diff --git a/content/en/api/v2/security-monitoring/examples.json b/content/en/api/v2/security-monitoring/examples.json index 38fd35a855d..5718f51d309 100644 --- a/content/en/api/v2/security-monitoring/examples.json +++ b/content/en/api/v2/security-monitoring/examples.json @@ -3222,7 +3222,7 @@ } ] }, - "html": "
data
\n[object]
A list of critical assets objects.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\n[object]
A list of critical assets objects.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\nobject
The critical asset's properties.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\nobject
The critical asset's properties.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data [required]
\nobject
Object for a single critical asset.
attributes [required]
\nobject
Object containing the attributes of the critical asset to be created.
enabled
\nboolean
Whether the critical asset is enabled. Defaults to true if not specified.
default: true
query [required]
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query [required]
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity [required]
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease
tags
\n[string]
List of tags associated with the critical asset.
type [required]
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data [required]
\nobject
Object for a single critical asset.
attributes [required]
\nobject
Object containing the attributes of the critical asset to be created.
enabled
\nboolean
Whether the critical asset is enabled. Defaults to true if not specified.
default: true
query [required]
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query [required]
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity [required]
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op
tags
\n[string]
List of tags associated with the critical asset.
type [required]
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\n[object]
A list of critical assets objects.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\n[object]
A list of critical assets objects.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\nobject
The critical asset's properties.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\nobject
The critical asset's properties.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\nobject
The critical asset's properties.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data
\nobject
The critical asset's properties.
attributes
\nobject
The attributes of the critical asset.
creation_author_id
\nint64
ID of user who created the critical asset.
creation_date
\nint64
A Unix millisecond timestamp given the creation date of the critical asset.
creator
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op
tags
\n[string]
List of tags associated with the critical asset.
update_author_id
\nint64
ID of user who updated the critical asset.
update_date
\nint64
A Unix millisecond timestamp given the update date of the critical asset.
updater
\nobject
A user.
handle
\nstring
The handle of the user.
name
\nstring
The name of the user.
version
\nint32
The version of the critical asset; it starts at 1, and is incremented at each update.
id
\nstring
The ID of the critical asset.
type
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data [required]
\nobject
The new critical asset properties; partial updates are supported.
attributes [required]
\nobject
The critical asset properties to be updated.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased. \nAllowed enum values: info,low,medium,high,critical,increase,decrease
tags
\n[string]
List of tags associated with the critical asset.
version
\nint32
The version of the critical asset being updated. Used for optimistic locking to prevent concurrent modifications.
type [required]
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets
data [required]
\nobject
The new critical asset properties; partial updates are supported.
attributes [required]
\nobject
The critical asset properties to be updated.
enabled
\nboolean
Whether the critical asset is enabled.
query
\nstring
The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
rule_query
\nstring
The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
severity
\nenum
Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op). \nAllowed enum values: info,low,medium,high,critical,increase,decrease,no-op
tags
\n[string]
List of tags associated with the critical asset.
version
\nint32
The version of the critical asset being updated. Used for optimistic locking to prevent concurrent modifications.
type [required]
\nenum
The type of the resource. The value should always be critical_assets. \nAllowed enum values: critical_assets
default: critical_assets