        • createInsight
        • executeBulkAddTag
        • executeBulkAssign
        • executeBulkChangePriority
        • executeBulkChangeStage
        • executeBulkClose
        • executeBulkReopen
        • generateReport
        • get
        • getCaseOverviewData
        • list
        • merge
        • patch
        • pauseSla
        • removeTag
        • resolveOverviewWidget
        • resumeSla
      • projects.locations.instances.cases.caseAlerts
        • Overview
        • get
        • list
        • move
        • patch
        • pauseSla
        • resumeSla
        • setSla
      • projects.locations.instances.cases.caseAlerts.connectorEvents
        • Overview
        • get
        • getFormatted
        • list
      • projects.locations.instances.cases.caseAlerts.involvedEntities
        • Overview
        • addProperty
        • create
        • fetchCards
        • get
        • list
        • patch
        • updateProperty
      • projects.locations.instances.cases.caseComments
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.cases.caseWallRecords
        • Overview
        • get
        • list
      • projects.locations.instances.dataAccessLabels
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.dataAccessScopes
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.dynamicParameters
        • Overview
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.emailTemplates
        • Overview
        • batchDelete
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.entities
        • Overview
        • import
      • projects.locations.instances.entitiesBlocklists
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.environmentGroups
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.environments
        • Overview
        • create
        • delete
        • get
        • list
        • patch
        • resetWeights
      • projects.locations.instances.events
        • Overview
        • import
      • projects.locations.instances.feedPacks
        • Overview
        • get
        • list
      • projects.locations.instances.feedServiceAccounts
        • Overview
        • fetchServiceAccountForCustomer
      • projects.locations.instances.feedSourceTypeSchemas
        • Overview
        • list
      • projects.locations.instances.feedSourceTypeSchemas.logTypeSchemas
        • Overview
        • list
      • projects.locations.instances.feeds
        • Overview
        • create
        • delete
        • disable
        • enable
        • generateSecret
        • get
        • importPushLogs
        • list
        • patch
      • projects.locations.instances.forwarders
        • Overview
        • create
        • delete
        • generateForwarderFiles
        • get
        • importStatsEvents
        • list
        • patch
      • projects.locations.instances.forwarders.collectors
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.integrations.actions
        • Overview
        • create
        • delete
        • executeTest
        • fetchActionsByEnvironment
        • fetchTemplate
        • get
        • list
        • patch
      • projects.locations.instances.integrations.actions.revisions
        • Overview
        • create
        • delete
        • list
        • rollback
      • projects.locations.instances.integrations.connectors
        • Overview
        • create
        • delete
        • executeTest
        • fetchTemplate
        • get
        • list
        • patch
      • projects.locations.instances.integrations.connectors.connectorInstances.logs
        • Overview
        • get
        • list
      • projects.locations.instances.integrations.connectors.revisions
        • Overview
        • create
        • delete
        • list
        • rollback
      • projects.locations.instances.integrations.integrationInstances
        • Overview
        • create
        • delete
        • executeTest
        • fetchAffectedItems
        • fetchDefaultInstance
        • get
        • list
        • patch
      • projects.locations.instances.integrations.jobs
        • Overview
        • create
        • delete
        • executeTest
        • fetchTemplate
        • get
        • list
        • patch
      • projects.locations.instances.integrations.jobs.jobInstances
        • Overview
        • create
        • delete
        • get
        • list
        • patch
        • runOnDemand
      • projects.locations.instances.integrations.jobs.jobInstances.logs
        • Overview
        • get
        • list
      • projects.locations.instances.integrations.jobs.revisions
        • Overview
        • create
        • delete
        • list
        • rollback
      • projects.locations.instances.integrations.managers
        • Overview
        • create
        • delete
        • fetchTemplate
        • get
        • list
        • patch
      • projects.locations.instances.integrations.managers.revisions
        • Overview
        • create
        • delete
        • get
        • list
        • rollback
      • projects.locations.instances.legacySoarUsers
        • Overview
        • getLocalization
        • updateLocalization
      • projects.locations.instances.legacySoarUsers.attachments
        • Overview
        • delete
        • download
        • get
        • list
        • upload
      • projects.locations.instances.legacySoarUsers.userNotifications
        • Overview
        • count
        • get
        • list
        • markAsRead
      • projects.locations.instances.legacySoarUsers.workdeskContacts
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.legacySoarUsers.workdeskLinks
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.legacySoarUsers.workdeskNotes
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.logTypes
        • Overview
        • list
      • projects.locations.instances.logTypes.logs
        • Overview
        • import
      • projects.locations.instances.moduleSettings
        • Overview
        • get
        • list
        • rebrandingSettings
      • projects.locations.instances.moduleSettings.properties
        • Overview
        • batchUpdate
        • get
        • list
        • patch
        • testSettings
      • projects.locations.instances.operations
        • Overview
        • cancel
        • delete
        • get
        • list
      • projects.locations.instances.propertySchemaDefinitions
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.referenceLists
        • Overview
        • create
        • get
        • list
        • patch
      • projects.locations.instances.requestTemplates
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.rules
        • Overview
        • create
        • delete
        • get
        • getDeployment
        • list
        • listRevisions
        • patch
        • updateDeployment
      • projects.locations.instances.rules.deployments
        • Overview
        • list
      • projects.locations.instances.rules.retrohunts
        • Overview
        • create
        • get
        • list
      • projects.locations.instances.slaDefinitions
        • Overview
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.soarDomains
        • Overview
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.soarNetworks
        • Overview
        • create
        • delete
        • deleteAll
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.socRoles
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.systemNotifications
        • Overview
        • count
        • get
        • list
        • markAsRead
      • projects.locations.instances.tasks
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.threatCollections
        • Overview
        • fetchIocMatchMetadata
        • fetchRelated
        • get
      • projects.locations.instances.watchlists
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.webhooks
