Skip to content

Commit 8e1ac8b

Browse files
author
ci.datadog-api-spec
committed
Regenerate client from commit f914b1d of spec repo
1 parent 7b91ba2 commit 8e1ac8b

File tree

5 files changed

+142
-15
lines changed

5 files changed

+142
-15
lines changed

content/en/api/v2/security-monitoring/examples.json

Lines changed: 30 additions & 15 deletions
Large diffs are not rendered by default.
Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"name": "Example-Security-Monitoring",
3+
"queries": [
4+
{
5+
"query": "source:source_here",
6+
"groupByFields": [
7+
"@userIdentity.assumed_role"
8+
],
9+
"distinctFields": [],
10+
"metric": "name",
11+
"metrics": [
12+
"name"
13+
],
14+
"aggregation": "new_value",
15+
"name": "",
16+
"dataSource": "logs"
17+
}
18+
],
19+
"filters": [],
20+
"cases": [
21+
{
22+
"name": "",
23+
"status": "info",
24+
"notifications": []
25+
}
26+
],
27+
"options": {
28+
"evaluationWindow": 0,
29+
"keepAlive": 300,
30+
"maxSignalDuration": 600,
31+
"detectionMethod": "new_value",
32+
"newValueOptions": {
33+
"forgetAfter": 7,
34+
"instantaneousBaseline": true,
35+
"learningDuration": 1,
36+
"learningThreshold": 0,
37+
"learningMethod": "duration"
38+
}
39+
},
40+
"message": "Test rule",
41+
"tags": [],
42+
"isEnabled": true,
43+
"type": "log_detection"
44+
}
Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
{
2+
"cases": [
3+
{
4+
"name": "",
5+
"status": "info",
6+
"notifications": []
7+
}
8+
],
9+
"hasExtendedTitle": true,
10+
"isEnabled": true,
11+
"message": "My security monitoring rule",
12+
"name": "My security monitoring rule",
13+
"options": {
14+
"evaluationWindow": 0,
15+
"keepAlive": 300,
16+
"maxSignalDuration": 600,
17+
"detectionMethod": "new_value",
18+
"newValueOptions": {
19+
"forgetAfter": 7,
20+
"instantaneousBaseline": true,
21+
"learningDuration": 1,
22+
"learningThreshold": 0,
23+
"learningMethod": "duration"
24+
}
25+
},
26+
"queries": [
27+
{
28+
"query": "source:source_here",
29+
"groupByFields": [
30+
"@userIdentity.assumed_role"
31+
],
32+
"distinctFields": [],
33+
"metric": "name",
34+
"metrics": [
35+
"name"
36+
],
37+
"aggregation": "new_value",
38+
"name": "",
39+
"dataSource": "logs"
40+
}
41+
],
42+
"tags": [
43+
"env:prod",
44+
"team:security"
45+
],
46+
"type": "log_detection"
47+
}

data/api/v2/CodeExamples.json

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1527,6 +1527,11 @@
15271527
"suffix": "_461183901",
15281528
"description": "Create a detection rule with type 'impossible_travel' returns \"OK\" response"
15291529
},
1530+
{
1531+
"group": "security_monitoring",
1532+
"suffix": "_3581421091",
1533+
"description": "Create a detection rule with type 'new_value' with 'instantaneousBaseline' enabled returns \"OK\" response"
1534+
},
15301535
{
15311536
"group": "security_monitoring",
15321537
"suffix": "_914562040",
@@ -1709,6 +1714,11 @@
17091714
"suffix": "",
17101715
"description": "Validate a detection rule returns \"OK\" response"
17111716
},
1717+
{
1718+
"group": "security_monitoring",
1719+
"suffix": "_2609327779",
1720+
"description": "Validate a detection rule with detection method 'new_value' with enabled feature 'instantaneousBaseline' returns \"OK\" response"
1721+
},
17121722
{
17131723
"group": "security_monitoring",
17141724
"suffix": "_4152369508",

data/api/v2/full_spec.yaml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -47362,6 +47362,8 @@ components:
4736247362
properties:
4736347363
forgetAfter:
4736447364
$ref: '#/components/schemas/SecurityMonitoringRuleNewValueOptionsForgetAfter'
47365+
instantaneousBaseline:
47366+
$ref: '#/components/schemas/SecurityMonitoringRuleNewValueOptionsInstantaneousBaseline'
4736547367
learningDuration:
4736647368
$ref: '#/components/schemas/SecurityMonitoringRuleNewValueOptionsLearningDuration'
4736747369
learningMethod:
@@ -47387,6 +47389,15 @@ components:
4738747389
- TWO_WEEKS
4738847390
- THREE_WEEKS
4738947391
- FOUR_WEEKS
47392+
SecurityMonitoringRuleNewValueOptionsInstantaneousBaseline:
47393+
description: 'If true, every time Datadog learns a new group-by value, it takes
47394+
old matching values within the learning window and builds the baseline with
47395+
it.
47396+
47397+
Therefore, it attempts to build the baseline swiftly using existing values
47398+
instead of learning them over time.'
47399+
example: false
47400+
type: boolean
4739047401
SecurityMonitoringRuleNewValueOptionsLearningDuration:
4739147402
default: 0
4739247403
description: 'The duration in days during which values are learned, and after

0 commit comments

Comments
 (0)