Method: legacyCases.injectSampleData

Full name: projects.locations.instances.legacyCases.injectSampleData

Injects sample data into the legacy case.

HTTP request


POST https://chronicle.africa-south1.rep.googleapis.com/v1alpha/{name}/legacyCases:injectSampleData

Path parameters

Parameters
name

string

Required. The name of the parent resource, which is the SecOps instance this request Format: projects/{project}/locations/{location}/instances/{instance}/LegacyCases

Request body

The request body contains data with the following structure:

JSON representation 
{
  "legacyPayload": [
    {
      object (ConnectorSampleData)
    }
  ]
}
Fields
legacyPayload[]

object (ConnectorSampleData)

Required. The list of sample data to load.

Response body

Response message for GetConnectorSampleData.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "payload": boolean
}
Fields
payload

boolean

Output only. True if the sample ingested correctly, false otherwise.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the name resource:

  • chronicle.legacyCases.ingest

For more information, see the IAM documentation.

ConnectorSampleData

Connector sample data.

JSON representation 
{
  "alertName": string,
  "product": string,
  "startTime": string,
  "endTime": string,
  "caseInfoJson": string,
  "eventCount": integer
}
Fields
alertName

string

Optional. The name of the sample alert. Example: "Random Alert Name 643ed6bc-347a-42cc-9c4d-748abe4393e5"
product

string

Optional. The name of the product which produced the alert. Example: "SampleProduct"
startTime

string (int64 format)

Optional. Start time of the alert (Unix epoch millis). Example: 1672587952626
endTime

string (int64 format)

Optional. End time of the alert (Unix epoch millis). Example: 1672587952626
caseInfoJson

string

Optional. Full JSON information of the case.
eventCount

integer

Optional. Number of events which make up the whole alert. Example: 2