Chronicle V1 API - Class Google::Cloud::Chronicle::V1::FindingsRefinement (v0.9.0)

Reference documentation and code samples for the Chronicle V1 API class Google::Cloud::Chronicle::V1::FindingsRefinement.

Represents a set of logic conditions used to refine various types of findings such as curated rule detections.

Inherits

  • Object

Extended By

  • Google::Protobuf::MessageExts::ClassMethods

Includes

  • Google::Protobuf::MessageExts

Methods

#create_time

def create_time() -> ::Google::Protobuf::Timestamp
Returns

#display_name

def display_name() -> ::String
Returns
  • (::String) — Display name of the findings refinement.

#display_name=

def display_name=(value) -> ::String
Parameter
  • value (::String) — Display name of the findings refinement.
Returns
  • (::String) — Display name of the findings refinement.

#name

def name() -> ::String
Returns
  • (::String) — Full resource name for the findings refinement. Format: projects/{project}/locations/{region}/instances/{instance}/findingsRefinements/{findings_refinement}

#name=

def name=(value) -> ::String
Parameter
  • value (::String) — Full resource name for the findings refinement. Format: projects/{project}/locations/{region}/instances/{instance}/findingsRefinements/{findings_refinement}
Returns
  • (::String) — Full resource name for the findings refinement. Format: projects/{project}/locations/{region}/instances/{instance}/findingsRefinements/{findings_refinement}

#outcome_filters

def outcome_filters() -> ::Array<::Google::Cloud::Chronicle::V1::OutcomeFilter>
Returns
  • (::Array<::Google::Cloud::Chronicle::V1::OutcomeFilter>) — Optional. The outcome filters for the findings refinement. These allow you to specify filters that are applied to the outcome variables in the detection. All filters must be true for a detection to match the findings refinement.

#outcome_filters=

def outcome_filters=(value) -> ::Array<::Google::Cloud::Chronicle::V1::OutcomeFilter>
Parameter
  • value (::Array<::Google::Cloud::Chronicle::V1::OutcomeFilter>) — Optional. The outcome filters for the findings refinement. These allow you to specify filters that are applied to the outcome variables in the detection. All filters must be true for a detection to match the findings refinement.
Returns
  • (::Array<::Google::Cloud::Chronicle::V1::OutcomeFilter>) — Optional. The outcome filters for the findings refinement. These allow you to specify filters that are applied to the outcome variables in the detection. All filters must be true for a detection to match the findings refinement.

#query

def query() -> ::String
Returns
  • (::String) — The query for the findings refinement. Works in conjunction with the type field to determine the findings refinement behavior. The syntax of this query is the same as a UDM search string. See the following for more information: https://cloud.google.com/chronicle/docs/investigation/udm-search

#query=

def query=(value) -> ::String
Parameter
  • value (::String) — The query for the findings refinement. Works in conjunction with the type field to determine the findings refinement behavior. The syntax of this query is the same as a UDM search string. See the following for more information: https://cloud.google.com/chronicle/docs/investigation/udm-search
Returns
  • (::String) — The query for the findings refinement. Works in conjunction with the type field to determine the findings refinement behavior. The syntax of this query is the same as a UDM search string. See the following for more information: https://cloud.google.com/chronicle/docs/investigation/udm-search

#type

def type() -> ::Google::Cloud::Chronicle::V1::FindingsRefinementType
Returns

#type=

def type=(value) -> ::Google::Cloud::Chronicle::V1::FindingsRefinementType
Parameter
Returns

#update_time

def update_time() -> ::Google::Protobuf::Timestamp
Returns