FindingsRefinement(mapping=None, *, ignore_unknown_fields=False, **kwargs)Represents a set of logic conditions used to refine various types of findings such as curated rule detections.
Attributes |
|
|---|---|
| Name | Description |
name |
str
Full resource name for the findings refinement. Format: projects/{project}/locations/{region}/instances/{instance}/findingsRefinements/{findings_refinement} |
display_name |
str
Display name of the findings refinement. |
type_ |
google.cloud.chronicle_v1.types.FindingsRefinementType
The type of findings refinement. |
create_time |
google.protobuf.timestamp_pb2.Timestamp
Output only. The timestamp of when the findings refinement was created. |
update_time |
google.protobuf.timestamp_pb2.Timestamp
Output only. The timestamp of when the findings refinement was last updated. |
query |
str
The query for the findings refinement. Works in conjunction with the type field to determine the findings refinement behavior. The syntax of this query is the same as a UDM search string. See the following for more information: https://cloud.google.com/chronicle/docs/investigation/udm-search |
outcome_filters |
MutableSequence[google.cloud.chronicle_v1.types.OutcomeFilter]
Optional. The outcome filters for the findings refinement. These allow you to specify filters that are applied to the outcome variables in the detection. All filters must be true for a detection to match the findings refinement. |