Method: curatedRuleSets.countCuratedRuleSetDetections

Full name: projects.locations.instances.curatedRuleSetCategories.curatedRuleSets.countCuratedRuleSetDetections

Counts the detections generated by a CuratedRuleSet.

HTTP request

POST https://chronicle.googleapis.com/v1alpha/{name}:countCuratedRuleSetDetections

Path parameters

Parameters
name

string

Required. The name of the CuratedRuleSet to retrieve a count for. Formats: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{curated_rule_set_category}/curatedRuleSets/{curated_rule_set}

Request body

The request body contains data with the following structure:

JSON representation 
{
  "interval": {
    object (Interval)
  }
}
Fields
interval

object (Interval)

Required. Time interval over which to generate counts.

Response body

Response message for counts of detections generated by a curated rule set.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "name": string,
  "count": integer,
  "curated_rule_counts": [
    {
      object (CuratedRuleCount)
    }
  ]
}
Fields
name

string

Name of the curated rule set. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{curated_rule_set_category}/curatedRuleSets/{curated_rule_set}
count

integer

Count of detections generated by the curated rule set.
curated_rule_counts[]

object (CuratedRuleCount)

Counts of detections aggregated by the originating curated rule.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the name resource:

  • chronicle.curatedRuleSets.countCuratedRuleSetDetections

For more information, see the IAM documentation.