Resource: Event
Event is a resource that contains information about a telemetry event.
JSON representation |
---|
{
"name": string,
"udm": {
object ( |
Fields | |
---|---|
name |
The resource name of the event. Format: projects/{project}/locations/{location}/instances/{instance}/events/{event} where 'event' is URL-encoded Base64. The unencoded value of 'event' can also be found in udm.metadata.id. |
udm |
Event data in UDM format. |
UDM
JSON representation |
---|
{ "metadata": { object ( |
Fields | |
---|---|
metadata |
|
additional |
|
principal |
|
src |
|
target |
|
intermediary[] |
|
observer |
|
about[] |
|
security_result[] |
|
network |
|
extensions |
|
Extensions
JSON representation |
---|
{ "auth": { object ( |
Fields | |
---|---|
auth |
|
vulns |
|
Authentication
JSON representation |
---|
{ "type": enum ( |
Fields | |
---|---|
type |
|
mechanism[] |
|
auth_details |
|
AuthType
Enums | |
---|---|
AUTHTYPE_UNSPECIFIED |
|
MACHINE |
|
SSO |
|
VPN |
|
PHYSICAL |
|
TACACS |
Mechanism
Enums | |
---|---|
MECHANISM_UNSPECIFIED |
|
USERNAME_PASSWORD |
|
OTP |
|
HARDWARE_KEY |
|
LOCAL |
|
REMOTE |
|
REMOTE_INTERACTIVE |
|
MECHANISM_OTHER |
|
BADGE_READER |
|
NETWORK |
|
BATCH |
|
SERVICE |
|
UNLOCK |
|
NETWORK_CLEAR_TEXT |
|
NEW_CREDENTIALS |
|
INTERACTIVE |
|
CACHED_INTERACTIVE |
|
CACHED_REMOTE_INTERACTIVE |
|
CACHED_UNLOCK |
Vulnerabilities
JSON representation |
---|
{
"vulnerabilities": [
{
object ( |
Fields | |
---|---|
vulnerabilities[] |
|
Methods |
|
---|---|
|
Gets a batch (list) of events given a list of names and a parent. |
|
Gets an event given a name. |
|
ImportEvents import the events. |