        • Overview
        • create
        • delete
        • exportLogs
        • get
        • getLogs
        • getStatistics
        • list
        • patch
        • revokeUrl
      • Types
      • CaseInsightSeverity
      • CaseInsightType
      • FeedSourceType
      • ForwarderMetadata
      • QuickActionButton
      • QuickActionInstanceConfiguration
      • QuickActionParameterValue
      • ReferenceListView
      • RegexFilter
      • RuleDeployment
      • RuleView
      • ScriptResultEntityData
      • Sla
      • UserLocalization
    • v1alpha
      • REST Resources
      • projects.locations.instances
        • Overview
        • batchValidateWatchlistEntities
        • computeAllFindingsRefinementActivities
        • continuePocGraduation
        • countAllCuratedRuleSetDetections
        • createFeedback
        • delete
        • extractSyslog
        • fetchFederationAccess
        • findEntity
        • findEntityAlerts
        • findRelatedEntities
        • findUdmFieldValues
        • generateCollectionAgentAuth
        • generateSoarAuthJwt
        • generateSoarChatMessage
        • generateUdmKeyValueMappings
        • generateWorkspaceConnectionToken
        • get
        • getBigQueryExport
        • getEnrichmentCombination
        • getMultitenantDirectory
        • getRiskConfig
        • getThreatCollectionFilterSet
        • graduatePocInstance
        • legacyCaseFederationPlatforms
        • legacySystemMetadata
        • listAllFindingsRefinementDeployments
        • patch
        • queryProductSourceStats
        • searchEntities
        • searchRawLogs
        • submitResponseFeedback
        • summarizeEntitiesFromQuery
        • summarizeEntity
        • testFindingsRefinement
        • translateUdmQuery
        • translateYlRule
        • udmSearch
        • undelete
        • updateBigQueryExport
        • updateRiskConfig
        • validateQuery
        • verifyNonce
        • verifyReferenceList
        • verifyRuleText
      • projects.locations.instances.alertGroupingRules
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.analytics
        • Overview
        • list
      • projects.locations.instances.analytics.entities.analyticValues
        • Overview
        • list
      • projects.locations.instances.announcements
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.bigQueryAccess
        • Overview
        • provide
      • projects.locations.instances.bigQueryExport
        • Overview
        • provision
      • projects.locations.instances.caseCloseDefinitions
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.caseQueueFilters
        • Overview
        • create
        • delete
        • get
        • getShareConfig
        • list
        • patch
        • updateShareConfig
      • projects.locations.instances.caseStageDefinitions
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.caseTagDefinitions
        • Overview
        • create
        • delete
        • get
        • import
        • list
        • patch
      • projects.locations.instances.cases
        • Overview
        • addTag
        • countPriorities
        • createInsight
        • executeBulkAddTag
        • executeBulkAssign
        • executeBulkChangePriority
        • executeBulkChangeStage
        • executeBulkClose
        • executeBulkReopen
        • generateReport
        • get
        • getCaseOverviewData
        • list
        • merge
        • patch
        • pauseSla
        • removeTag
        • resolveOverviewWidget
        • resumeSla
      • projects.locations.instances.cases.alerts.customFieldValues
        • Overview
        • batchUpdate
        • get
        • list
        • patch
      • projects.locations.instances.cases.caseAlerts
        • Overview
        • createRecommendationLongRunning
        • fetchRecommendation
        • get
        • getAlertOverviewData
        • list
        • move
        • patch
        • pauseSla
        • resolveOverviewWidget
        • resumeSla
        • setSla
      • projects.locations.instances.cases.caseAlerts.connectorEvents
        • Overview
        • get
        • getFormatted
        • list
      • projects.locations.instances.cases.caseAlerts.contextProperties
        • Overview
        • clearAll
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.cases.caseAlerts.involvedEntities
        • Overview
        • addProperty
        • create
        • fetchCards
        • get
        • list
        • patch
        • updateProperty
      • projects.locations.instances.cases.caseComments
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.cases.caseWallRecords
        • Overview
        • favorite
        • fetchActivitiesCount
        • get
        • list
      • projects.locations.instances.cases.chatMessages
        • Overview
        • create
        • get
        • list
        • pinMessage
        • unpinMessage
        • unreadMessagesCount
        • upload
      • projects.locations.instances.cases.chatMessages.attachments
        • Overview
        • download
      • projects.locations.instances.cases.contextProperties
        • Overview
        • clearAll
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.cases.customFieldValues
        • Overview
        • batchUpdate
        • get
        • list
        • patch
      • projects.locations.instances.contentHub.contentPacks
        • Overview
        • add
        • alignPlaybooks
        • delete
        • deployConnectorInstances
        • deployPlaybooks
        • deployTestCases
        • download
        • get
        • installIntegration
        • list
        • markAsDeployed
        • upload
      • projects.locations.instances.contentHub.featuredContentNativeDashboards
        • Overview
        • get
        • install
        • list
      • projects.locations.instances.contentHub.featuredContentRules
        • Overview
        • list
      • projects.locations.instances.contentHub.featuredContentSearchQueries
        • Overview
        • get
        • installFeaturedContentSearchQuery
        • list
      • projects.locations.instances.contextProperties
        • Overview
        • clearAll
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.coverageDetails
        • Overview
        • get
        • list
      • projects.locations.instances.curatedRuleSetCategories
        • Overview
        • get
        • list
      • projects.locations.instances.curatedRuleSetCategories.curatedRuleSets
        • Overview
        • countCuratedRuleSetDetections
        • get
        • list
      • projects.locations.instances.curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments
        • Overview
        • batchUpdate
        • get
        • list
        • patch
      • projects.locations.instances.curatedRules
        • Overview
        • get
        • list
      • projects.locations.instances.customFields
        • Overview
        • batchGet
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.customLists
        • Overview
        • batchDelete
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.dashboardCharts
        • Overview
        • batchGet
        • get
      • projects.locations.instances.dashboardQueries
        • Overview
        • execute
        • get
      • projects.locations.instances.dashboardScheduledReports
        • Overview
        • create
        • delete
        • duplicate
        • fetchHistory
        • get
        • list
        • patch
        • trigger
      • projects.locations.instances.dashboards
        • Overview
        • copy
        • create
        • delete
        • get
        • list
      • projects.locations.instances.dataAccessLabels
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.dataAccessScopes
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.dataExports
