Skip to main content
Google Cloud Documentation
/
Console
  • English
  • Deutsch
  • Español – América Latina
  • Français
  • Português – Brasil
  • 中文 – 简体
  • 日本語
  • 한국어
Sign in
Home REST Reference
Google Cloud Documentation
  • Home
  • REST Reference
  • Console
  • Overview
  • v1beta
    • REST Resources
    • instances.feeds
      • Overview
      • importPushLogs
    • projects.locations.instances
      • Overview
      • computeAllFindingsRefinementActivities
      • extractSyslog
      • findEntity
      • findEntityAlerts
      • findRelatedEntities
      • findUdmFieldValues
      • generateCollectionAgentAuth
      • generateUdmKeyValueMappings
      • get
      • getBigQueryExport
      • getEnrichmentCombination
      • getRiskConfig
      • getThreatCollectionFilterSet
      • listAllFindingsRefinementDeployments
      • patch
      • queryProductSourceStats
      • runThreatHunt
      • searchEntities
      • submitResponseFeedback
      • summarizeEntitiesFromQuery
      • summarizeEntity
      • udmSearch
      • updateBigQueryExport
      • updateRiskConfig
      • validateQuery
      • verifyReferenceList
      • verifyRuleText
    • projects.locations.instances.alertGroupingRules
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.announcements
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.bigQueryExport
      • Overview
      • provision
    • projects.locations.instances.caseCloseDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.caseQueueFilters
      • Overview
      • create
      • delete
      • get
      • getShareConfig
      • list
      • patch
      • updateShareConfig
    • projects.locations.instances.caseStageDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.caseTagDefinitions
      • Overview
      • create
      • delete
      • get
      • import
      • list
      • patch
    • projects.locations.instances.cases
      • Overview
      • addTag
      • createInsight
      • executeBulkAddTag
      • executeBulkAssign
      • executeBulkChangePriority
      • executeBulkChangeStage
      • executeBulkClose
      • executeBulkReopen
      • generateReport
      • get
      • getCaseOverviewData
      • list
      • merge
      • patch
      • pauseSla
      • removeTag
      • resolveOverviewWidget
      • resumeSla
    • projects.locations.instances.cases.alerts.customFieldValues
      • Overview
      • batchUpdate
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseAlerts
      • Overview
      • createRecommendationLongRunning
      • fetchRecommendation
      • get
      • getAlertOverviewData
      • list
      • listAlertViews
      • move
      • patch
      • pauseSla
      • resolveOverviewWidget
      • resumeSla
      • setSla
    • projects.locations.instances.cases.caseAlerts.connectorEvents
      • Overview
      • get
      • getFormatted
      • list
    • projects.locations.instances.cases.caseAlerts.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseAlerts.customFieldValues
      • Overview
      • batchUpdate
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseAlerts.involvedEntities
      • Overview
      • addProperty
      • create
      • fetchCards
      • get
      • list
      • patch
      • updateProperty
    • projects.locations.instances.cases.caseComments
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseWallRecords
      • Overview
      • favorite
      • fetchActivitiesCount
      • get
      • list
    • projects.locations.instances.cases.chatMessages
      • Overview
      • create
      • get
      • list
      • pinMessage
      • unpinMessage
      • unreadMessagesCount
      • upload
    • projects.locations.instances.cases.chatMessages.attachments
      • Overview
      • download
    • projects.locations.instances.cases.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.cases.customFieldValues
      • Overview
      • batchUpdate
      • get
      • list
      • patch
    • projects.locations.instances.contentHub.contentPacks
      • Overview
      • add
      • alignPlaybooks
      • delete
      • deployConnectorInstances
      • deployPlaybooks
      • deployTestCases
      • download
      • get
      • installIntegration
      • list
      • markAsDeployed
      • upload
    • projects.locations.instances.contentHub.featuredContentNativeDashboards
      • Overview
      • get
      • install
      • list
    • projects.locations.instances.contentHub.featuredContentRules
      • Overview
      • list
    • projects.locations.instances.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.coverageDetails
      • Overview
      • list
    • projects.locations.instances.customLists
      • Overview
      • batchDelete
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.dashboardCharts
      • Overview
      • batchGet
      • get
    • projects.locations.instances.dashboardQueries
      • Overview
      • execute
      • get
    • projects.locations.instances.dataAccessLabels
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dataAccessScopes
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dataExports
      • Overview
      • cancel
      • create
      • fetchServiceAccountForDataExport
      • get
      • list
    • projects.locations.instances.dataTableOperationErrors
      • Overview
      • get
    • projects.locations.instances.dataTables
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dataTables.dataTableRows
      • Overview
      • bulkCreate
      • bulkCreateAsync
      • bulkGet
      • bulkReplace
      • bulkReplaceAsync
      • bulkUpdate
      • bulkUpdateAsync
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dynamicParameters
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.emailTemplates
      • Overview
      • batchDelete
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.enrichmentControls
      • Overview
      • create
      • disable
      • get
      • list
    • projects.locations.instances.entities
      • Overview
      • get
      • import
    • projects.locations.instances.entitiesBlocklists
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.environmentGroups
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.environments
      • Overview
      • create
      • delete
      • get
      • list
      • patch
      • resetWeights
    • projects.locations.instances.events
      • Overview
      • batchGet
      • fetchEnrichedEvent
      • get
      • import
    • projects.locations.instances.feedPacks
      • Overview
      • get
      • list
    • projects.locations.instances.feedServiceAccounts
      • Overview
      • fetchServiceAccountForCustomer
    • projects.locations.instances.feedSourceTypeSchemas
      • Overview
      • list
    • projects.locations.instances.feedSourceTypeSchemas.logTypeSchemas
      • Overview
      • list
    • projects.locations.instances.feeds
      • Overview
      • create
      • delete
      • disable
      • enable
      • generateSecret
      • get
      • importPushLogs
      • list
      • patch
    • projects.locations.instances.findingsRefinements
      • Overview
      • computeFindingsRefinementActivity
      • create
      • get
      • getDeployment
      • list
      • patch
      • updateDeployment
    • projects.locations.instances.formDynamicParameters
      • Overview
      • get
      • list
      • saveForm
    • projects.locations.instances.forwarders
      • Overview
      • create
      • delete
      • generateForwarderFiles
      • get
      • importStatsEvents
      • list
      • patch
    • projects.locations.instances.forwarders.collectors
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.ingestionLogLabels
      • Overview
      • list
    • projects.locations.instances.ingestionLogNamespaces
      • Overview
      • list
    • projects.locations.instances.integrations
      • Overview
      • create
      • delete
      • download
      • downloadDependency
      • exportIntegrationItems
      • fetchAffectedItems
      • fetchAgentIntegrations
      • fetchCommercialDiff
      • fetchDependencies
      • fetchRestrictedAgents
      • get
      • getFetchProductionDiff
      • getFetchStagingDiff
      • import
      • importIntegrationDependency
      • importIntegrationItems
      • list
      • patch
      • pushToProduction
      • pushToStaging
      • updateCustomIntegration
      • upload
    • projects.locations.instances.integrations.actions
      • Overview
      • create
      • delete
      • executeTest
      • fetchActionsByEnvironment
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.actions.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.connectors
      • Overview
      • create
      • delete
      • executeTest
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.connectors.connectorInstances
      • Overview
      • create
      • delete
      • fetchLatestDefinition
      • get
      • list
      • patch
      • runOnDemand
      • setLogsCollection
    • projects.locations.instances.integrations.connectors.connectorInstances.logs
      • Overview
      • get
      • list
    • projects.locations.instances.integrations.connectors.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.integrations.connectors.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.integrationInstances
      • Overview
      • create
      • delete
      • executeTest
      • fetchAffectedItems
      • fetchDefaultInstance
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs
      • Overview
      • create
      • delete
      • executeTest
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs.jobInstances
      • Overview
      • create
      • delete
      • get
      • list
      • patch
      • runOnDemand
    • projects.locations.instances.integrations.jobs.jobInstances.logs
      • Overview
      • get
      • list
    • projects.locations.instances.integrations.jobs.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.managers
      • Overview
      • create
      • delete
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.managers.revisions
      • Overview
      • create
      • delete
      • get
      • list
      • rollback
