Method: legacySoarAudit.legacyExportAuditLastWeekAsCsvV2

Full name: projects.locations.instances.legacySoarAudit.legacyExportAuditLastWeekAsCsvV2

Exports the audit data for the last week as a CSV file.

HTTP request


Path parameters

Parameters
instance

string

Required. The name of the parent resource, which is the SecOps instance. Format: projects/{project}/locations/{location}/instances/{instance}.

Request body

The request body contains data with the following structure:

JSON representation 
{
  "auditType": enum (AuditSettingsRequestTypeEnum),
  "usersNames": [
    string
  ]
}
Fields
auditType

enum (AuditSettingsRequestTypeEnum)

Optional. The type of the audit request.
usersNames[]

string

Optional. The users names to export.

Response body

Response message for LegacySoarAuditService.LegacyExportAuditLastWeekAsCsvV2.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "payload": {
    object (ApiFile)
  }
}
Fields
payload

object (ApiFile)

Required. The ApiFile response.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacySoarAudits.legacySoarAudit

For more information, see the IAM documentation.

AuditSettingsRequestTypeEnum

Enum that represents the type of the audit settings request.

Enums
GROUP Group.
COUNT Count.

ApiFile

Message that represents a file.

JSON representation 
{
  "fileName": string,
  "blob": string
}
Fields
fileName

string

Optional. File name.
blob

string (bytes format)

File blob.

A base64-encoded string.