        • Overview
        • cancel
        • create
        • fetchServiceAccountForDataExport
        • fetchavailablelogtypes
        • get
        • list
        • patch
      • projects.locations.instances.dataTableOperationErrors
        • Overview
        • get
      • projects.locations.instances.dataTables
        • Overview
        • create
        • delete
        • get
        • list
        • patch
        • upload
      • projects.locations.instances.dataTables.dataTableRows
        • Overview
        • bulkCreate
        • bulkCreateAsync
        • bulkGet
        • bulkReplace
        • bulkReplaceAsync
        • bulkUpdate
        • bulkUpdateAsync
        • create
        • delete
        • get
        • list
        • patch
        • upload
      • projects.locations.instances.dataTaps
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.dynamicParameters
        • Overview
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.emailTemplates
        • Overview
        • batchDelete
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.enrichmentControls
        • Overview
        • create
        • delete
        • disable
        • get
        • list
      • projects.locations.instances.entities
        • Overview
        • get
        • import
        • modifyEntityRiskScore
        • queryEntityRiskScoreModifications
      • projects.locations.instances.entitiesBlocklists
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.entityRiskScores
        • Overview
        • query
      • projects.locations.instances.environmentGroups
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.environments
        • Overview
        • create
        • delete
        • get
        • list
        • patch
        • resetWeights
      • projects.locations.instances.errorNotificationConfigs
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.events
        • Overview
        • batchGet
        • fetchEnrichedEvent
        • get
        • import
      • projects.locations.instances.federationGroups
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.feedPacks
        • Overview
        • get
        • list
      • projects.locations.instances.feedServiceAccounts
        • Overview
        • fetchServiceAccountForCustomer
      • projects.locations.instances.feedSourceTypeSchemas
        • Overview
        • list
      • projects.locations.instances.feedSourceTypeSchemas.logTypeSchemas
        • Overview
        • list
      • projects.locations.instances.feeds
        • Overview
        • create
        • delete
        • disable
        • enable
        • generateSecret
        • get
        • importPushLogs
        • list
        • patch
        • scheduleTransfer
      • projects.locations.instances.findingsGraph
        • Overview
        • exploreNode
        • initializeGraph
      • projects.locations.instances.findingsRefinements
        • Overview
        • computeFindingsRefinementActivity
        • create
        • get
        • getDeployment
        • list
        • patch
        • updateDeployment
      • projects.locations.instances.formDynamicParameters
        • Overview
        • get
        • list
        • saveForm
      • projects.locations.instances.forwarders
        • Overview
        • create
        • delete
        • generateForwarderFiles
        • get
        • importStatsEvents
        • list
        • patch
      • projects.locations.instances.forwarders.collectors
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.ingestionLogLabels
        • Overview
        • list
      • projects.locations.instances.ingestionLogNamespaces
        • Overview
        • list
      • projects.locations.instances.integrations
        • Overview
        • create
        • delete
        • download
        • downloadDependency
        • exportIntegrationItems
        • fetchAffectedItems
        • fetchAgentIntegrations
        • fetchCommercialDiff
        • fetchDependencies
        • fetchRestrictedAgents
        • get
        • getFetchProductionDiff
        • getFetchStagingDiff
        • import
        • importIntegrationDependency
        • importIntegrationItems
        • list
        • patch
        • pushToProduction
        • pushToStaging
        • updateCustomIntegration
        • upload
      • projects.locations.instances.integrations.actions
        • Overview
        • create
        • delete
        • executeTest
        • fetchActionsByEnvironment
        • fetchTemplate
        • get
        • list
        • patch
      • projects.locations.instances.integrations.actions.revisions
        • Overview
        • create
        • delete
        • list
        • rollback
      • projects.locations.instances.integrations.connectors
        • Overview
        • create
        • delete
        • executeTest
        • fetchTemplate
        • get
        • list
        • patch
      • projects.locations.instances.integrations.connectors.connectorInstances
        • Overview
        • create
        • delete
        • fetchLatestDefinition
        • get
        • list
        • patch
        • runOnDemand
        • setLogsCollection
      • projects.locations.instances.integrations.connectors.connectorInstances.logs
        • Overview
        • get
        • list
      • projects.locations.instances.integrations.connectors.contextProperties
        • Overview
        • clearAll
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.integrations.connectors.revisions
        • Overview
        • create
        • delete
        • list
        • rollback
      • projects.locations.instances.integrations.integrationInstances
        • Overview
        • create
        • delete
        • executeTest
        • fetchAffectedItems
        • fetchDefaultInstance
        • get
        • list
        • patch
      • projects.locations.instances.integrations.jobs
        • Overview
        • create
        • delete
        • executeTest
        • fetchTemplate
        • get
        • list
        • patch
      • projects.locations.instances.integrations.jobs.contextProperties
        • Overview
        • clearAll
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.integrations.jobs.jobInstances
        • Overview
        • create
        • delete
        • get
        • list
        • patch
        • runOnDemand
      • projects.locations.instances.integrations.jobs.jobInstances.logs
        • Overview
        • get
        • list
      • projects.locations.instances.integrations.jobs.revisions
        • Overview
        • create
        • delete
        • list
        • rollback
      • projects.locations.instances.integrations.managers
        • Overview
        • create
        • delete
        • fetchTemplate
        • get
        • list
        • patch
      • projects.locations.instances.integrations.managers.revisions
        • Overview
        • create
        • delete
        • get
        • list
        • rollback
      • projects.locations.instances.investigations
        • Overview
        • fetchAssociated
        • get
        • list
        • trigger
      • projects.locations.instances.investigations.investigationComments
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.investigations.investigationSteps
        • Overview
        • get
        • list
      • projects.locations.instances.iocAssociations
        • Overview
        • batchGet
        • fetchRelated
        • get
      • projects.locations.instances.iocs
        • Overview
        • batchGet
        • fetchRelated
        • find
        • findFirstAndLastSeen
        • get
        • getIocState
        • searchCuratedDetectionsForIoc
        • updateIocState
      • projects.locations.instances.labsExperiments
        • Overview
        • execute
        • get
        • list