    • projects.locations.instances.iocAssociations
      • Overview
      • batchGet
      • fetchRelated
      • get
    • projects.locations.instances.iocs
      • Overview
      • batchGet
      • fetchRelated
      • find
      • get
    • projects.locations.instances.labsExperiments
      • Overview
      • execute
      • get
      • list
      • patch
    • projects.locations.instances.labsExperiments.executions
      • Overview
      • get
      • list
      • patch
    • projects.locations.instances.legacySoarUsers
      • Overview
      • getLocalization
      • getNotificationSettings
      • updateLocalization
      • updateNotificationSettings
    • projects.locations.instances.legacySoarUsers.attachments
      • Overview
      • delete
      • download
      • get
      • list
      • upload
    • projects.locations.instances.legacySoarUsers.userNotifications
      • Overview
      • count
      • get
      • list
      • markAsRead
    • projects.locations.instances.legacySoarUsers.workdeskContacts
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.legacySoarUsers.workdeskLinks
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.legacySoarUsers.workdeskNotes
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.logTypes
      • Overview
      • create
      • generateEventTypesSuggestions
      • getLogTypeSetting
      • legacySubmitParserExtension
      • list
      • runParser
      • search
      • updateLogTypeSetting
    • projects.locations.instances.logTypes.logTypeSettings
      • Overview
      • list
    • projects.locations.instances.logTypes.logs
      • Overview
      • import
      • list
    • projects.locations.instances.logTypes.parserExtensions
      • Overview
      • activate
      • create
      • delete
      • get
      • list
    • projects.locations.instances.logTypes.parserExtensions.extensionValidationReports
      • Overview
      • get
      • list
    • projects.locations.instances.logTypes.parserExtensions.extensionValidationReports.validationErrors
      • Overview
      • list
    • projects.locations.instances.logTypes.parserExtensions.validationReports
      • Overview
      • get
    • projects.locations.instances.logTypes.parserExtensions.validationReports.parsingErrors
      • Overview
      • list
    • projects.locations.instances.logTypes.parsers
      • Overview
      • activate
      • activateReleaseCandidateParser
      • copy
      • create
      • deactivate
      • delete
      • fetchParserCandidates
      • get
      • list
      • patch
    • projects.locations.instances.logTypes.parsers.validationReports
      • Overview
      • get
    • projects.locations.instances.logTypes.parsers.validationReports.parsingErrors
      • Overview
      • list
    • projects.locations.instances.marketplaceIntegrations
      • Overview
      • fetchCommercialDiff
      • get
      • install
      • list
      • uninstall
    • projects.locations.instances.moduleSettings
      • Overview
      • get
      • list
      • rebrandingSettings
    • projects.locations.instances.moduleSettings.properties
      • Overview
      • batchUpdate
      • get
      • list
      • patch
      • testSettings
    • projects.locations.instances.nativeDashboards
      • Overview
      • addChart
      • create
      • delete
      • duplicate
      • duplicateChart
      • editChart
      • export
      • get
      • import
      • list
      • patch
      • removeChart
    • projects.locations.instances.ontologyRecords.visualFamilies
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.operations
      • Overview
      • cancel
      • delete
      • get
      • list
    • projects.locations.instances.propertySchemaDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.referenceLists
      • Overview
      • create
      • get
      • list
      • patch
    • projects.locations.instances.remoteAgents
      • Overview
      • connectorValidRemoteAgents
      • create
      • delete
      • fetchEditableRemoteAgents
      • fetchInstallationCommand
      • fetchInstallerFile
      • fetchRedeployStatus
      • fetchRemoteAgentsCompatibleWithJobs
      • fetchRemoteAgentsInformation
      • get
      • list
      • migrateConnectors
      • patch
      • redeployRemoteAgent
      • sendRemoteAgentInstaller
      • upgradeRemoteAgent
    • projects.locations.instances.requestTemplates
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.ruleExecutionErrors
      • Overview
      • list
    • projects.locations.instances.rules
      • Overview
      • create
      • delete
      • get
      • getDeployment
      • list
      • listRevisions
      • patch
      • updateDeployment
    • projects.locations.instances.rules.deployments
      • Overview
      • list
    • projects.locations.instances.rules.retrohunts
      • Overview
      • create
      • get
      • list
    • projects.locations.instances.savedColumnSets
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.slaDefinitions
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.soarDomains
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.soarNetworks
      • Overview
      • create
      • delete
      • deleteAll
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.socRoles
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.systemNotifications
      • Overview
      • count
      • get
      • list
      • markAsRead
    • projects.locations.instances.tasks
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.tenants
      • Overview
      • list
      • patch
    • projects.locations.instances.threatCollections
      • Overview
      • fetchEntityMetadata
      • fetchIocMatchMetadata
      • fetchRelated
      • get
      • list
    • projects.locations.instances.uniqueEntities
      • Overview
      • addNote
      • download
      • fetchFull
      • get
      • list
      • patch
    • projects.locations.instances.users.savedColumnSets
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.users.searchQueries
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.views
      • Overview
      • fetchPredefined
      • get
      • list
      • saveOverviewTemplate
    • projects.locations.instances.watchlists
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.webhooks
      • Overview
      • WebhookIngestion
      • create
      • delete
      • exportLogs
      • get
      • getLogs
      • getStatistics
      • list
      • patch
      • revokeUrl
    • Types
    • AlertCard
    • AlertCardSla
    • AlertCountByRule
    • AlertOverviewWidget
    • BatchUpdateCustomFieldValuesResponse
    • BigQueryExport
    • CaseApsGrapthWidget
    • CaseAssistantWidget
    • CaseDescriptionWidget
    • CaseImpactedResourcesWidget
    • CaseInsightSeverity
    • CaseInsightType
    • CaseRecommendationsWidget
    • CaseRelatedFindingsWidget
    • ContentPackItemInstallationResponse
    • ContentSourceType
    • DataSource
    • EntitiesHighlightWidget
    • EntryMetadata
    • EventHighlightsWidget
    • EventsWidget
    • FeedSourceType
    • FieldAndValue
    • FieldExtractors
    • FilterOperatorAndValues
    • FindingsRefinementActivity
    • FindingsRefinementDeployment
    • FormWidget
    • ForwarderMetadata
    • GraphWidget
    • HtmlWidget
    • Input
    • InsightsWidget
    • InstallationType
    • IntegrationDiff
    • JsonResultsWidget
    • KeyValueWidget
    • LanguageFeature
    • ListContextPropertiesResponse
    • ListCustomFieldValuesResponse
    • ListParsingErrorsResponse
    • ListSavedColumnSetsResponse
    • Log
    • LogTypeSetting
    • NativeDashboardView
    • NotificationSettings
    • OverviewData
    • ParserEngineType
    • ParserView
    • PotentiallyGroupedAlertsWidget
    • QueryDialect
    • QuickActionButton
    • QuickActionInstanceConfiguration
    • QuickActionParameterValue
    • QuickActionsWidget
    • ReferenceListView
    • RegexFilter
    • RiskConfig
    • RuleDeployment
    • RuleOverviewWidget
    • RuleView
    • ScriptResultEntityData
    • SecurityEntity
    • ShareConfig
    • SiemAlertsWidget
    • SimulatedDataVisibility
    • Sla
    • StatisticsWidget
    • TargetScopeEnum
    • Tenant
    • TextWidget
    • ThirdPartyWidget
    • Timeline
    • TimelineWidget
    • UpdateCustomFieldValuesRequest
    • UserLocalization
    • WallActivitiesWidget
    • WidgetContextGroup
    • WidgetFieldGroupData
    • WidgetResultStatus
    • WidgetTemplateGridColumns
    • WidgetTemplateType
    • WorkflowPendingStepsWidget
  • v1alpha
    • REST Resources
    • instances.feeds
      • Overview
      • importPushLogs
    • projects.locations.instances
      • Overview
      • batchValidateWatchlistEntities
      • computeAllFindingsRefinementActivities
      • continuePocGraduation
      • countAllCuratedRuleSetDetections
      • createFeedback
      • delete
      • evaluateRuleCoverage
      • evaluateRuleCoverageLongRunning
      • extractSyslog
      • fetchFederationAccess
      • findEntity
      • findEntityAlerts
      • findRelatedEntities
      • findUdmFieldValues
      • generateBindplaneLicense
      • generateCollectionAgentAuth
      • generateRules
      • generateSoarAuthJwt
      • generateSoarChatMessage
      • generateSyntheticEvents
      • generateThreatDetectionOpportunity
      • generateUdmKeyValueMappings
      • generateWorkspaceConnectionToken
      • get
      • getAgentSettings
      • getBigQueryExport
      • getEnrichmentCombination
      • getManagedDomainSettings
      • getMultitenantDirectory
      • getRiskConfig
      • getThreatCollectionFilterSet
      • graduatePocInstance
      • legacyCaseFederationPlatforms
      • legacySystemMetadata
      • listAllFindingsRefinementDeployments
      • patch
      • queryProductSourceStats
      • runThreatHunt
      • search
      • searchEntities
      • searchRawLogs
      • submitResponseFeedback
      • suggestSql
      • summarizeEntitiesFromQuery
      • summarizeEntity
      • testFindingsRefinement
      • translateUdmQuery
      • translateYlRule
      • udmSearch
      • undelete
      • updateAgentSettings
      • updateBigQueryExport
      • updateRiskConfig
      • validateQuery
