REST Resource: projects.locations.instances.enrichmentControls

Resource: EnrichmentControl

An EnrichmentControl resource represents a control to an enrichment. Enrichment is the process of populating UDM events with more useful information. The creation and deletion of the control are not immediate and will take some time to be fully enforced and only effect future events, which means that the control will not be applied to events retroactively.

JSON representation 
{
  "name": string,
  "enrichment_control_option": {
    object (EnrichmentControlOption)
  },
  "state": enum (State),
  "display_name": string,
  "description": string
}
Fields
name

string

Identifier. The resource name of the EnrichmentControl. Format: projects/{project}/locations/{location}/instances/{instance}/enrichmentControls/{enrichment_control}
enrichment_control_option

object (EnrichmentControlOption)

Required. The options to control the enrichment.
state

enum (State)

Output only. The EnrichmentControl resource instance state. Output only.
display_name

string

Required. A human-readable name for this enrichment control.
description

string

Optional. A human-readable description for this enrichment control.

EnrichmentControlOption

The options to control the enrichment.

JSON representation 
{

  // Union field option can be only one of the following:
  "enrichment_disablement_target": {
    object (EnrichmentDisablementTarget)
  }
  // End of list of possible types for union field option.
}
Fields
Union field option. The option to control the enrichment. option can be only one of the following:
enrichment_disablement_target

object (EnrichmentDisablementTarget)

Disable enrichment for a particular telemetry log type. This means an individual log would no longer be enriched.

EnrichmentDisablementTarget

Enrichment Target Option. This option will stop enriching events in a particular log type and event type.

JSON representation 
{
  "enrichment_type": enum (EnrichmentType),
  "log_type": string,
  "event_type": enum (EventType)
}
Fields
enrichment_type

enum (EnrichmentType)

Required. The type of enrichment to disable.
log_type

string

Required. Raw LogType. Apply to all log types if ALL_TYPE. If multiple controls are created for the same log type, all of the controls will be applied. If both log_type and event_type are set in the same control, it will be applied to the specific event type in the specific log type. Format: projects/{project}/locations/{location}/instances/{instance}/logTypes/{log_type}
event_type

enum (EventType)

Optional. The event type. Apply to all event_type if not set. If multiple controls are created for the same event type, all of the controls will be applied. If both log_type and event_type are set, the control will be applied to the specific event type in the specific log type.

EnrichmentType

The type of enrichment to disable.

Enums
ENRICHMENT_TYPE_UNSPECIFIED Unspecified.
ALL_TYPES ALL enrichment types.
ASSET Asset enrichment.
USER User enrichment.
PROCESS Process enrichment.
GOOGLE_THREAT_INTEL Google Threat Intel enrichment.
GEOIP GeoIP enrichment.

State

Holds the state of the EnrichmentControl resource.

Enums
STATE_UNSPECIFIED State not set.
CREATING The EnrichmentControl is being created and enforced. Newly created controls have this state. Enforcement of a control is not immediate and will take some time to be fully enforced.
CREATED The EnrichmentControl has been created and fully enforced.
DELETING The EnrichmentControl is being deleted. It will transition to this state when a user deletes the control. Deletion of the control is not immediate and will take some time to be fully enforced.
DELETED The EnrichmentControl has been deleted. It will transition to this state when the deletion of the control is fully enforced.

Methods

create

 Create an EnrichmentControl resource.

delete

 Delete an EnrichmentControl.

get

 Get an EnrichmentControl.

list

 List all EnrichmentControls.