Metadata

JSON representation
EventType
Tags
- JSON representation
EnrichmentState
DataAccessLabels
- JSON representation
DataAccessIngestionLabel
- JSON representation

JSON representation

JSON representation
{ "id": string, "product_log_id": string, "event_timestamp": string, "collected_timestamp": string, "ingested_timestamp": string, "event_type": enum (`EventType`), "vendor_name": string, "product_name": string, "product_version": string, "product_event_type": string, "product_deployment_id": string, "description": string, "url_back_to_product": string, "ingestion_labels": [ { object (`Label`) } ], "tags": { object (`Tags`) }, "enrichment_state": enum (`EnrichmentState`), "log_type": string, "base_labels": { object (`DataAccessLabels`) }, "enrichment_labels": { object (`DataAccessLabels`) } }

{
  "id": string,
  "product_log_id": string,
  "event_timestamp": string,
  "collected_timestamp": string,
  "ingested_timestamp": string,
  "event_type": enum (EventType),
  "vendor_name": string,
  "product_name": string,
  "product_version": string,
  "product_event_type": string,
  "product_deployment_id": string,
  "description": string,
  "url_back_to_product": string,
  "ingestion_labels": [
    {
      object (Label)
    }
  ],
  "tags": {
    object (Tags)
  },
  "enrichment_state": enum (EnrichmentState),
  "log_type": string,
  "base_labels": {
    object (DataAccessLabels)
  },
  "enrichment_labels": {
    object (DataAccessLabels)
  }
}

Fields
`id`	`string (bytes format)` A base64-encoded string.
`product_log_id`	`string`
`event_timestamp`	`string (Timestamp format)` A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: `"2014-10-02T15:01:23Z"` and `"2014-10-02T15:01:23.045123456Z"`.
`collected_timestamp`	`string (Timestamp format)` A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: `"2014-10-02T15:01:23Z"` and `"2014-10-02T15:01:23.045123456Z"`.
`ingested_timestamp`	`string (Timestamp format)` A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: `"2014-10-02T15:01:23Z"` and `"2014-10-02T15:01:23.045123456Z"`.
`event_type`	`enum (EventType)`
`vendor_name`	`string`
`product_name`	`string`
`product_version`	`string`
`product_event_type`	`string`
`product_deployment_id`	`string`
`description`	`string`
`url_back_to_product`	`string`
`ingestion_labels[]`	`object (Label)`
`tags`	`object (Tags)`
`enrichment_state`	`enum (EnrichmentState)`
`log_type`	`string`
`base_labels`	`object (DataAccessLabels)`
`enrichment_labels`	`object (DataAccessLabels)`