      • verifyNonce
      • verifyReferenceList
      • verifyRuleText
    • projects.locations.instances.alertGroupingRules
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.analytics
      • Overview
      • list
    • projects.locations.instances.analytics.entities.analyticValues
      • Overview
      • list
    • projects.locations.instances.announcements
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.bigQueryAccess
      • Overview
      • provide
    • projects.locations.instances.bigQueryExport
      • Overview
      • fetchSubscriptions
      • provision
      • provisionPartnerSubscription
      • revokePartnerSubscription
    • projects.locations.instances.calculatedFieldDefinitions
      • Overview
      • create
      • delete
      • fetchAvailableTargetFields
      • fetchDynamicOptions
      • get
      • list
      • patch
      • validateDependency
    • projects.locations.instances.caseCloseDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.caseQueueFilters
      • Overview
      • create
      • delete
      • get
      • getShareConfig
      • list
      • patch
      • updateShareConfig
    • projects.locations.instances.caseStageDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.caseTagDefinitions
      • Overview
      • create
      • delete
      • get
      • import
      • list
      • patch
    • projects.locations.instances.cases
      • Overview
      • addTag
      • batchAttachEvidence
      • batchDetachEvidence
      • countPriorities
      • createInsight
      • executeBulkAddTag
      • executeBulkAssign
      • executeBulkChangePriority
      • executeBulkChangeStage
      • executeBulkClose
      • executeBulkReopen
      • generateReport
      • get
      • getCaseOverviewData
      • getOrCreateCaseSummary
      • list
      • merge
      • patch
      • pauseSla
      • removeTag
      • resolveOverviewWidget
      • resumeSla
    • projects.locations.instances.cases.alerts.customFieldValues
      • Overview
      • batchUpdate
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseAlerts
      • Overview
      • addTag
      • createRecommendationLongRunning
      • fetchRecommendation
      • get
      • getAlertOverviewData
      • list
      • listAlertViews
      • move
      • patch
      • pauseSla
      • removeTag
      • resolveOverviewWidget
      • resumeSla
      • setSla
    • projects.locations.instances.cases.caseAlerts.connectorEvents
      • Overview
      • get
      • getFormatted
      • list
    • projects.locations.instances.cases.caseAlerts.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseAlerts.customFieldValues
      • Overview
      • batchUpdate
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseAlerts.involvedEntities
      • Overview
      • addProperty
      • create
      • fetchCards
      • get
      • list
      • patch
      • updateProperty
    • projects.locations.instances.cases.caseComments
      • Overview
      • batchCreate
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseEvidenceDatas
      • Overview
      • get
      • list
    • projects.locations.instances.cases.caseWallRecords
      • Overview
      • favorite
      • fetchActivitiesCount
      • get
      • list
    • projects.locations.instances.cases.chatMessages
      • Overview
      • create
      • get
      • list
      • pinMessage
      • unpinMessage
      • unreadMessagesCount
      • upload
    • projects.locations.instances.cases.chatMessages.attachments
      • Overview
      • download
    • projects.locations.instances.cases.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.cases.customFieldValues
      • Overview
      • batchUpdate
      • get
      • list
      • patch
    • projects.locations.instances.cases.detections
      • Overview
      • get
      • list
    • projects.locations.instances.cases.detections.events
      • Overview
      • list
    • projects.locations.instances.cases.events
      • Overview
      • get
      • list
    • projects.locations.instances.contentHub.contentPacks
      • Overview
      • add
      • alignPlaybooks
      • delete
      • deployConnectorInstances
      • deployPlaybooks
      • deployTestCases
      • download
      • get
      • installIntegration
      • list
      • markAsDeployed
      • upload
    • projects.locations.instances.contentHub.featuredContentNativeDashboards
      • Overview
      • get
      • install
      • list
    • projects.locations.instances.contentHub.featuredContentPlaybooks
      • Overview
      • fetchFacets
      • get
      • install
      • list
    • projects.locations.instances.contentHub.featuredContentRules
      • Overview
      • list
    • projects.locations.instances.contentHub.featuredContentSearchQueries
      • Overview
      • get
      • installFeaturedContentSearchQuery
      • list
    • projects.locations.instances.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.coverageDetails
      • Overview
      • get
      • list
    • projects.locations.instances.curatedRuleSetCategories
      • Overview
      • get
      • list
    • projects.locations.instances.curatedRuleSetCategories.curatedRuleSets
      • Overview
      • countCuratedRuleSetDetections
      • get
      • list
    • projects.locations.instances.curatedRuleSetCategories.curatedRuleSets.curatedRuleSetDeployments
      • Overview
      • batchUpdate
      • get
      • list
      • patch
    • projects.locations.instances.curatedRules
      • Overview
      • get
      • list
    • projects.locations.instances.customFields
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.customLists
      • Overview
      • batchDelete
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.dashboardCharts
      • Overview
      • batchGet
      • get
    • projects.locations.instances.dashboardQueries
      • Overview
      • execute
      • get
    • projects.locations.instances.dashboardScheduledReports
      • Overview
      • create
      • delete
      • duplicate
      • fetchHistory
      • get
      • list
      • patch
      • trigger
    • projects.locations.instances.dashboards
      • Overview
      • batchMigrate
      • copy
      • create
      • delete
      • fetchMigratable
      • fetchMigrationJobs
      • fetchMigrationMetrics
      • get
      • list
    • projects.locations.instances.dataAccessLabels
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dataAccessScopes
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dataExports
      • Overview
      • cancel
      • create
      • fetchServiceAccountForDataExport
      • fetchavailablelogtypes
      • get
      • list
      • patch
    • projects.locations.instances.dataTableOperationErrors
      • Overview
      • get
    • projects.locations.instances.dataTables
      • Overview
      • create
      • delete
      • get
      • list
      • patch
      • upload
    • projects.locations.instances.dataTables.dataTableRows
      • Overview
      • bulkCreate
      • bulkCreateAsync
      • bulkDelete
      • bulkDeleteAsync
      • bulkGet
      • bulkReplace
      • bulkReplaceAsync
      • bulkUpdate
      • bulkUpdateAsync
      • create
      • delete
      • get
      • list
      • patch
      • upload
    • projects.locations.instances.dataTaps
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dynamicParameters
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.emailTemplates
      • Overview
      • batchDelete
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.enrichmentAgent
      • Overview
      • executeActions
      • executeRemediationActions
      • fetchActions
      • fetchAlertData
      • fetchRemediationActions
    • projects.locations.instances.enrichmentControls
      • Overview
      • create
      • delete
      • disable
      • get
      • list
    • projects.locations.instances.entities
      • Overview
      • get
      • import
      • modifyEntityRiskScore
      • queryEntityRiskScoreModifications
    • projects.locations.instances.entitiesBlocklists
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.entityRiskScores
      • Overview
      • query
    • projects.locations.instances.environmentGroups
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.environments
      • Overview
      • create
      • delete
      • get
      • list
      • patch
      • resetWeights
    • projects.locations.instances.errorNotificationConfigs
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.events
      • Overview
      • batchGet
      • fetchEnrichedEvent
      • get
      • import
    • projects.locations.instances.features
      • Overview
      • disable
      • get
      • list
      • patch
    • projects.locations.instances.federationGroups
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.feedPacks
      • Overview
      • get
      • list
    • projects.locations.instances.feedServiceAccounts
      • Overview
      • fetchServiceAccountForCustomer
    • projects.locations.instances.feedSourceTypeSchemas
      • Overview
      • list
    • projects.locations.instances.feedSourceTypeSchemas.logTypeSchemas
      • Overview
      • list
    • projects.locations.instances.feeds
      • Overview
      • create
      • delete
      • disable
      • enable
      • generateSecret
      • get
      • importPushLogs
      • list
      • patch
      • scheduleTransfer
    • projects.locations.instances.findingsGraph
      • Overview
      • exploreNode
      • initializeGraph
    • projects.locations.instances.findingsRefinements
      • Overview
      • computeFindingsRefinementActivity
      • create
      • get
      • getDeployment
      • list
      • patch
      • updateDeployment
    • projects.locations.instances.formDynamicParameters
      • Overview
      • get
      • list
      • saveForm
    • projects.locations.instances.forwarders
      • Overview
      • create
      • delete
      • generateForwarderFiles
      • get
      • importStatsEvents
      • list
      • patch
    • projects.locations.instances.forwarders.collectors
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.ingestionLogLabels
      • Overview
      • list
