REST Resource: projects.locations.instances

Resource: Instance

A Instance represents an instantiation of the Instance product.

JSON representation
{
  "name": string
}
Fields
name

string

Identifier. The resource name of this instance. Format: projects/{project}/locations/{location}/instances/{instance}

Methods

computeAllFindingsRefinementActivities

Returns findings refinement activity for all findings refinements.

extractSyslog

ExtractSyslog extracts structured part of log from a unstructured log by running a grok regex over it.

findEntity

Identifies the entity type and retrieves relevant data associated with a specified indicator.

findEntityAlerts

Get alerts for an entity.

findRelatedEntities

Finds all the entities associated with provided entity.

findUdmFieldValues

Finds ingested UDM field values that match a query.

generateCollectionAgentAuth

GenerateCollectionAgentAuth generates an auth json file for the collection agent.

generateUdmKeyValueMappings

GenerateUDMKeyValueMappings generates key value mapping of a raw log.

get

Gets a Instance.

getBigQueryExport

Get the BigQuery export configuration for a Chronicle instance.

getEnrichmentCombination

Get the EnrichmentCombination.

getRiskConfig

Queries the instance to get the Risk Configurations used for the computation of Entity Risk Score.

getThreatCollectionFilterSet

Get the set of threat collection filter options.

listAllFindingsRefinementDeployments

Lists all findings refinement deployments.

queryProductSourceStats

Gets available product sources along with their stats.

searchEntities

Identifies the entity type and retrieves relevant data associated with a specified indicator.

submitResponseFeedback

Submits user feedback for a specific platform interaction or feature.

summarizeEntitiesFromQuery

Parses the query and identifies the entities contained within the search query.

summarizeEntity

Returns all entity data over specified time.

testFindingsRefinement

Tests for and returns past activity for a findings refinement, including, potentially, times when the findings refinement was not yet created.

udmSearch

Performs a UDM search that returns matching events for the query.

updateBigQueryExport

Update the BigQuery export configuration for a Chronicle instance.

updateRiskConfig

Updates RiskConfig used for the computation of Entity Risk Score.

validateQuery

Validates UDM search query by compiling the query.

verifyReferenceList

VerifyReferenceList validates list content and returns line errors, if any.

verifyRuleText

Verifies the given rule text.