        • patch
      • projects.locations.instances.labsExperiments.executions
        • Overview
        • get
        • list
        • patch
      • projects.locations.instances.legacy
        • Overview
        • legacyBatchGetCases
        • legacyBatchGetCollections
        • legacyCreateOrUpdateCase
        • legacyCreateSoarAlert
        • legacyFetchAlertsView
        • legacyFetchUdmSearchCsv
        • legacyFetchUdmSearchView
        • legacyFindAssetEvents
        • legacyFindRawLogs
        • legacyFindUdmEvents
        • legacyGetAlert
        • legacyGetCuratedRulesTrends
        • legacyGetDetection
        • legacyGetEventForDetection
        • legacyGetRuleCounts
        • legacyGetRulesTrends
        • legacyRunTestRule
        • legacySearchArtifactEvents
        • legacySearchArtifactIoCDetails
        • legacySearchAssetEvents
        • legacySearchCuratedDetections
        • legacySearchCustomerStats
        • legacySearchDetections
        • legacySearchDomainsRecentlyRegistered
        • legacySearchDomainsTimingStats
        • legacySearchEnterpriseWideAlerts
        • legacySearchEnterpriseWideIoCs
        • legacySearchFindings
        • legacySearchIngestionStats
        • legacySearchIoCInsights
        • legacySearchRawLogs
        • legacySearchRawLogsV2
        • legacySearchRuleDetectionCountBuckets
        • legacySearchRuleDetectionEvents
        • legacySearchRuleResults
        • legacySearchRulesAlerts
        • legacySearchUserEvents
        • legacyStreamDetectionAlerts
        • legacyTestRuleStreaming
        • legacyUpdateAlert
      • projects.locations.instances.legacyAdvancedReports
        • Overview
        • download
        • legacyCopyLookerReport
        • legacyCreateLookerReport
        • legacyGetAdvancedReportProvider
        • legacyGetLookerReportDetails
        • legacyGetLookerReports
        • legacyRefreshLookerReports
        • legacyReport
        • legacyReportImport
        • legacyShareLookerReport
      • projects.locations.instances.legacyCaseFederationPlatforms
        • Overview
        • create
        • legacyDeleteCaseFederationPlatform
        • legacyGetCaseFederationPlatform
      • projects.locations.instances.legacyCases
        • Overview
        • addEvidence
        • createCase
        • createManualCase
        • createSimulatedCustomCase
        • deleteUseCase
        • executeManualAction
        • exportCustomCase
        • generateCollaboratorRequest
        • generateUseCases
        • getActionResultById
        • getCustomCaseDetails
        • getCustomCases
        • importCustomCase
        • injectSampleData
        • investigatorExtendCaseGraph
        • isCustomCaseExists
        • simulateAlert
      • projects.locations.instances.legacyConfiguration
        • Overview
        • legacyGetMaximumAlertsGroupingConfiguration
      • projects.locations.instances.legacyFederatedCases
        • Overview
        • legacyBatchPatchFederatedCases
        • legacyFetchCasesToSync
        • legacyGetFederatedCase
        • legacyListFederatedCases
      • projects.locations.instances.legacyPlaybooks
        • Overview
        • LegacyPlaybookApplyApprovalLink
        • download
        • exportWorkflowWithBlocksByIdentifier
        • legacyActionWidgetTemplate
        • legacyAddOrUpdatePlaybookCategory
        • legacyAiGenerate
        • legacyAiGenerateByAlert
        • legacyAiUpdate
        • legacyAttachNestedWorkflowToCase
        • legacyAttachWorkflowToCase
        • legacyCheckWorkflowNameInDifferentEnvironments
        • legacyCloneWorkflow
        • legacyCreateFeedback
        • legacyDeleteWorkflow
        • legacyDeleteWorkflows
        • legacyDuplicateNestedWorkflows
        • legacyDuplicateWorkflow
        • legacyDuplicateWorkflows
        • legacyExecuteManualStep
        • legacyExecuteStep
        • legacyFetchActionResultsForSimulation
        • legacyGetActionResultsOfWFId
        • legacyGetAiGenerationStatusByAlert
        • legacyGetCaseEntities
        • legacyGetContextGroupByKey
        • legacyGetDebugStepCaseData
        • legacyGetEnabledWFCards
        • legacyGetEnabledWFNames
        • legacyGetHtmlViewPresets
        • legacyGetNestedPlaybookParams
        • legacyGetNestedPlaybooksAsSteps
        • legacyGetNestedPlaybooksByEnvironmentsAsSteps
        • legacyGetNestedWorkflowDefaultInputs
        • legacyGetOverviewTemplate
        • legacyGetOverviewTemplates
        • legacyGetPendingStep
        • legacyGetPendingStepsCountForUser
        • legacyGetPendingStepsUserRelated
        • legacyGetPlaybookSimulationEnrichment
        • legacyGetPlaybookStatsMap
        • legacyGetPlaybooksUsingBlocks
        • legacyGetTriggerTags
        • legacyGetWorkFlowVersionLogs
        • legacyGetWorkflowCategories
        • legacyGetWorkflowFullInfoByIdentifier
        • legacyGetWorkflowFullInfoWithEnvFilterByIdentifier
        • legacyGetWorkflowInstance
        • legacyGetWorkflowInstanceSummary
        • legacyGetWorkflowInstancesCards
        • legacyGetWorkflowMenuCard
        • legacyGetWorkflowMenuCardWithEnvFilter
        • legacyGetWorkflowMenuCards
        • legacyGetWorkflowMenuCardsWithEnvFilter
        • legacyGetWorkflowStepInstance
        • legacyGetWorkflowsContainsActionAsync
        • legacyGetWorkflowsInvolvingAction
        • legacyMoveDefinitionsToCategory
        • legacyPermissions
        • legacyPermissionsOptions
        • legacyRemoveCategories
        • legacyRerunBlock
        • legacyRerunPlaybook
        • legacyRestoreWorkflowDefinition
        • legacyRunPlaybookInDebug
        • legacySaveLogVersionOfWorkflowDefinitions
        • legacySaveWorkflowDefinitions
        • legacySkip
        • legacyTerminateWorkflowInstance
        • legacyTestPipeExample
        • legacyUpdateDefinitionsPriority
      • projects.locations.instances.legacyPublisher
        • Overview
        • legacyAddConnectorPackage
        • legacyCloudLog
        • legacyCreateConnectorPackage
        • legacyDeleteIntegration
        • legacyGetDependencyFile
        • legacyGetHasLocallyScheduledRemoteConnectors
        • legacyGetInstaller
        • legacyGetIntegrationDependencies
        • legacyGetLatestIntegrationVersion
        • legacyGetTaskData
        • legacyKeepAlive
        • legacyListTasks
        • legacyPing
        • legacySetUpgradeInProgress
        • legacyUpdateIntegrationStatus
        • legacyUpdateTask
        • legacyUpdateTaskResult
      • projects.locations.instances.legacySdk
        • Overview
        • legacyAddAgentConnectorLogs
        • legacyAddAgentLogs
        • legacyAddAttachment
        • legacyAddComment
        • legacyAddEntitiesToCustomList
        • legacyAddOrUpdateCaseTask
        • legacyAddTag
        • legacyAlertFullDetails
        • legacyAlertSourceFile
        • legacyAlertsFullDetails
        • legacyAlertsTicketIdsByCaseId
        • legacyAnyEntityInCustomList
        • legacyAssignUser
        • legacyAttacheWorkflowToCase
        • legacyAttachmentData
        • legacyAttachments
        • legacyCaseFullDetails
        • legacyCaseMetadata
        • legacyChangeCaseStage
        • legacyChangePriority
        • legacyCloseAlert
        • legacyCloseCase
        • legacyCreateCase
        • legacyCreateCaseInsight
        • legacyCreateConnectorPackage
        • legacyCreateEntity
        • legacyGetAgentById
        • legacyGetAlertsTicketIdsFromCasesClosedSinceTimestamp
        • legacyGetAlertsToSync
        • legacyGetCaseClosureDetails
        • legacyGetCaseComments
        • legacyGetCaseTasks
        • legacyGetCasesByFilter
        • legacyGetCasesByRequest
        • legacyGetCasesIdByFilter
        • legacyGetConnectorParameters
        • legacyGetContextProperty
        • legacyGetCurrentSiemplifyVersion