    • projects.locations.instances.ingestionLogNamespaces
      • Overview
      • list
    • projects.locations.instances.integrations
      • Overview
      • create
      • delete
      • download
      • downloadDependency
      • exportIntegrationItems
      • fetchAffectedItems
      • fetchAgentIntegrations
      • fetchCommercialDiff
      • fetchDependencies
      • fetchRestrictedAgents
      • fetchSupportedPythonVersions
      • get
      • getFetchProductionDiff
      • getFetchStagingDiff
      • import
      • importIntegrationDependency
      • importIntegrationItems
      • list
      • patch
      • pushToProduction
      • pushToStaging
      • updateCustomIntegration
      • upload
    • projects.locations.instances.integrations.actions
      • Overview
      • create
      • delete
      • executeTest
      • fetchActionsByEnvironment
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.actions.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.connectors
      • Overview
      • create
      • delete
      • executeTest
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.connectors.connectorInstances
      • Overview
      • create
      • delete
      • fetchLatestDefinition
      • get
      • list
      • patch
      • runOnDemand
      • setLogsCollection
    • projects.locations.instances.integrations.connectors.connectorInstances.logs
      • Overview
      • get
      • list
    • projects.locations.instances.integrations.connectors.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.integrations.connectors.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.integrationInstances
      • Overview
      • create
      • delete
      • executeTest
      • fetchAffectedItems
      • fetchDefaultInstance
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs
      • Overview
      • create
      • delete
      • executeTest
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs.jobInstances
      • Overview
      • create
      • delete
      • get
      • list
      • patch
      • runOnDemand
    • projects.locations.instances.integrations.jobs.jobInstances.logs
      • Overview
      • get
      • list
    • projects.locations.instances.integrations.jobs.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.logicalOperators
      • Overview
      • create
      • delete
      • executeTest
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.logicalOperators.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.managers
      • Overview
      • create
      • delete
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.managers.revisions
      • Overview
      • create
      • delete
      • get
      • list
      • rollback
    • projects.locations.instances.integrations.transformers
      • Overview
      • create
      • delete
      • executeTest
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.transformers.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.investigations
      • Overview
      • fetchAssociated
      • get
      • list
      • transitionReviewState
      • trigger
    • projects.locations.instances.investigations.investigationComments
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.investigations.investigationSteps
      • Overview
      • get
      • list
    • projects.locations.instances.iocAssociations
      • Overview
      • batchGet
      • fetchRelated
      • get
    • projects.locations.instances.iocs
      • Overview
      • batchGet
      • fetchRelated
      • find
      • findFirstAndLastSeen
      • get
      • getIocState
      • searchCuratedDetectionsForIoc
      • updateIocState
    • projects.locations.instances.labsExperiments
      • Overview
      • execute
      • fetchAgentSession
      • get
      • list
      • patch
      • sendAgentMessage
    • projects.locations.instances.labsExperiments.executions
      • Overview
      • get
      • list
      • patch
    • projects.locations.instances.legacy
      • Overview
      • legacyBatchGetCases
      • legacyBatchGetCollections
      • legacyCreateOrUpdateCase
      • legacyCreateSoarAlert
      • legacyFetchAlertsView
      • legacyFetchUdmSearchCsv
      • legacyFetchUdmSearchView
      • legacyFindAssetEvents
      • legacyFindRawLogs
      • legacyFindUdmEvents
      • legacyGetAlert
      • legacyGetCuratedRulesTrends
      • legacyGetDetection
      • legacyGetEventForDetection
      • legacyGetRuleCounts
      • legacyGetRulesTrends
      • legacyRunTestRule
      • legacySearchArtifactEvents
      • legacySearchArtifactIoCDetails
      • legacySearchAssetEvents
      • legacySearchCuratedDetections
      • legacySearchCustomerStats
      • legacySearchDetections
      • legacySearchDomainsRecentlyRegistered
      • legacySearchDomainsTimingStats
      • legacySearchEnterpriseWideAlerts
      • legacySearchEnterpriseWideIoCs
      • legacySearchFindings
      • legacySearchIngestionStats
      • legacySearchIoCInsights
      • legacySearchRawLogs
      • legacySearchRawLogsV2
      • legacySearchRuleDetectionCountBuckets
      • legacySearchRuleDetectionEvents
      • legacySearchRuleResults
      • legacySearchRulesAlerts
      • legacySearchUserEvents
      • legacyStreamDetectionAlerts
      • legacyTestRuleStreaming
      • legacyUpdateAlert
    • projects.locations.instances.legacyAdvancedReports
      • Overview
      • download
      • legacyCopyLookerReport
      • legacyCreateLookerReport
      • legacyGetAdvancedReportProvider
      • legacyGetLookerReportDetails
      • legacyGetLookerReports
      • legacyRefreshLookerReports
      • legacyReport
      • legacyReportImport
      • legacyShareLookerReport
    • projects.locations.instances.legacyCaseFederationPlatforms
      • Overview
      • create
      • legacyDeleteCaseFederationPlatform
      • legacyGetCaseFederationPlatform
    • projects.locations.instances.legacyCases
      • Overview
      • addEvidence
      • createCase
      • createManualCase
      • createSimulatedCustomCase
      • deleteUseCase
      • executeManualAction
      • exportCustomCase
      • generateCollaboratorRequest
      • generateUseCases
      • getActionResultById
      • getCustomCaseDetails
      • getCustomCases
      • importCustomCase
      • injectSampleData
      • investigatorExtendCaseGraph
      • isCustomCaseExists
      • simulateAlert
    • projects.locations.instances.legacyConfiguration
      • Overview
      • legacyGetMaximumAlertsGroupingConfiguration
    • projects.locations.instances.legacyFederatedCases
      • Overview
      • legacyBatchPatchFederatedCases
      • legacyFetchCasesToSync
      • legacyGetFederatedCase
      • legacyListFederatedCases
    • projects.locations.instances.legacyPlaybooks
      • Overview
      • LegacyPlaybookApplyApprovalLink
      • download
      • exportWorkflowWithBlocksByIdentifier
      • legacyActionWidgetTemplate
      • legacyAddOrUpdatePlaybookCategory
      • legacyAiGenerate
      • legacyAiGenerateByAlert
      • legacyAiUpdate
      • legacyAttachNestedWorkflowToCase
      • legacyAttachWorkflowToCase
      • legacyCheckWorkflowNameInDifferentEnvironments
      • legacyCloneWorkflow
      • legacyCreateFeedback
      • legacyDeleteWorkflow
      • legacyDeleteWorkflows
      • legacyDuplicateNestedWorkflows
      • legacyDuplicateWorkflow
      • legacyDuplicateWorkflows
      • legacyExecuteManualStep
      • legacyExecuteStep
      • legacyFetchActionResultsForSimulation
      • legacyGetActionResultsOfWFId
      • legacyGetAiGenerationStatusByAlert
      • legacyGetCaseEntities
      • legacyGetContextGroupByKey
      • legacyGetDebugStepCaseData
      • legacyGetEnabledWFCards
      • legacyGetEnabledWFNames
      • legacyGetHtmlViewPresets
      • legacyGetNestedPlaybookParams
      • legacyGetNestedPlaybooksAsSteps
      • legacyGetNestedPlaybooksByEnvironmentsAsSteps
      • legacyGetNestedWorkflowDefaultInputs
      • legacyGetOverviewTemplate
      • legacyGetOverviewTemplates
      • legacyGetPendingStep
      • legacyGetPendingStepsCountForUser
      • legacyGetPendingStepsUserRelated
      • legacyGetPlaybookSimulationEnrichment
      • legacyGetPlaybookStatsMap
      • legacyGetPlaybooksUsingBlocks
      • legacyGetTriggerTags
      • legacyGetWorkFlowVersionLogs
      • legacyGetWorkflowCategories
      • legacyGetWorkflowFullInfoByIdentifier
      • legacyGetWorkflowFullInfoWithEnvFilterByIdentifier
      • legacyGetWorkflowInstance
      • legacyGetWorkflowInstanceSummary
      • legacyGetWorkflowInstancesCards
      • legacyGetWorkflowMenuCard
      • legacyGetWorkflowMenuCardWithEnvFilter
      • legacyGetWorkflowMenuCards
      • legacyGetWorkflowMenuCardsWithEnvFilter
      • legacyGetWorkflowStepInstance
      • legacyGetWorkflowsContainsActionAsync
      • legacyGetWorkflowsInvolvingAction
      • legacyMoveDefinitionsToCategory
      • legacyPermissions
      • legacyPermissionsOptions
      • legacyRemoveCategories
      • legacyRerunBlock
      • legacyRerunPlaybook
      • legacyRestoreWorkflowDefinition
      • legacyRunPlaybookInDebug
      • legacySaveLogVersionOfWorkflowDefinitions
      • legacySaveWorkflowDefinitions
      • legacySkip
      • legacyTerminateWorkflowInstance
      • legacyTestPipeExample
      • legacyUpdateDefinitionsPriority
    • projects.locations.instances.legacyPublisher
      • Overview
      • legacyAddConnectorPackage
      • legacyCloudLog
      • legacyCreateConnectorPackage
      • legacyDeleteIntegration
      • legacyGetDependencyFile
      • legacyGetHasLocallyScheduledRemoteConnectors
      • legacyGetInstaller
      • legacyGetIntegrationDependencies
      • legacyGetLatestIntegrationVersion
      • legacyGetTaskData
      • legacyKeepAlive
      • legacyListTasks
      • legacyPing
      • legacySetUpgradeInProgress
      • legacyUpdateIntegrationStatus
      • legacyUpdateTask
      • legacyUpdateTaskResult
    • projects.locations.instances.legacySdk
      • Overview
      • downloadWebhookBlob
      • legacyAddAgentConnectorLogs
      • legacyAddAgentLogs
      • legacyAddAttachment
      • legacyAddComment
      • legacyAddEntitiesToCustomList
      • legacyAddOrUpdateCaseTask
