REST Resource: projects.locations.instances

• Resource: Instance
  • JSON representation
• Methods

Resource: Instance

A Instance represents an instantiation of the Instance product.

JSON representation
{ "name": string }

Fields
name	string Output only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}

Methods
batchValidateWatchlistEntities	Validates a batch of entities that could be added into watchlist under an instance.
computeAllFindingsRefinementActivities	Returns findings refinement activity for all findings refinements.
countAllCuratedRuleSetDetections	Count detections across all curated rule sets.
createFeedback	RPC to submit user feedback on content generated by Malachite Atlas services.
extractSyslog	ExtractSyslog extracts structured part of log from a unstructured log by running a grok regex over it.
findEntity	Identifies the entity type and retrieves relevant data associated with a specified indicator.
findEntityAlerts	Get alerts for an entity
findRelatedEntities	Finds all the entities associated with provided entity.
findUdmFieldValues	Finds ingested UDM field values that match a query.
generateUdmKeyValueMappings	GenerateUDMKeyValueMappings generates key value mapping of a raw log.
get	Gets a Instance.
getMultitenantDirectory	Gets the super and subtenants and gets the current tenant name.
getRiskConfig	Queries the instance to get the Risk Configurations used for the computation of Entity Risk Score.
listAllFindingsRefinementDeployments	Lists all findings refinement deployments.
queryProductSourceStats	Gets available product sources along with their stats.
report	Generate a report summarizing this chronicle instance.
searchEntities	Identifies the entity type and retrieves relevant data associated with a specified indicator.
searchRawLogs	Api to get events, entities, or unparsed raw logs matching the given raw log query.
summarizeEntitiesFromQuery	Parses the query and identifies the entities contained within the search query.
summarizeEntity	Returns all entity data over specified time.
testFindingsRefinement	Tests for and returns past activity for a findings refinement, including, potentially, times when the findings refinement was not yet created.
translateUdmQuery	Translate natural language to a UDM Search query.
translateYlRule	Translate natural language to a Yara-L rule.
udmSearch	Performs a UDM search that returns matching events for the query.
updateRiskConfig	Updates RiskConfig used for the computation of Entity Risk Score.
validateQuery	Validates UDM search query by compiling the query.
verifyReferenceList	VerifyReferenceList validates list content and returns line errors, if any.
verifyRuleText	Verifies the given rule text.