        • legacyGetCustomListCategories
        • legacyGetFailedActions
        • legacyGetFailedConnectors
        • legacyGetFailedETLOperations
        • legacyGetFailedJobs
        • legacyGetIntegrationVersion
        • legacyGetProxySettings
        • legacyGetPublisherById
        • legacyGetRemoteConnectorsKeysMap
        • legacyGetSimilarCasesIds
        • legacyGetSyncAlerts
        • legacyGetSyncCases
        • legacyGetUpdatedSyncAlertsMetadata
        • legacyGetUpdatedSyncCasesMetadata
        • legacyGetUserFullName
        • legacyIntegrationConfiguration
        • legacyMarkAsImportant
        • legacyRaiseIncident
        • legacyRemoveEntitiesFromCustomList
        • legacySendEmailWithAttachment
        • legacySendSystemNotification
        • legacySetAlertSla
        • legacySetCaseSla
        • legacySetContextProperty
        • legacySystemInfo
        • legacyTrySetContextProperty
        • legacyUnraiseIncident
        • legacyUpdateAlertPriority
        • legacyUpdateAlertsAdditional
        • legacyUpdateBatchCasesExternalCaseIds
        • legacyUpdateCaseScore
        • legacyUpdateConfigurationProperty
        • legacyUpdateConnectorParameter
        • legacyUpdateEntities
        • legacyUpdateNewAlertsSyncStatus
      • projects.locations.instances.legacySearches
        • Overview
        • download
        • legacyCaseSearchEverything
        • legacyCaseSearchEverythingByIds
        • legacyEntitySearchCount
        • legacyEntitySearchEntities
        • legacyEntitySearchEverything
        • legacyGetCasesFilterUserAndRoles
        • legacyGetCasesFilterValues
        • legacyGetEntitiesFilterValues
      • projects.locations.instances.legacySoarAudit
        • Overview
        • legacyExportAuditLastWeekAsCsvV2
        • legacyGetAuditDataV2
      • projects.locations.instances.legacySoarDashboard
        • Overview
        • legacyAddOrUpdateDashboard
        • legacyAddOrUpdateDashboardWidget
        • legacyDeleteDashboard
        • legacyDeleteDashboardWidget
        • legacyGetCasesTimeToRespond
        • legacyGetDashboard
        • legacyGetDashboardCards
        • legacyGetDashboardCustomWidgetCaseIds
        • legacyGetDashboardPlaybookRuns
        • legacyGetDashboardPlaybooks
        • legacyGetDashboardWidgetCaseIds
        • legacyGetDashboardWidgetDefinitions
        • legacyGetDashboardWidgetValues
        • legacyGetOpenedAndClosedCasesTrends
        • legacyGetPlaybookMonitoring
        • legacyImportDashboard
        • legacySaveDashboardAsReportTemplate
      • projects.locations.instances.legacySoarIdpMappingGroups
        • Overview
        • batchUpdate
        • create
        • delete
        • get
        • getExternalProviders
        • list
        • patch
        • updateDefaultAccessSettings
      • projects.locations.instances.legacySoarPermissionGroups
        • Overview
        • list
      • projects.locations.instances.legacySoarReports
        • Overview
        • download
        • legacyAddOrUpdateReportSchedule
        • legacyAddOrUpdateReportTemplate
        • legacyAddOrUpdateReportWidget
        • legacyDeleteReportSchedule
        • legacyDuplicateReportTemplate
        • legacyGetAdvancedReports
        • legacyGetReportSchedules
        • legacyGetReportTemplates
        • legacyImportReportTemplate
        • legacyRefreshAdvancedReports
        • legacyRemoveReportTemplate
        • legacyRemoveReportWidget
        • legacyShareAdvancedReport
        • legacyUploadAdvancedReport
      • projects.locations.instances.legacySoarSettings
        • Overview
        • legacyAddVisualSummaryRecords
        • legacyGetAllPlaybookActionDefinitions
        • legacyGetCaseAlertPlaybookTriggerFilterValues
        • legacyGetCaseAlertTypeFilterValues
        • legacyGetCustomActionDetailsById
        • legacyGetDataSourcesForGroupingRule
        • legacyGetEnvironmentActionDefinitions
        • legacyGetEnvironmentStatistics
        • legacyGetPlaybookActionDefinitions
        • legacyGetProductsForGroupingRule
        • legacyGetSystemEventEntityTypes
        • legacyGetTimeZones
        • legacyGetUserRegistrationSettings
        • legacyGetVisualSummaryRecords
        • legacyIsPermittedToEnvironment
        • legacyTestEmailSettings
        • legacyUploadCustomActionResultJson
      • projects.locations.instances.legacySoarUsers
        • Overview
        • delete
        • get
        • getLocalization
        • getNotificationSettings
        • list
        • updateLocalization
        • updateNotificationSettings
      • projects.locations.instances.legacySoarUsers.attachments
        • Overview
        • delete
        • download
        • get
        • list
        • upload
      • projects.locations.instances.legacySoarUsers.userNotifications
        • Overview
        • count
        • get
        • list
        • markAsRead
      • projects.locations.instances.legacySoarUsers.workdeskContacts
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.legacySoarUsers.workdeskLinks
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.legacySoarUsers.workdeskNotes
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.legacySystem
        • Overview
        • legacyGetLicenseStatus
        • legacyGetMaximumDataRetentionValue
        • legacyGetSystemVersion
      • projects.locations.instances.legacySystemMetadata
        • Overview
        • placeholders
      • projects.locations.instances.logProcessingPipelines
        • Overview
        • associateStreams
        • create
        • delete
        • dissociateStreams
        • fetchAssociatedPipeline
        • fetchSampleLogsByStreams
        • get
        • list
        • patch
        • testPipeline
      • projects.locations.instances.logTypes
        • Overview
        • create
        • generateEventTypesSuggestions
        • getLogTypeSetting
        • legacySubmitParserExtension
        • list
        • runParser
        • updateLogTypeSetting
      • projects.locations.instances.logTypes.logTypeSettings
        • Overview
        • list
      • projects.locations.instances.logTypes.logs
        • Overview
        • import
        • list
      • projects.locations.instances.logTypes.parserExtensions
        • Overview
        • activate
        • create
        • delete
        • get
        • list
      • projects.locations.instances.logTypes.parserExtensions.extensionValidationReports
        • Overview
        • get
        • list
      • projects.locations.instances.logTypes.parserExtensions.extensionValidationReports.validationErrors
        • Overview
        • list
      • projects.locations.instances.logTypes.parserExtensions.validationReports
        • Overview
        • get
      • projects.locations.instances.logTypes.parserExtensions.validationReports.parsingErrors
        • Overview
        • list
      • projects.locations.instances.logTypes.parsers
        • Overview
        • activate
        • activateReleaseCandidateParser
        • copy
        • create
        • deactivate
        • delete
        • fetchParserCandidates
        • get
        • list
        • patch
      • projects.locations.instances.logTypes.parsers.validationReports
        • Overview
        • get
      • projects.locations.instances.logTypes.parsers.validationReports.parsingErrors
        • Overview
        • list
      • projects.locations.instances.logs
        • Overview
        • classify
      • projects.locations.instances.marketplaceIntegrations
        • Overview
        • fetchCommercialDiff
        • get
        • install
        • list
        • uninstall
      • projects.locations.instances.moduleSettings
        • Overview
        • get
        • list
        • rebrandingSettings
      • projects.locations.instances.moduleSettings.properties
        • Overview