      • legacyAddTag
      • legacyAlertFullDetails
      • legacyAlertSourceFile
      • legacyAlertsFullDetails
      • legacyAlertsMetadata
      • legacyAlertsTicketIdsByCaseId
      • legacyAnyEntityInCustomList
      • legacyAssignUser
      • legacyAttacheWorkflowToCase
      • legacyAttachmentData
      • legacyAttachments
      • legacyCaseFullDetails
      • legacyCaseMetadata
      • legacyChangeCaseStage
      • legacyChangePriority
      • legacyCloseAlert
      • legacyCloseCase
      • legacyCreateCase
      • legacyCreateCaseInsight
      • legacyCreateConnectorPackage
      • legacyCreateEntity
      • legacyGetAgentById
      • legacyGetAlertsTicketIdsFromCasesClosedSinceTimestamp
      • legacyGetAlertsToSync
      • legacyGetCaseClosureDetails
      • legacyGetCaseComments
      • legacyGetCaseTasks
      • legacyGetCasesByFilter
      • legacyGetCasesByRequest
      • legacyGetCasesIdByFilter
      • legacyGetConnectorParameters
      • legacyGetContextProperty
      • legacyGetCurrentSiemplifyVersion
      • legacyGetCustomListCategories
      • legacyGetFailedActions
      • legacyGetFailedConnectors
      • legacyGetFailedETLOperations
      • legacyGetFailedJobs
      • legacyGetIntegrationVersion
      • legacyGetProxySettings
      • legacyGetPublisherById
      • legacyGetRemoteConnectorsKeysMap
      • legacyGetSimilarCasesIds
      • legacyGetSyncAlerts
      • legacyGetSyncCases
      • legacyGetUpdatedSyncAlertsMetadata
      • legacyGetUpdatedSyncCasesMetadata
      • legacyGetUserFullName
      • legacyIntegrationConfiguration
      • legacyMarkAsImportant
      • legacyRaiseIncident
      • legacyRemoveEntitiesFromCustomList
      • legacySendEmailWithAttachment
      • legacySendSystemNotification
      • legacySetAlertSla
      • legacySetCaseSla
      • legacySetContextProperty
      • legacySystemInfo
      • legacyTrySetContextProperty
      • legacyUnraiseIncident
      • legacyUpdateAlertPriority
      • legacyUpdateAlertsAdditional
      • legacyUpdateBatchCasesExternalCaseIds
      • legacyUpdateCaseScore
      • legacyUpdateConfigurationProperty
      • legacyUpdateConnectorParameter
      • legacyUpdateEntities
      • legacyUpdateNewAlertsSyncStatus
      • uploadWebhookBlob
    • projects.locations.instances.legacySearches
      • Overview
      • download
      • legacyCaseSearchEverything
      • legacyCaseSearchEverythingByIds
      • legacyEntitySearchCount
      • legacyEntitySearchEntities
      • legacyEntitySearchEverything
      • legacyGetCasesFilterUserAndRoles
      • legacyGetCasesFilterValues
      • legacyGetEntitiesFilterValues
    • projects.locations.instances.legacySoarAudit
      • Overview
      • legacyExportAuditLastWeekAsCsvV2
      • legacyGetAuditDataV2
    • projects.locations.instances.legacySoarDashboard
      • Overview
      • legacyAddOrUpdateDashboard
      • legacyAddOrUpdateDashboardWidget
      • legacyDeleteDashboard
      • legacyDeleteDashboardWidget
      • legacyGetCasesTimeToRespond
      • legacyGetDashboard
      • legacyGetDashboardCards
      • legacyGetDashboardCustomWidgetCaseIds
      • legacyGetDashboardPlaybookRuns
      • legacyGetDashboardPlaybooks
      • legacyGetDashboardWidgetCaseIds
      • legacyGetDashboardWidgetDefinitions
      • legacyGetDashboardWidgetValues
      • legacyGetOpenedAndClosedCasesTrends
      • legacyGetPlaybookMonitoring
      • legacyImportDashboard
      • legacySaveDashboardAsReportTemplate
    • projects.locations.instances.legacySoarIdpMappingGroups
      • Overview
      • batchUpdate
      • create
      • delete
      • get
      • getExternalProviders
      • list
      • patch
      • updateDefaultAccessSettings
    • projects.locations.instances.legacySoarPermissionGroups
      • Overview
      • list
    • projects.locations.instances.legacySoarReports
      • Overview
      • download
      • legacyAddOrUpdateReportSchedule
      • legacyAddOrUpdateReportTemplate
      • legacyAddOrUpdateReportWidget
      • legacyDeleteReportSchedule
      • legacyDuplicateReportTemplate
      • legacyGetAdvancedReports
      • legacyGetReportSchedules
      • legacyGetReportTemplates
      • legacyImportReportTemplate
      • legacyRefreshAdvancedReports
      • legacyRemoveReportTemplate
      • legacyRemoveReportWidget
      • legacyShareAdvancedReport
      • legacyUploadAdvancedReport
    • projects.locations.instances.legacySoarSettings
      • Overview
      • legacyAddVisualSummaryRecords
      • legacyGetAllEnvironmentCards
      • legacyGetAllPlaybookActionDefinitions
      • legacyGetCaseAlertPlaybookTriggerFilterValues
      • legacyGetCaseAlertTypeFilterValues
      • legacyGetCustomActionDetailsById
      • legacyGetDataSourcesForGroupingRule
      • legacyGetEnvironmentActionDefinitions
      • legacyGetEnvironmentStatistics
      • legacyGetPlaybookActionDefinitions
      • legacyGetProductsForGroupingRule
      • legacyGetSystemEventEntityTypes
      • legacyGetTimeZones
      • legacyGetUserRegistrationSettings
      • legacyGetVisualSummaryRecords
      • legacyIsPermittedToEnvironment
      • legacyTestEmailSettings
      • legacyUploadCustomActionResultJson
    • projects.locations.instances.legacySoarUsers
      • Overview
      • delete
      • get
      • getLocalization
      • getNotificationSettings
      • list
      • updateLocalization
      • updateNotificationSettings
    • projects.locations.instances.legacySoarUsers.attachments
      • Overview
      • delete
      • download
      • get
      • list
      • upload
    • projects.locations.instances.legacySoarUsers.userNotifications
      • Overview
      • count
      • get
      • list
      • markAsRead
    • projects.locations.instances.legacySoarUsers.workdeskContacts
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.legacySoarUsers.workdeskLinks
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.legacySoarUsers.workdeskNotes
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.legacySystem
      • Overview
      • legacyGetLicenseStatus
      • legacyGetMaximumDataRetentionValue
      • legacyGetSystemVersion
    • projects.locations.instances.legacySystemMetadata
      • Overview
      • placeholders
    • projects.locations.instances.logProcessingPipelines
      • Overview
      • associateStreams
      • create
      • delete
      • dissociateStreams
      • fetchAssociatedPipeline
      • fetchSampleLogsByStreams
      • get
      • list
      • patch
      • testPipeline
    • projects.locations.instances.logTypes
      • Overview
      • create
      • generateEventTypesSuggestions
      • getLogTypeSetting
      • legacySubmitParserExtension
      • list
      • runAnalysis
      • runParser
      • search
      • updateLogTypeSetting
    • projects.locations.instances.logTypes.analysisReports
      • Overview
      • get
      • list
    • projects.locations.instances.logTypes.logTypeSettings
      • Overview
      • list
    • projects.locations.instances.logTypes.logs
      • Overview
      • import
      • list
    • projects.locations.instances.logTypes.parserExtensions
      • Overview
      • activate
      • create
      • delete
      • generateParserExtensionAi
      • get
      • list
    • projects.locations.instances.logTypes.parserExtensions.extensionValidationReports
      • Overview
      • get
      • list
    • projects.locations.instances.logTypes.parserExtensions.extensionValidationReports.validationErrors
      • Overview
      • list
    • projects.locations.instances.logTypes.parserExtensions.validationReports
      • Overview
      • get
    • projects.locations.instances.logTypes.parserExtensions.validationReports.parsingErrors
      • Overview
      • list
    • projects.locations.instances.logTypes.parsers
      • Overview
      • activate
      • activateReleaseCandidateParser
      • copy
      • create
      • deactivate
      • delete
      • fetchParserCandidates
      • get
      • list
      • patch
      • runAnalysis
    • projects.locations.instances.logTypes.parsers.analysisReports
      • Overview
      • get
      • list
    • projects.locations.instances.logTypes.parsers.validationReports
      • Overview
      • get
    • projects.locations.instances.logTypes.parsers.validationReports.parsingErrors
      • Overview
      • list
    • projects.locations.instances.logs
      • Overview
      • classify
    • projects.locations.instances.managedDomainSettings
      • Overview
      • addManagedDomain
      • removeManagedDomain
    • projects.locations.instances.marketplaceIntegrations
      • Overview
      • fetchCommercialDiff
      • get
      • install
      • list
      • uninstall
    • projects.locations.instances.metricDefinitions
      • Overview
      • create
      • get
      • list
      • patch
    • projects.locations.instances.moduleSettings
      • Overview
      • get
      • list
      • rebrandingSettings
    • projects.locations.instances.moduleSettings.properties
      • Overview
      • batchUpdate
      • get
      • list
      • patch
      • testSettings
    • projects.locations.instances.nativeDashboards
      • Overview
      • addChart
      • create
      • delete
      • duplicate
      • duplicateChart
      • editChart
      • export
      • get
      • getIamPolicy
      • import
      • list
      • patch
      • removeChart
      • setIamPolicy
    • projects.locations.instances.notebooks
      • Overview
      • get
      • list
    • projects.locations.instances.ontologyRecords
      • Overview
      • delete
      • export
      • family
      • get
      • import
      • list
      • patch
      • statistics
    • projects.locations.instances.ontologyRecords.mappingRules
      • Overview
      • delete
      • fetchAll
      • get
      • list
      • patch
      • save
      • test
    • projects.locations.instances.ontologyRecords.visualFamilies
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.operations
      • Overview
      • cancel
      • delete
      • get
      • list
      • streamSearch
    • projects.locations.instances.propertySchemaDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.queryMetrics