EventType

Enums
`EVENTTYPE_UNSPECIFIED`
`PROCESS_UNCATEGORIZED`
`PROCESS_LAUNCH`
`PROCESS_INJECTION`
`PROCESS_PRIVILEGE_ESCALATION`
`PROCESS_TERMINATION`
`PROCESS_OPEN`
`PROCESS_MODULE_LOAD`
`REGISTRY_UNCATEGORIZED`
`REGISTRY_CREATION`
`REGISTRY_MODIFICATION`
`REGISTRY_DELETION`
`SETTING_UNCATEGORIZED`
`SETTING_CREATION`
`SETTING_MODIFICATION`
`SETTING_DELETION`
`MUTEX_UNCATEGORIZED`
`MUTEX_CREATION`
`FILE_UNCATEGORIZED`
`FILE_CREATION`
`FILE_DELETION`
`FILE_MODIFICATION`
`FILE_READ`
`FILE_COPY`
`FILE_OPEN`
`FILE_MOVE`
`FILE_SYNC`
`USER_UNCATEGORIZED`
`USER_LOGIN`
`USER_LOGOUT`
`USER_CREATION`
`USER_CHANGE_PASSWORD`
`USER_CHANGE_PERMISSIONS`
`USER_STATS`	This item is deprecated!
`USER_BADGE_IN`
`USER_DELETION`
`USER_RESOURCE_CREATION`
`USER_RESOURCE_UPDATE_CONTENT`
`USER_RESOURCE_UPDATE_PERMISSIONS`
`USER_COMMUNICATION`
`USER_RESOURCE_ACCESS`
`USER_RESOURCE_DELETION`
`GROUP_UNCATEGORIZED`
`GROUP_CREATION`
`GROUP_DELETION`
`GROUP_MODIFICATION`
`EMAIL_UNCATEGORIZED`
`EMAIL_TRANSACTION`
`EMAIL_URL_CLICK`	This item is deprecated!
`NETWORK_UNCATEGORIZED`
`NETWORK_FLOW`
`NETWORK_CONNECTION`
`NETWORK_FTP`
`NETWORK_DHCP`
`NETWORK_DNS`
`NETWORK_HTTP`
`NETWORK_SMTP`
`STATUS_UNCATEGORIZED`
`STATUS_HEARTBEAT`
`STATUS_STARTUP`
`STATUS_SHUTDOWN`
`STATUS_UPDATE`
`SCAN_UNCATEGORIZED`
`SCAN_FILE`
`SCAN_PROCESS_BEHAVIORS`	This item is deprecated!
`SCAN_PROCESS`
`SCAN_HOST`
`SCAN_VULN_HOST`
`SCAN_VULN_NETWORK`
`SCAN_NETWORK`
`SCHEDULED_TASK_UNCATEGORIZED`
`SCHEDULED_TASK_CREATION`
`SCHEDULED_TASK_DELETION`
`SCHEDULED_TASK_ENABLE`
`SCHEDULED_TASK_DISABLE`
`SCHEDULED_TASK_MODIFICATION`
`SYSTEM_AUDIT_LOG_UNCATEGORIZED`
`SYSTEM_AUDIT_LOG_WIPE`
`SERVICE_UNSPECIFIED`
`SERVICE_CREATION`
`SERVICE_DELETION`
`SERVICE_START`
`SERVICE_STOP`
`SERVICE_MODIFICATION`
`GENERIC_EVENT`
`RESOURCE_CREATION`
`RESOURCE_DELETION`
`RESOURCE_PERMISSIONS_CHANGE`
`RESOURCE_READ`
`RESOURCE_WRITTEN`
`DEVICE_FIRMWARE_UPDATE`
`DEVICE_CONFIG_UPDATE`
`DEVICE_PROGRAM_UPLOAD`
`DEVICE_PROGRAM_DOWNLOAD`
`ANALYST_UPDATE_VERDICT`
`ANALYST_UPDATE_REPUTATION`
`ANALYST_UPDATE_SEVERITY_SCORE`
`ANALYST_UPDATE_STATUS`
`ANALYST_ADD_COMMENT`
`ANALYST_UPDATE_PRIORITY`
`ANALYST_UPDATE_ROOT_CAUSE`
`ANALYST_UPDATE_REASON`
`ANALYST_UPDATE_RISK_SCORE`

JSON representation
{ "tenant_id": [ string ], "data_tap_config_name": [ string ] }

Fields
`tenant_id[]`	`string (bytes format)` A base64-encoded string.
`data_tap_config_name[]`	`string`

EnrichmentState

Enums
`ENRICHMENT_STATE_UNSPECIFIED`
`ENRICHED`
`UNENRICHED`

DataAccessLabels

JSON representation

JSON representation
{ "log_types": [ string ], "ingestion_labels": [ string ], "namespaces": [ string ], "custom_labels": [ string ], "ingestion_kv_labels": [ { object (`DataAccessIngestionLabel`) } ], "allow_scoped_access": boolean }

{
  "log_types": [
    string
  ],
  "ingestion_labels": [
    string
  ],
  "namespaces": [
    string
  ],
  "custom_labels": [
    string
  ],
  "ingestion_kv_labels": [
    {
      object (DataAccessIngestionLabel)
    }
  ],
  "allow_scoped_access": boolean
}

Fields
`log_types[]`	`string`
`ingestion_labels[] (deprecated)`	`string` This item is deprecated!
`namespaces[]`	`string`
`custom_labels[]`	`string`
`ingestion_kv_labels[]`	`object (DataAccessIngestionLabel)`
`allow_scoped_access`	`boolean`

DataAccessIngestionLabel

JSON representation
{ "key": string, "value": string }

Fields
`key`	`string`
`value`	`string`