        • batchUpdate
        • get
        • list
        • patch
        • testSettings
      • projects.locations.instances.nativeDashboards
        • Overview
        • addChart
        • create
        • delete
        • duplicate
        • duplicateChart
        • editChart
        • export
        • get
        • import
        • list
        • patch
        • removeChart
      • projects.locations.instances.notebooks
        • Overview
        • get
        • list
      • projects.locations.instances.ontologyRecords
        • Overview
        • delete
        • export
        • family
        • get
        • import
        • list
        • patch
        • statistics
      • projects.locations.instances.ontologyRecords.mappingRules
        • Overview
        • delete
        • fetchAll
        • get
        • list
        • patch
        • save
        • test
      • projects.locations.instances.ontologyRecords.visualFamilies
        • Overview
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.operations
        • Overview
        • cancel
        • delete
        • get
        • list
        • streamSearch
      • projects.locations.instances.propertySchemaDefinitions
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.referenceLists
        • Overview
        • create
        • get
        • list
        • patch
      • projects.locations.instances.remoteAgents
        • Overview
        • connectorValidRemoteAgents
        • create
        • delete
        • fetchEditableRemoteAgents
        • fetchInstallationCommand
        • fetchInstallerFile
        • fetchRedeployStatus
        • fetchRemoteAgentsCompatibleWithJobs
        • fetchRemoteAgentsInformation
        • get
        • list
        • migrateConnectors
        • patch
        • redeployRemoteAgent
        • sendRemoteAgentInstaller
        • upgradeRemoteAgent
      • projects.locations.instances.requestTemplates
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.ruleExecutionErrors
        • Overview
        • list
      • projects.locations.instances.rules
        • Overview
        • create
        • delete
        • get
        • getDeployment
        • list
        • listRevisions
        • modifyRules
        • patch
        • updateDeployment
      • projects.locations.instances.rules.deployments
        • Overview
        • list
      • projects.locations.instances.rules.retrohunts
        • Overview
        • create
        • get
        • list
      • projects.locations.instances.savedColumnSets
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.slaDefinitions
        • Overview
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.soarDomains
        • Overview
        • create
        • delete
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.soarNetworks
        • Overview
        • create
        • delete
        • deleteAll
        • export
        • get
        • import
        • list
        • patch
      • projects.locations.instances.socRoles
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.systemNotifications
        • Overview
        • count
        • get
        • list
        • markAsRead
      • projects.locations.instances.tasks
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.threatCollections
        • Overview
        • fetchEntityMetadata
        • fetchIocMatchMetadata
        • fetchRelated
        • fetchRuleMetadata
        • get
        • list
      • projects.locations.instances.uniqueEntities
        • Overview
        • addNote
        • download
        • fetchFull
        • get
        • list
        • patch
      • projects.locations.instances.users
        • Overview
        • clearConversationHistory
        • getPreferenceSet
        • updatePreferenceSet
      • projects.locations.instances.users.conversations
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.users.conversations.messages
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.users.savedColumnSets
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.users.searchQueries
        • Overview
        • create
        • delete
        • get
        • list
        • patch
      • projects.locations.instances.views
        • Overview
        • fetchPredefined
        • get
        • list
        • saveOverviewTemplate
      • projects.locations.instances.watchlists
        • Overview
        • create
        • delete
        • get
        • list
        • listEntities
        • patch
      • projects.locations.instances.watchlists.entities
        • Overview
        • add
        • batchAdd
        • batchRemove
        • remove
      • projects.locations.instances.webhooks
        • Overview
        • WebhookIngestion
        • create
        • delete
        • exportLogs
        • get
        • getLogs
        • getStatistics
        • list
        • patch
        • revokeUrl
      • Types
      • AlertCard
      • AlertCardSla
      • AlertCountByRule
      • AlertFieldAggregations
      • AlertOverviewWidget
      • ApiActionResultDataModel
      • ApiAdvancedReport
      • ApiDeleteWorkflowResult
      • ApiLoopIterationRequest
      • ApiSecurityEntityDataModel
      • ApiWorkflowCategoryDataModel
      • ApiWorkflowDebugDataModel
      • ApiWorkflowDefinitionDataModel
      • ApiWorkflowInstanceDataModel
      • ApiWorkflowMenuCardDefinitionDataModel
      • ApiWorkflowStepDataModel
      • ApiWorkflowStepInstanceDataModel
      • ApiWorkflowStepParameterDataModel
      • ApiWorkflowStepRelationDataModel
      • ApiWorkflowTriggerDataModel
      • ArtifactIndicator
      • AssetAlertEvent
      • AssetEdrEvent
      • AssetIndicator
      • BatchUpdateCustomFieldValuesResponse
      • BigQueryExport
      • BucketSize
      • BulkDataTableAsyncMediaResponse
      • CalculateFieldEnum
      • CaseApsGrapthWidget
      • CaseAssistantWidget
      • CaseDescriptionWidget
      • CaseImpactedResourcesWidget
      • CaseInsightSeverity
      • CaseInsightType
      • CasePriority
      • CaseRecommendationsWidget
      • CaseRelatedFindingsWidget
      • CaseType
      • Chip
      • CloseReasonEnum
      • Collection
      • CollectionType
      • ContentPackItemInstallationResponse
      • ContextGroupDataModel
      • CuratedRuleCount
      • CuratedRulePrecision
      • CustomSimulatedCaseKeyValue
      • CustomWidgetSubjectEnum
      • DashboardTimeRangeTypesEnums
      • DashboardView
      • DataSource
      • DataTableRowDetails
      • DemoDataComponent
      • DetectionCountBucket
      • DetectionExclusionApplication
      • DetectionView
      • DetectionWithSamples
      • DomainAndPorts
      • DomainAndTime
      • EnrichmentProvenance
      • EntitiesHighlightWidget
      • Entity
      • EntityIndicator
      • EntityRiskScoreModification
      • EntryMetadata
      • ErrorMessage
      • EventType
      • EventsWidget
      • ExplorationOptions
      • FeaturedContentMetadata
      • FeedSourceType
      • Feedback
      • FieldAndValue
      • FieldExtractors
      • FilterOperatorAndValues
      • FilterProperties
      • FindingsRefinementActivity
      • FindingsRefinementDeployment
      • FormWidget
      • ForwarderMetadata
      • Graph
      • GraphWidget
      • HtmlWidget
      • HttpDetails
      • HttpMethod
      • HttpProtocol
      • IdAndPath
      • InsightsWidget
      • InstallationType
      • IntRange
      • IntegrationDiff
      • IocEvent
      • IocState
      • IpAndPorts
      • IpNetworkEvent
      • JsonResultsWidget
      • KeyValueWidget
      • LanguageFeature
      • LegacyAdvancedReportCategory
      • LegacyApiActionDefinitionDataModel
      • LegacyApiMetadata
      • LegacyApiObjectDataModel
      • LegacyCase
      • LegacyCaseApiSecurityEntityDataModel
      • LegacyCaseInfo
      • LegacyCaseSearchEverythingResponse
      • LegacyDashboardWidgetDataModel