      • Overview
      • fetchTimeSeries
      • list
    • projects.locations.instances.referenceLists
      • Overview
      • create
      • get
      • list
      • patch
    • projects.locations.instances.remoteAgents
      • Overview
      • connectorValidRemoteAgents
      • create
      • delete
      • fetchEditableRemoteAgents
      • fetchInstallationCommand
      • fetchInstallerFile
      • fetchRedeployStatus
      • fetchRemoteAgentsCompatibleWithJobs
      • fetchRemoteAgentsInformation
      • get
      • list
      • migrateConnectors
      • patch
      • redeployRemoteAgent
      • sendRemoteAgentInstaller
      • upgradeRemoteAgent
    • projects.locations.instances.requestTemplates
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.ruleExecutionErrors
      • Overview
      • list
    • projects.locations.instances.rules
      • Overview
      • create
      • delete
      • get
      • getDeployment
      • list
      • listRevisions
      • modifyRules
      • patch
      • updateDeployment
    • projects.locations.instances.rules.deployments
      • Overview
      • list
    • projects.locations.instances.rules.retrohunts
      • Overview
      • create
      • get
      • list
    • projects.locations.instances.savedColumnSets
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.searchSessions.searchedResults
      • Overview
      • list
    • projects.locations.instances.sharedPreferenceSets
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.slaDefinitions
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.soarDomains
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.soarNetworks
      • Overview
      • create
      • delete
      • deleteAll
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.socRoles
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.subdomains
      • Overview
      • create
      • delete
      • get
      • list
    • projects.locations.instances.systemNotifications
      • Overview
      • count
      • get
      • list
      • markAsRead
    • projects.locations.instances.tagSubscriptions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.tags
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.tasks
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.tenants
      • Overview
      • create
      • list
      • patch
    • projects.locations.instances.threatCollections
      • Overview
      • fetchEntityMetadata
      • fetchIocMatchMetadata
      • fetchRelated
      • get
      • list
    • projects.locations.instances.uniqueEntities
      • Overview
      • addNote
      • download
      • fetchFull
      • get
      • list
      • patch
    • projects.locations.instances.userModuleSettings
      • Overview
      • update
    • projects.locations.instances.users
      • Overview
      • clearConversationHistory
      • getPreferenceSet
      • updatePreferenceSet
    • projects.locations.instances.users.conversations
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.users.conversations.messages
      • Overview
      • create
      • createLongRunning
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.users.savedColumnSets
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.users.searchQueries
      • Overview
      • create
      • delete
      • get
      • getIamPolicy
      • list
      • patch
      • setIamPolicy
    • projects.locations.instances.views
      • Overview
      • fetchPredefined
      • get
      • list
      • saveOverviewTemplate
    • projects.locations.instances.watchlists
      • Overview
      • create
      • delete
      • get
      • list
      • listEntities
      • patch
    • projects.locations.instances.watchlists.entities
      • Overview
      • add
      • batchAdd
      • batchRemove
      • remove
    • projects.locations.instances.webhooks
      • Overview
      • WebhookIngestion
      • create
      • delete
      • exportLogs
      • get
      • getLogs
      • getStatistics
      • list
      • patch
      • revokeUrl
    • Types
    • ActionType
    • AgentIntegrationDetails
    • AgentSettings
    • AlertCard
    • AlertCardSla
    • AlertCountByRule
    • AlertFieldAggregations
    • AlertOverviewWidget
    • ApiActionResultDataModel
    • ApiAdvancedReport
    • ApiDeleteWorkflowResult
    • ApiLoopIterationRequest
    • ApiSecurityEntityDataModel
    • ApiWorkflowCategoryDataModel
    • ApiWorkflowDebugDataModel
    • ApiWorkflowDefinitionDataModel
    • ApiWorkflowInstanceDataModel
    • ApiWorkflowMenuCardDefinitionDataModel
    • ApiWorkflowStepDataModel
    • ApiWorkflowStepInstanceDataModel
    • ApiWorkflowStepParameterDataModel
    • ApiWorkflowStepRelationDataModel
    • ApiWorkflowTriggerDataModel
    • ArtifactIndicator
    • AssetAlertEvent
    • AssetEdrEvent
    • AssetIndicator
    • BatchUpdateCustomFieldValuesResponse
    • BigQueryExport
    • BucketSize
    • BulkDataTableAsyncMediaResponse
    • CalculateFieldEnum
    • CaseApsGrapthWidget
    • CaseAssistantWidget
    • CaseDescriptionWidget
    • CaseEvidence
    • CaseImpactedResourcesWidget
    • CaseInsightSeverity
    • CaseInsightType
    • CasePriority
    • CaseRecommendationsWidget
    • CaseRelatedFindingsWidget
    • CaseType
    • Chip
    • Citation
    • CloseReasonEnum
    • Collection
    • ContentPackItemInstallationResponse
    • ContentSourceType
    • ContextGroupDataModel
    • CuratedRuleCount
    • CuratedRulePrecision
    • CustomSimulatedCaseKeyValue
    • CustomWidgetSubjectEnum
    • DashboardTimeRangeTypesEnums
    • DashboardView
    • DataSource
    • DataTableRowDetails
    • DemoDataComponent
    • DetectionCountBucket
    • DetectionExclusionApplication
    • DetectionView
    • DetectionWithSamples
    • DomainAndPorts
    • DomainAndTime
    • EnrichmentProvenance
    • EntitiesHighlightWidget
    • EntityIndicator
    • EntityRiskScoreModification
    • EntryMetadata
    • ErrorMessage
    • EventHighlightsWidget
    • EventType
    • EventsWidget
    • ExecuteActionRequest
    • ExecuteActionResult
    • ExplorationOptions
    • FeedSourceType
    • FieldAndValue
    • FieldExtractors
    • FilterOperatorAndValues
    • FilterProperties
    • FindingsRefinementActivity
    • FindingsRefinementDeployment
    • FormWidget
    • ForwarderMetadata
    • FrontendPathConfig
    • GetPolicyOptions
    • Graph
    • GraphWidget
    • HtmlWidget
    • HttpDetails
    • HttpMethod
    • HttpProtocol
    • IdAndPath
    • Input
    • InsightsWidget
    • InstallationType
    • IntRange
    • IntegrationDiff
    • IocEvent
    • IocState
    • IpAndPorts
    • IpNetworkEvent
    • JobMigrationState
    • JsonResultsWidget
    • KeyValueWidget
    • LabsOptions
    • LanguageFeature
    • LegacyAdvancedReportCategory
    • LegacyApiActionDefinitionDataModel
    • LegacyApiMetadata
    • LegacyApiObjectDataModel
    • LegacyCase
    • LegacyCaseApiSecurityEntityDataModel
    • LegacyCaseInfo
    • LegacyCaseSearchEverythingResponse
    • LegacyDashboardWidgetDataModel
    • LegacyEntitySearchEverythingResult
    • LegacyFederatedCase
    • LegacyGetLookerReportsResponse
    • LegacyLookerReportResponse
    • LegacyPlaybookAiGenerationByAlertResult
    • LegacyPlaybookApiTriggerCondition
    • LegacyPlaybookOverviewTemplateData
    • LegacyPlaybookTemplateWidgetDefinition
    • LegacyPlaybookWorkflowAccessPermissions
    • LegacyRuleTrends
    • LegacySoarDashboardDataModel
    • LegacySoarDashboardWidgetDataModel
    • LegacyTask
    • Link
    • ListContextPropertiesResponse
    • ListCustomFieldValuesResponse
    • ListParserAnalysisReportsResponse
    • ListParsingErrorsResponse
    • ListSavedColumnSetsResponse
    • LogType
    • LogTypeSetting
    • ManagedDomain
    • MitreTactic
    • MitreTechnique
    • NativeDashboardView
    • NextPageToken
    • NoLogEnrichmentSource
    • Node
    • NotificationSettings
    • OverviewData
    • Paging
    • ParserEngineType
    • ParserView
    • PendingCompletionCard
    • PlacerRowInfo
    • PlaybookCreationSourceEnum
    • PlaybooksAiServiceGenerationResponseMetadata
    • Policy
    • PotentiallyGroupedAlertsWidget
    • PreferenceSet
    • QueryDialect
    • QueryType
    • QuickActionButton
    • QuickActionInstanceConfiguration
    • QuickActionParameterValue
    • QuickActionsWidget
    • RawLogResult
    • ReferenceListView
    • RegexFilter
    • ResultsOrder
    • RetentionDuration
    • RiskConfig
    • RuleCompilationError
    • RuleDeployment
    • RuleOverviewWidget
    • RuleSource
    • RuleType
    • RuleView
    • RuntimeError
    • ScriptResultEntityData
    • SearchResult
    • SearchTimeRangeType
    • SecurityEntity
    • Severity
    • ShareConfig
    • SidebarEntry
    • SiemAlertsWidget
    • Sla
    • SortBy
    • State
    • StatisticsWidget
    • SubscriptionDetails
    • TagView
    • TargetScopeEnum
    • TextWidget
    • ThirdPartyWidget
    • ThreatDetectionOpportunity
    • Timeline
    • TimelineWidget
    • TtrKeyInfo
    • UdmColumnType
    • UdmEventInfo
    • UdmProvenance
    • UpdateCustomFieldValuesRequest
    • UploadSamlSettings
    • UserEvent
    • UserFacingRuleType
    • UserIndicator
    • UserLocalization
    • WallActivitiesWidget
    • WidgetApiWorkflowStepParameterDataModel
    • WidgetContextGroup
    • WidgetFieldGroupData
    • WidgetResultStatus
    • WidgetTemplateGridColumns
    • WidgetTemplateType
    • WidgetWidthSizeTypes
    • WorkflowInstance
    • WorkflowPendingStepsWidget
    • YaraL2Detection
  • v1
    • REST Resources
    • instances.feeds
      • Overview
      • importPushLogs
    • projects.locations.instances
      • Overview
      • computeAllFindingsRefinementActivities
      • extractSyslog
      • findEntity
      • findEntityAlerts
      • findRelatedEntities
      • findUdmFieldValues
      • get
      • getBigQueryExport
      • getEnrichmentCombination
      • getRiskConfig
      • getThreatCollectionFilterSet
      • listAllFindingsRefinementDeployments
      • queryProductSourceStats
      • searchEntities
      • summarizeEntitiesFromQuery
      • summarizeEntity
      • udmSearch
      • updateBigQueryExport
      • updateRiskConfig
