REST Resource: projects.locations.instances.events

Resource: Event

Event is a resource that contains information about a telemetry event.

JSON representation
{
  "name": string,
  "udm": {
    object (UDM)
  }
}
Fields
name

string

The resource name of the event. Format: projects/{project}/locations/{location}/instances/{instance}/events/{event} where 'event' is URL-encoded Base64. The unencoded value of 'event' can also be found in udm.metadata.id.

udm

object (UDM)

Event data in UDM format.

UDM

JSON representation
{
  "metadata": {
    object (Metadata)
  },
  "additional": {
    object
  },
  "principal": {
    object (Noun)
  },
  "src": {
    object (Noun)
  },
  "target": {
    object (Noun)
  },
  "intermediary": [
    {
      object (Noun)
    }
  ],
  "observer": {
    object (Noun)
  },
  "about": [
    {
      object (Noun)
    }
  ],
  "security_result": [
    {
      object (SecurityResult)
    }
  ],
  "network": {
    object (Network)
  },
  "extensions": {
    object (Extensions)
  }
}
Fields
metadata

object (Metadata)

additional

object (Struct format)

principal

object (Noun)

src

object (Noun)

target

object (Noun)

intermediary[]

object (Noun)

observer

object (Noun)

about[]

object (Noun)

security_result[]

object (SecurityResult)

network

object (Network)

extensions

object (Extensions)

Extensions

JSON representation
{
  "auth": {
    object (Authentication)
  },
  "vulns": {
    object (Vulnerabilities)
  }
}
Fields
auth

object (Authentication)

vulns

object (Vulnerabilities)

Authentication

JSON representation
{
  "type": enum (AuthType),
  "mechanism": [
    enum (Mechanism)
  ],
  "auth_details": string
}
Fields
type

enum (AuthType)

mechanism[]

enum (Mechanism)

auth_details

string

AuthType

Enums
AUTHTYPE_UNSPECIFIED
MACHINE
SSO
VPN
PHYSICAL
TACACS

Mechanism

Enums
MECHANISM_UNSPECIFIED
USERNAME_PASSWORD
OTP
HARDWARE_KEY
LOCAL
REMOTE
REMOTE_INTERACTIVE
MECHANISM_OTHER
BADGE_READER
NETWORK
BATCH
SERVICE
UNLOCK
NETWORK_CLEAR_TEXT
NEW_CREDENTIALS
INTERACTIVE
CACHED_INTERACTIVE
CACHED_REMOTE_INTERACTIVE
CACHED_UNLOCK

Vulnerabilities

JSON representation
{
  "vulnerabilities": [
    {
      object (Vulnerability)
    }
  ]
}
Fields
vulnerabilities[]

object (Vulnerability)

Methods

batchGet

Gets a batch (list) of events given a list of names and a parent.

get

Gets an event given a name.

import

ImportEvents import the events.