      • LegacyEntitySearchEverythingResult
      • LegacyFederatedCase
      • LegacyGetLookerReportsResponse
      • LegacyLookerReportResponse
      • LegacyPlaybookAiGenerationByAlertResult
      • LegacyPlaybookApiTriggerCondition
      • LegacyPlaybookOverviewTemplateData
      • LegacyPlaybookTemplateWidgetDefinition
      • LegacyPlaybookWorkflowAccessPermissions
      • LegacyRuleTrends
      • LegacySoarDashboardDataModel
      • LegacySoarDashboardWidgetDataModel
      • LegacyTask
      • Link
      • ListContextPropertiesResponse
      • ListCustomFieldValuesResponse
      • ListParsingErrorsResponse
      • ListSavedColumnSetsResponse
      • LogType
      • LogTypeSetting
      • MediaResponseInfo
      • MitreTactic
      • MitreTechnique
      • NativeDashboardView
      • NextPageToken
      • NoLogEnrichmentSource
      • Node
      • NotificationSettings
      • OverviewData
      • Paging
      • PlaybookCreationSourceEnum
      • PlaybooksAiServiceGenerationResponseMetadata
      • PotentiallyGroupedAlertsWidget
      • PreferenceSet
      • QuickActionButton
      • QuickActionInstanceConfiguration
      • QuickActionParameterValue
      • QuickActionsWidget
      • RawLogResult
      • ReferenceListView
      • RegexFilter
      • ResponsePlatformInfo
      • ResultsOrder
      • RiskConfig
      • RuleCompilationError
      • RuleDeployment
      • RuleOverviewWidget
      • RuleSource
      • RuleType
      • RuleView
      • RuntimeError
      • ScriptResultEntityData
      • SearchResult
      • SearchTimeRangeType
      • SecurityEntity
      • Severity
      • ShareConfig
      • SidebarEntry
      • SiemAlertsWidget
      • Sla
      • SortBy
      • StatisticsWidget
      • TargetScopeEnum
      • TextWidget
      • Timeline
      • TimelineWidget
      • TtrKeyInfo
      • UdmColumnType
      • UdmEventInfo
      • UdmProvenance
      • UpdateCustomFieldValuesRequest
      • UploadSamlSettings
      • UserEvent
      • UserFacingRuleType
      • UserIndicator
      • UserLocalization
      • UserType
      • WallActivitiesWidget
      • WidgetApiWorkflowStepParameterDataModel
      • WidgetContextGroup
      • WidgetFieldGroupData
      • WidgetResultStatus
      • WidgetTemplateGridColumns
      • WidgetTemplateType
      • WidgetWidthSizeTypes
      • WorkflowInstance
      • WorkflowPendingStepsWidget
      • YaraL2Detection
    • Shared Types
    • Quotas
    • Terraform
    • Client Libraries and SDK
  • Backstory API reference
    • DataTap Configuration
    • Detection Engine
    • Feed Management
    • Reference lists
    • Search
    • Forwarder Management
    • Customer Management
    • Data Export
    • Quotas
  • Ingestion API reference
  • SOAR API Reference
  • Content Hub Reference
    • Response integrations
      • Integrations list
      • A - B - C
        • Active Directory
        • Akamai
        • Alexa
        • AlgoSec
        • AlienVault USM Anywhere
        • AlienVault USM Appliance
        • AlienVaultTI
        • Amazon Macie
        • Anomali
        • Anomali Staxx
        • Anomali ThreatStream
        • Any.Run
        • APIVoid
        • AppSheet
        • ArcSight
        • ArcSight Logger
        • Area1
        • Armis
        • Atlassian Confluence Server
        • Attivo
        • Automox
        • AWS Cloud Trail
        • AWS CloudWatch
        • AWS Elastic Compute Cloud (EC2)
        • AWS GuardDuty
        • AWS IAM Access Analyzer
        • AWS Identity and Access Management (IAM)
        • AWS S3
        • AWS Security Hub
        • AWS WAF
        • Axonius
        • Azure Active Directory
        • Azure AD Identity Protection
        • Azure Monitor
        • Azure Security Center
        • BitSight
        • BlueLiv
        • BMC Helix Remedyforce
        • BMC Remedy ITSM
        • BulkWhoIs
        • CA Service Desk Manager
        • Carbon Black Defense
        • Carbon Black Protection
        • Carbon Black Response
        • Check Point Cloud Guard
        • Check Point Firewall
        • Check Point SandBlast
        • Check Point Threat Reputation
        • Cisco AMP
        • Cisco FirePower Management Center
        • Cisco ISE
        • Cisco Orbital
        • Cisco Threat Grid
        • CiscoUmbrella
        • Cloudflare
        • Cloud Logging
        • Cofense Triage
        • ConnectWise
        • CrowdStrike Falcon
        • CSV
        • Cuckoo
        • CyberArk PAM
        • CyberArk Vault
        • Cybereason
        • Cyberint
        • CyberX
        • Cylance
        • Cynet
      • D - E - F - G
        • Darktrace
        • DeepSight
        • Devo
        • Digital Shadows
        • DomainTools
        • DShield
        • Easy Vista
        • Elastica CloudSOC
        • ElasticSearch
        • ElasticSearchV7
        • Email
        • EmailV2
        • Endgame
        • Exabeam Advanced Analytics
        • Exchange
        • Exchange Extension Pack
        • ExtraHop
        • F5 Big IQ
        • F5 BIG-IP Access Policy Manager
        • F5 BIG-IP iControl API
        • Falcon Sandbox
        • FileOperation
        • FireEye AX
        • FireEye CM
        • FireEye ETP
        • FireEye EX
        • FireEye Helix
        • FireEye HX
        • FireEye NX
        • ForeScout CounterACT
        • FortiAnalyzer
        • Fortinet FortiSIEM
        • Forti Manager
        • FortiGate
        • Freshworks Freshservice
        • Gmail
        • Google Alert Center
        • Google BigQuery
        • Google Chat
        • Google Chronicle
        • Google Cloud API
        • Google Cloud Armor
        • Google Cloud Asset Inventory
        • Google Cloud Compute
        • Google Cloud IAM
        • Google Cloud Policy Intelligence
        • Google Cloud Recommender
        • Google Cloud Storage
        • Google Forms
        • Google Kubernetes Engine
        • Google Rapid Response (GRR)
        • Google Security Command Center
        • Google Threat Intelligence
        • Google Translate
        • Google Workspace
      • H - I - J - K
        • Harmony Mobile
        • HashiCorp Vault
        • HaveIBeenPwned
        • HCL BigFix Inventory
        • HTTP Rest API
        • HTTP v2
        • Humio
        • iBoss
        • Illusive Networks
        • Internet Storm Center
        • Intezer
        • IntSights
        • IPInfo
        • IPVoid
        • IronPort
        • IronScales
        • Ivanti Endpoint Manager
        • Jira
        • JoeSandbox
        • JuniperVSRX
      • L - M - N
        • Lastline
        • LogPoint
        • LogRhythm
        • MalShare
        • Malware Domain List
        • Mandiant
        • Mandiant ASM
        • Mandiant Digital Threat Monitoring
        • Mandiant Managed Defense
        • Mandiant Threat Intelligence
        • McAfee NSM
        • McAfee Active Response
        • McAfee ATD
        • McAfee EPO
        • McAfee ESM
        • McAfee Mvision EDR
        • McAfee Mvision EPO
        • McAfee TIEDXL
        • McAfee Web Gateway
        • Micro Focus ITSMA
        • Microsoft 365 Defender
        • Microsoft Azure Sentinel
        • Microsoft Defender ATP
        • Microsoft Graph Mail
        • Microsoft Graph Mail Delegated
        • Microsoft Graph Security
        • Microsoft Intune
        • Microsoft Teams
        • Mimecast
        • MISP
        • MITRE ATT&CK
        • MobileIron
        • MongoDB
        • MSSQL
        • MySQL
        • MX Toolbox
        • NessusScanner
        • Netskope
        • Nmap
        • Nozomi Networks
      • O - P - Q - R
        • O365 Management API
        • ObserveIT
        • Office 365 CloudApp Security
        • Okta
        • Opswat Metadefender
        • Orca Security
        • Outpost24
        • Palo Alto AutoFocus
        • Palo Alto Cortex XDR
        • Palo Alto Next Gen Firewall