      • validateQuery
      • verifyReferenceList
      • verifyRuleText
    • projects.locations.instances.alertGroupingRules
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.announcements
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.bigQueryExport
      • Overview
      • provision
    • projects.locations.instances.caseCloseDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.caseQueueFilters
      • Overview
      • create
      • delete
      • get
      • getShareConfig
      • list
      • patch
      • updateShareConfig
    • projects.locations.instances.caseStageDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.caseTagDefinitions
      • Overview
      • create
      • delete
      • get
      • import
      • list
      • patch
    • projects.locations.instances.cases
      • Overview
      • addTag
      • createInsight
      • executeBulkAddTag
      • executeBulkAssign
      • executeBulkChangePriority
      • executeBulkChangeStage
      • executeBulkClose
      • executeBulkReopen
      • generateReport
      • get
      • getCaseOverviewData
      • list
      • merge
      • patch
      • pauseSla
      • removeTag
      • resolveOverviewWidget
      • resumeSla
    • projects.locations.instances.cases.caseAlerts
      • Overview
      • createRecommendationLongRunning
      • fetchRecommendation
      • get
      • getAlertOverviewData
      • list
      • move
      • patch
      • pauseSla
      • resolveOverviewWidget
      • resumeSla
      • setSla
    • projects.locations.instances.cases.caseAlerts.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseAlerts.involvedEntities
      • Overview
      • addProperty
      • create
      • fetchCards
      • get
      • list
      • patch
      • updateProperty
    • projects.locations.instances.cases.caseComments
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.cases.caseWallRecords
      • Overview
      • favorite
      • fetchActivitiesCount
      • get
      • list
    • projects.locations.instances.cases.chatMessages
      • Overview
      • create
      • get
      • list
      • pinMessage
      • unpinMessage
      • unreadMessagesCount
      • upload
    • projects.locations.instances.cases.chatMessages.attachments
      • Overview
      • download
    • projects.locations.instances.cases.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.contentHub.contentPacks
      • Overview
      • add
      • alignPlaybooks
      • delete
      • deployConnectorInstances
      • deployPlaybooks
      • deployTestCases
      • download
      • get
      • installIntegration
      • list
      • markAsDeployed
      • upload
    • projects.locations.instances.contentHub.featuredContentNativeDashboards
      • Overview
      • get
      • install
      • list
    • projects.locations.instances.contentHub.featuredContentRules
      • Overview
      • list
    • projects.locations.instances.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.coverageDetails
      • Overview
      • list
    • projects.locations.instances.customLists
      • Overview
      • batchDelete
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.dashboardCharts
      • Overview
      • batchGet
      • get
    • projects.locations.instances.dashboardQueries
      • Overview
      • execute
      • get
    • projects.locations.instances.dataAccessLabels
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dataAccessScopes
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dataExports
      • Overview
      • cancel
      • create
      • fetchServiceAccountForDataExport
      • get
      • list
    • projects.locations.instances.dataTableOperationErrors
      • Overview
      • get
    • projects.locations.instances.dataTables
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dataTables.dataTableRows
      • Overview
      • bulkCreate
      • bulkCreateAsync
      • bulkGet
      • bulkReplace
      • bulkReplaceAsync
      • bulkUpdate
      • bulkUpdateAsync
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.dynamicParameters
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.emailTemplates
      • Overview
      • batchDelete
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.enrichmentControls
      • Overview
      • create
      • disable
      • get
      • list
    • projects.locations.instances.entities
      • Overview
      • get
      • import
    • projects.locations.instances.entitiesBlocklists
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.environmentGroups
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.environments
      • Overview
      • create
      • delete
      • get
      • list
      • patch
      • resetWeights
    • projects.locations.instances.events
      • Overview
      • batchGet
      • fetchEnrichedEvent
      • get
      • import
    • projects.locations.instances.feedPacks
      • Overview
      • get
      • list
    • projects.locations.instances.feedServiceAccounts
      • Overview
      • fetchServiceAccountForCustomer
    • projects.locations.instances.feedSourceTypeSchemas
      • Overview
      • list
    • projects.locations.instances.feedSourceTypeSchemas.logTypeSchemas
      • Overview
      • list
    • projects.locations.instances.feeds
      • Overview
      • create
      • delete
      • disable
      • enable
      • generateSecret
      • get
      • importPushLogs
      • list
      • patch
    • projects.locations.instances.findingsRefinements
      • Overview
      • computeFindingsRefinementActivity
      • create
      • get
      • getDeployment
      • list
      • patch
      • updateDeployment
    • projects.locations.instances.formDynamicParameters
      • Overview
      • get
      • list
      • saveForm
    • projects.locations.instances.forwarders
      • Overview
      • importStatsEvents
    • projects.locations.instances.ingestionLogLabels
      • Overview
      • list
    • projects.locations.instances.ingestionLogNamespaces
      • Overview
      • list
    • projects.locations.instances.integrations
      • Overview
      • create
      • delete
      • download
      • downloadDependency
      • exportIntegrationItems
      • fetchAffectedItems
      • fetchAgentIntegrations
      • fetchCommercialDiff
      • fetchDependencies
      • fetchRestrictedAgents
      • get
      • getFetchProductionDiff
      • getFetchStagingDiff
      • import
      • importIntegrationDependency
      • importIntegrationItems
      • list
      • pushToProduction
      • pushToStaging
      • updateCustomIntegration
      • upload
    • projects.locations.instances.integrations.actions
      • Overview
      • create
      • delete
      • executeTest
      • fetchActionsByEnvironment
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.actions.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.connectors
      • Overview
      • create
      • delete
      • executeTest
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.connectors.connectorInstances
      • Overview
      • create
      • delete
      • fetchLatestDefinition
      • get
      • list
      • patch
      • runOnDemand
      • setLogsCollection
    • projects.locations.instances.integrations.connectors.connectorInstances.logs
      • Overview
      • get
      • list
    • projects.locations.instances.integrations.connectors.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.integrations.connectors.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.integrationInstances
      • Overview
      • create
      • delete
      • executeTest
      • fetchAffectedItems
      • fetchDefaultInstance
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs
      • Overview
      • create
      • delete
      • executeTest
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs.contextProperties
      • Overview
      • clearAll
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.integrations.jobs.jobInstances
      • Overview
      • create
      • delete
      • get
      • list
      • patch
      • runOnDemand
    • projects.locations.instances.integrations.jobs.jobInstances.logs
      • Overview
      • get
      • list
    • projects.locations.instances.integrations.jobs.revisions
      • Overview
      • create
      • delete
      • list
      • rollback
    • projects.locations.instances.integrations.managers
      • Overview
      • create
      • delete
      • fetchTemplate
      • get
      • list
      • patch
    • projects.locations.instances.integrations.managers.revisions
      • Overview
      • create
      • delete
      • get
      • list
      • rollback
    • projects.locations.instances.iocAssociations
      • Overview
      • batchGet
      • fetchRelated
      • get
    • projects.locations.instances.iocs
      • Overview
      • batchGet
      • fetchRelated
      • find
      • get
    • projects.locations.instances.legacySoarUsers
      • Overview
      • getLocalization
      • getNotificationSettings
      • updateLocalization
      • updateNotificationSettings
    • projects.locations.instances.legacySoarUsers.attachments
      • Overview
      • delete
      • download
      • get
      • list
      • upload
    • projects.locations.instances.legacySoarUsers.userNotifications
      • Overview
      • count
      • get
      • list
      • markAsRead
    • projects.locations.instances.legacySoarUsers.workdeskContacts
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.legacySoarUsers.workdeskLinks
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.legacySoarUsers.workdeskNotes
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.logTypes
      • Overview
      • create
      • generateEventTypesSuggestions
      • getLogTypeSetting
      • legacySubmitParserExtension
      • list
      • runParser
      • updateLogTypeSetting
    • projects.locations.instances.logTypes.logTypeSettings
      • Overview
      • list
    • projects.locations.instances.logTypes.logs
      • Overview
      • import
      • list
    • projects.locations.instances.logTypes.parserExtensions
      • Overview
      • activate
      • create
      • delete
      • get
      • list
