Chronicle V1 API - Class Google::Cloud::Chronicle::V1::EventRecord (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API class Google::Cloud::Chronicle::V1::EventRecord.

EventRecord stores information about a UDM event.

Inherits

  • Object

Extended By

  • Google::Protobuf::MessageExts::ClassMethods

Includes

  • Google::Protobuf::MessageExts

Methods

#alert_number

def alert_number() -> ::Integer
Returns
  • (::Integer) — If the event should be treated as an alert, the unique identifier for the alert.

#alert_number=

def alert_number=(value) -> ::Integer
Parameter
  • value (::Integer) — If the event should be treated as an alert, the unique identifier for the alert.
Returns
  • (::Integer) — If the event should be treated as an alert, the unique identifier for the alert.

#alert_view_id

def alert_view_id() -> ::String
Returns
  • (::String) — Alert View specific Id. Helps create a link to Alert View.

#alert_view_id=

def alert_view_id=(value) -> ::String
Parameter
  • value (::String) — Alert View specific Id. Helps create a link to Alert View.
Returns
  • (::String) — Alert View specific Id. Helps create a link to Alert View.

#annotations

def annotations() -> ::Array<::Google::Cloud::Chronicle::V1::EventRecord::Annotation>
Returns

#annotations=

def annotations=(value) -> ::Array<::Google::Cloud::Chronicle::V1::EventRecord::Annotation>
Parameter
Returns

#detections

def detections() -> ::Array<::Google::Backstory::Collection>
Returns

#detections=

def detections=(value) -> ::Array<::Google::Backstory::Collection>
Parameter
Returns

#event

def event() -> ::Google::Cloud::Chronicle::V1::Event
Returns

#event=

def event=(value) -> ::Google::Cloud::Chronicle::V1::Event
Parameter
Returns

#event_log_token

def event_log_token() -> ::String
Returns
  • (::String) — Raw log tokens mapped to the event. Can be used to locate the raw log entry that generated the event.

#event_log_token=

def event_log_token=(value) -> ::String
Parameter
  • value (::String) — Raw log tokens mapped to the event. Can be used to locate the raw log entry that generated the event.
Returns
  • (::String) — Raw log tokens mapped to the event. Can be used to locate the raw log entry that generated the event.

#table

def table() -> ::String
Returns
  • (::String) — User defined table name for the event in joins query.

#table=

def table=(value) -> ::String
Parameter
  • value (::String) — User defined table name for the event in joins query.
Returns
  • (::String) — User defined table name for the event in joins query.