Chronicle V1 API - Class Google::Backstory::SoarAlertMetadata (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::SoarAlertMetadata.

Metadata fields of alerts coming from other SIEM systems.

Inherits

  • Object

Extended By

  • Google::Protobuf::MessageExts::ClassMethods

Includes

  • Google::Protobuf::MessageExts

Methods

#alert_id

def alert_id() -> ::String
Returns
  • (::String) — Alert ID in the source SIEM system.

#alert_id=

def alert_id=(value) -> ::String
Parameter
  • value (::String) — Alert ID in the source SIEM system.
Returns
  • (::String) — Alert ID in the source SIEM system.

#product

def product() -> ::String
Returns
  • (::String) — Name of the product the alert is coming from.

#product=

def product=(value) -> ::String
Parameter
  • value (::String) — Name of the product the alert is coming from.
Returns
  • (::String) — Name of the product the alert is coming from.

#source_rule

def source_rule() -> ::String
Returns
  • (::String) — Name of the rule triggering the alert in the source SIEM.

#source_rule=

def source_rule=(value) -> ::String
Parameter
  • value (::String) — Name of the rule triggering the alert in the source SIEM.
Returns
  • (::String) — Name of the rule triggering the alert in the source SIEM.

#source_system

def source_system() -> ::String
Returns
  • (::String) — Name of the Source SIEM system.

#source_system=

def source_system=(value) -> ::String
Parameter
  • value (::String) — Name of the Source SIEM system.
Returns
  • (::String) — Name of the Source SIEM system.

#source_system_ticket_id

def source_system_ticket_id() -> ::String
Returns
  • (::String) — Ticket id for the alert in the source system.

#source_system_ticket_id=

def source_system_ticket_id=(value) -> ::String
Parameter
  • value (::String) — Ticket id for the alert in the source system.
Returns
  • (::String) — Ticket id for the alert in the source system.

#source_system_uri

def source_system_uri() -> ::String
Returns
  • (::String) — Url to the source SIEM system.

#source_system_uri=

def source_system_uri=(value) -> ::String
Parameter
  • value (::String) — Url to the source SIEM system.
Returns
  • (::String) — Url to the source SIEM system.

#vendor

def vendor() -> ::String
Returns
  • (::String) — Name of the vendor.

#vendor=

def vendor=(value) -> ::String
Parameter
  • value (::String) — Name of the vendor.
Returns
  • (::String) — Name of the vendor.