        • Palo Alto Panorama
        • Palo Alto Networks Prisma Cloud
        • PassiveTotal
        • PhishingInitiative
        • PhishRod
        • Portnox
        • PostgreSQL
        • ProofPoint PS
        • ProofPointTAP
        • Protectwise
        • Pub/Sub
        • QRadar
        • Qualys EDR
        • Qualys VM
        • Rapid7 InsightIDR
        • Rapid7 InsightVm
        • Recorded Future
        • Redis
        • Remote Agent Utilities
        • Reversinglabs A1000
        • ReversingLabs Titanium
        • RSA Archer
        • RSA NetWitness
        • RSA NetWitness EDR
        • RSA NetWitness Platform
        • Runners
      • S - T - U
        • Salesforce
        • SCCM
        • ScreenshotMachine
        • SentinelOne
        • SentinelOneV2
        • Service Desk Plus
        • Service Desk Plus V3
        • ServiceNow
        • Shodan
        • Siemplify
        • Siemplify ThreatFuse
        • SiemplifyUtilities
        • Site24x7
        • Slack
        • Snowflake
        • Solar Winds Orion
        • SonicWall-Beta
        • Sophos
        • Splash
        • Splunk
        • SpyCloud
        • SSH
        • SSL Labs
        • Stealthwatch
        • Stealthwatch V6.10
        • Stellar Cyber Starlight
        • Sumologic
        • Sumo Logic Cloud SIEM
        • Symantec ATP
        • Symantec Blue Coat ProxySG
        • Symantec Content Analysis
        • Symantec Email Security Cloud
        • Symantec Endpoint Protection
        • Symantec Endpoint Protection 12
        • Symantec Endpoint Security Complete Cloud
        • Symantec ICDX
        • SysAid
        • Sysdig Secure
        • Talos ThreatSource
        • Tanium
        • Tenable.io
        • Tenable Security Center
        • ThreatConnect
        • ThreatCrowd
        • ThreatExchange
        • ThreatQ
        • Tor
        • Trend Micro Apex Central
        • Trend Micro Cloud App Security
        • Trend Micro DDAN
        • Trend Micro Deep Security
        • Trend Micro Vision One
        • Trend Vision One
        • TruSTAR
        • Twilio
        • UnshortenMe
        • UrlScan.io
        • URLVoid
      • V - W - X - Y - Z
        • Varonis Data Security Platform
        • Vectra
        • Vertex AI
        • VirusTotal
        • VirusTotalV3
        • VMRay
        • VMware Carbon Black Cloud
        • VMware Carbon Black Endpoint Standard Live Response
        • VMware Carbon Black Enterprise EDR
        • VSphere
        • Web Risk
        • Websense
        • WildFire
        • Wiz
        • WMI
        • XForce
        • Zabbix
        • Zendesk
        • ZeroFox
        • Zoho Desk
        • ZScaler
    • TIPCommon 2.1.0 library
    • SOAR SDK
      • Case Manipulation
      • Custom lists
      • Integration configuration and script parameters
      • SiemplifyAction module
      • SiemplifyConnectors module
      • SiemplifyDataModel module
      • SiemplifyJobs module
      • Siemplify module
      • ScriptResult module
  • Google SecOps SIEM reference
  • Service limits
  • Ingestion methods (new)
  • Data Export API (Enhanced)
  • Migrate CBN alerts to YARA-L alerts
  • Migrate from CrowdStrike Detects API to Alerts API
  • YARA-L
    • Overview of YARA-L 2.0
    • YARA-L best practices
    • YARA-L known issues and limitations
    • Sample YARA-L queries for dashboards
    • YARA-L functions for dashboards
  • SOAR data in dashboards
  • Reference lists
  • UDM field list
  • Key UDM fields for parsers
  • UDM usage guide
  • Supported data sets and default parsers
  • Parser syntax reference
  • Ingestion metrics table
  • Ingestion metrics reference for Looker and BigQuery
  • Events table in BigQuery
  • Google SecOps CLI user guide
  • Google Analytics in Google SecOps
  • REST API
    • Overview
    • Shared types
      • Types
      • AccountType
      • Action
      • AgentStatsEvent
      • AggregateFunction
      • AlertState
      • AnalyticsMetadata
      • AppCompatMetadata
      • ApplicationProtocol
      • Artifact
      • Asset
      • AssetType
      • AssociationType
      • Attribute
      • AuthType
      • Authentication
      • AuthenticationStatus
      • Blobstore2Info
      • BrowserType
      • BufferStats
      • CancelOperationRequest
      • Channel
      • Cloud
      • CloudEnvironment
      • CompositeMedia
      • ConnectionState
      • ContainerProcess
      • ContainerStats
      • ContentTypeInfo
      • CookieSameSite
      • DataAccessIngestionLabel
      • DataAccessLabels
      • Date
      • DayOfWeek
      • DeleteOperationRequest
      • DeploymentStatus
      • DiffChecksumsResponse
      • DiffDownloadResponse
      • DiffUploadRequest
      • DiffUploadResponse
      • DiffVersionResponse
      • Dimension
      • Direction
      • Directionality
      • DownloadParameters
      • EnrichmentState
      • EntityLabel
      • EntityMetadata
      • EntityRisk
      • EntityType
      • EventTimestampAttribute
      • EventType
      • Extensions
      • Family
      • FileType
      • GetOperationRequest
      • HttpBody
      • InputStatsEvent
      • Interval
      • IoCStatsType
      • IpProtocol
      • Label
      • ListOperationsRequest
      • ListOperationsResponse
      • Location
      • LogEntryBatchMetrics
      • Mechanism
      • Media
      • MediaRequestInfo
      • MessageType
      • Metadata
      • Metric
      • MetricName
      • Namespace
      • Network
      • NotificationType
      • Noun
      • ObjectId
      • OpCode
      • Outcome
      • PcapStats
      • Permission
      • PermissionType
      • Platform
      • Prevalence
      • Priority
      • ProductConfidence
      • ProductPriority
      • ProductSeverity
      • RUsage
      • Reason
      • RecordType
      • ReferenceType
      • Relation
      • Relationship
      • Reputation
      • Resource
      • ResourceType
      • Role
      • SSLCertificate
      • SecurityCategory
      • SecurityResult
      • ServiceType
      • Severity
      • SourceType
      • StartupType
      • State
      • StatsEvent
      • Status
      • ThreatCollectionType
      • ThreatStatus
      • ThreatVerdict
      • TimeOfDay
      • TokenElevationType
      • Type
      • UDM
      • UrlVisitType
      • UserAgentProto
      • Verdict
      • VerdictResponse
      • VerdictType
      • VisitSource
      • Vulnerability
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Generative AI
  • Industry solutions
  • Networking
  • Observability and monitoring
  • Security
  • Storage
  • Access and resources management
  • Costs and usage management
  • Infrastructure as code
  • Migration
  • SDK, languages, frameworks, and tools
  • Home
  • Documentation
  • Security
  • Google Security Operations
  • Reference

LegacyAdvancedReportCategory Stay organized with collections Save and categorize content based on your preferences.

The category of the advanced report.

Enums
DEFAULT Default.
PERSONAL Personal.
SHARED Shared.
OTHER Other.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-10 UTC.

  • Products and pricing

    • See all products
    • Google Cloud pricing
    • Google Cloud Marketplace
    • Contact sales
  • Support

    • Community forums
    • Support
    • Release Notes
    • System status
  • Resources

    • GitHub
    • Getting Started with Google Cloud
    • Code samples
    • Cloud Architecture Center
    • Training and Certification
  • Engage

    • Blog
    • Events
    • X (Twitter)
    • Google Cloud on YouTube
    • Google Cloud Tech on YouTube
  • About Google
  • Privacy
  • Site terms
  • Google Cloud terms
  • Manage cookies
  • Our third decade of climate action: join us
  • Sign up for the Google Cloud newsletter Subscribe
  • English
  • Deutsch
  • Español – América Latina
  • Français
  • Português – Brasil
  • 中文 – 简体
  • 日本語
  • 한국어