    • projects.locations.instances.logTypes.parserExtensions.extensionValidationReports
      • Overview
      • get
      • list
    • projects.locations.instances.logTypes.parserExtensions.extensionValidationReports.validationErrors
      • Overview
      • list
    • projects.locations.instances.logTypes.parserExtensions.validationReports
      • Overview
      • get
    • projects.locations.instances.logTypes.parserExtensions.validationReports.parsingErrors
      • Overview
      • list
    • projects.locations.instances.logTypes.parsers
      • Overview
      • activate
      • activateReleaseCandidateParser
      • copy
      • create
      • deactivate
      • delete
      • fetchParserCandidates
      • get
      • list
      • patch
    • projects.locations.instances.logTypes.parsers.validationReports
      • Overview
      • get
    • projects.locations.instances.logTypes.parsers.validationReports.parsingErrors
      • Overview
      • list
    • projects.locations.instances.marketplaceIntegrations
      • Overview
      • fetchCommercialDiff
      • get
      • install
      • list
      • uninstall
    • projects.locations.instances.moduleSettings
      • Overview
      • get
      • list
      • rebrandingSettings
    • projects.locations.instances.moduleSettings.properties
      • Overview
      • batchUpdate
      • get
      • list
      • patch
      • testSettings
    • projects.locations.instances.nativeDashboards
      • Overview
      • addChart
      • create
      • delete
      • duplicate
      • duplicateChart
      • editChart
      • export
      • get
      • import
      • list
      • patch
      • removeChart
    • projects.locations.instances.ontologyRecords.visualFamilies
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.operations
      • Overview
      • cancel
      • delete
      • get
      • list
    • projects.locations.instances.propertySchemaDefinitions
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.referenceLists
      • Overview
      • create
      • get
      • list
      • patch
    • projects.locations.instances.remoteAgents
      • Overview
      • connectorValidRemoteAgents
      • create
      • delete
      • fetchEditableRemoteAgents
      • fetchInstallationCommand
      • fetchInstallerFile
      • fetchRedeployStatus
      • fetchRemoteAgentsCompatibleWithJobs
      • fetchRemoteAgentsInformation
      • get
      • list
      • migrateConnectors
      • patch
      • redeployRemoteAgent
      • sendRemoteAgentInstaller
      • upgradeRemoteAgent
    • projects.locations.instances.requestTemplates
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.ruleExecutionErrors
      • Overview
      • list
    • projects.locations.instances.rules
      • Overview
      • create
      • delete
      • get
      • getDeployment
      • list
      • listRevisions
      • patch
      • updateDeployment
    • projects.locations.instances.rules.deployments
      • Overview
      • list
    • projects.locations.instances.rules.retrohunts
      • Overview
      • create
      • get
      • list
    • projects.locations.instances.savedColumnSets
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.slaDefinitions
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.soarDomains
      • Overview
      • create
      • delete
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.soarNetworks
      • Overview
      • create
      • delete
      • deleteAll
      • export
      • get
      • import
      • list
      • patch
    • projects.locations.instances.socRoles
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.systemNotifications
      • Overview
      • count
      • get
      • list
      • markAsRead
    • projects.locations.instances.tasks
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.threatCollections
      • Overview
      • fetchEntityMetadata
      • fetchIocMatchMetadata
      • fetchRelated
      • get
      • list
    • projects.locations.instances.uniqueEntities
      • Overview
      • addNote
      • download
      • fetchFull
      • get
      • list
      • patch
    • projects.locations.instances.users.savedColumnSets
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.users.searchQueries
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • projects.locations.instances.views
      • Overview
      • fetchPredefined
      • get
      • list
      • saveOverviewTemplate
    • projects.locations.instances.watchlists
      • Overview
      • create
      • delete
      • get
      • list
      • patch
    • Types
    • AlertCard
    • AlertCardSla
    • AlertCountByRule
    • AlertOverviewWidget
    • BigQueryExport
    • CaseApsGrapthWidget
    • CaseAssistantWidget
    • CaseDescriptionWidget
    • CaseImpactedResourcesWidget
    • CaseInsightSeverity
    • CaseInsightType
    • CaseRecommendationsWidget
    • CaseRelatedFindingsWidget
    • ContentPackItemInstallationResponse
    • ContentSourceType
    • DataSource
    • EntitiesHighlightWidget
    • EntryMetadata
    • EventHighlightsWidget
    • EventsWidget
    • FeedSourceType
    • FieldAndValue
    • FieldExtractors
    • FilterOperatorAndValues
    • FindingsRefinementActivity
    • FindingsRefinementDeployment
    • FormWidget
    • GraphWidget
    • HtmlWidget
    • Input
    • InsightsWidget
    • InstallationType
    • IntegrationDiff
    • JsonResultsWidget
    • KeyValueWidget
    • LanguageFeature
    • ListContextPropertiesResponse
    • ListParsingErrorsResponse
    • ListSavedColumnSetsResponse
    • Log
    • LogTypeSetting
    • NativeDashboardView
    • NotificationSettings
    • OverviewData
    • ParserEngineType
    • PotentiallyGroupedAlertsWidget
    • QueryDialect
    • QuickActionButton
    • QuickActionInstanceConfiguration
    • QuickActionParameterValue
    • QuickActionsWidget
    • ReferenceListView
    • RiskConfig
    • RuleDeployment
    • RuleOverviewWidget
    • RuleView
    • ScriptResultEntityData
    • SecurityEntity
    • ShareConfig
    • SiemAlertsWidget
    • SimulatedDataVisibility
    • Sla
    • StatisticsWidget
    • TargetScopeEnum
    • TextWidget
    • ThirdPartyWidget
    • Timeline
    • TimelineWidget
    • UserLocalization
    • WallActivitiesWidget
    • WidgetContextGroup
    • WidgetFieldGroupData
    • WidgetResultStatus
    • WidgetTemplateGridColumns
    • WidgetTemplateType
    • WorkflowPendingStepsWidget
  • Types
    • Types
    • AccountType
    • Action
    • ActionType
    • AgentStatsEvent
    • AggregateFunction
    • Ai
    • AiType
    • AlertState
    • AnalyticsMetadata
    • AppCompatMetadata
    • ApplicationProtocol
    • Artifact
    • Asset
    • AssetType
    • Association
    • AssociationType
    • AtiPrioritization
    • Attribute
    • AuthType
    • Authentication
    • AuthenticationStatus
    • BoolSequence
    • BrowserType
    • BrowserVariantType
    • BufferStats
    • BytesSequence
    • CancelOperationRequest
    • Channel
    • Cloud
    • CloudEnvironment
    • ConnectionState
    • ContainerProcess
    • ContainerStats
    • CookieSameSite
    • DataAccessIngestionLabel
    • DataAccessLabels
    • Date
    • DayOfWeek
    • DeleteOperationRequest
    • DeploymentStatus
    • Dimension
    • Direction
    • Directionality
    • DoubleSequence
    • EnrichmentSource
    • EnrichmentState
    • EnrichmentType
    • Entity
    • EntityLabel
    • EntityRisk
    • EntityType
    • EventTimestampAttribute
    • EventType
    • Extensions
    • ExternalEnrichmentSource
    • Family
    • FeaturedContentMetadata
    • FileType
    • GetOperationRequest
    • GroupedFields
    • HttpBody
    • InputStatsEvent
    • Int64Sequence
    • Interval
    • IoCStatsType
    • IpProtocol
    • Label
    • ListOperationsRequest
    • ListOperationsResponse
    • Location
    • LogEntryBatchMetrics
    • Mechanism
    • MediaRequestInfo
    • MediaResponseInfo
    • MessageSet
    • MessageType
    • Metadata
    • MetricName
    • Namespace
    • Network
    • NotificationType
    • Noun
    • OSType
    • OSVariantType
    • OpCode
    • Outcome
    • PcapStats
    • Permission
    • PermissionType
    • Platform
    • Prevalence
    • Priority
    • ProductConfidence
    • ProductPriority
    • ProductSeverity
    • RUsage
    • Reason
    • RecordType
    • ReferenceType
    • Relationship
    • Reputation
    • RequestClass
    • Resource
    • ResourceType
    • Role
    • SSLCertificate
    • SecurityCategory
    • SecurityResult
    • ServiceType
    • Severity
    • Software
    • SourceType
    • StartupType
    • State
    • StatsEvent
    • Status
    • StatusProto
    • StringSequence
    • TaskLogonType
    • TaskState
    • ThreatCollectionType
    • ThreatStatus
    • ThreatVerdict
    • TimeOfDay
    • TokenElevationType
    • TrafficClass
    • TriggerType
    • Type
    • UDM
    • Uint64Sequence
    • UrlVisitType
    • User
    • UserAgentProto
    • Verdict
    • VerdictResponse
    • VerdictType
    • VisitSource
    • Vulnerability
campaign
We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.
  • Home
  • Documentation
  • Security
  • Google Security Operations
  • REST Reference

UserType Stay organized with collections Save and categorize content based on your preferences.

Enums
USER_TYPE_UNSPECIFIED
ANALYST
TRIAGE_AGENT

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-08-25 UTC.

  • Products and pricing

    • See all products
    • Google Cloud pricing
    • Google Cloud Marketplace
    • Contact sales
  • Support

    • Community forums
    • Support
    • Release Notes
    • System status
  • Resources

    • GitHub
    • Getting Started with Google Cloud
    • Code samples
    • Cloud Architecture Center
    • Training and Certification
  • Engage

    • Blog
    • Events
    • X (Twitter)
    • Google Cloud on YouTube
    • Google Cloud Tech on YouTube
  • About Google
  • Privacy
  • Site terms
  • Google Cloud terms
  • Manage cookies
  • Our third decade of climate action: join us
  • Sign up for the Google Cloud newsletter Subscribe
  • English
  • Deutsch
  • Español – América Latina
  • Français
  • Português – Brasil
  • 中文 – 简体
  • 日本語
  • 한국어