Method: legacy.legacyGetRuleCounts

Full name: projects.locations.instances.legacy.legacyGetRuleCounts

RPC to get rule counts.

HTTP request

GET https://chronicle.googleapis.com/v1alpha/{instance}/legacy:legacyGetRuleCounts

Path parameters

Parameters
instance

string

Required. The instance the resource belongs to. Format: projects/{project}/locations/{location}/instances/{instance}

Request body

The request body must be empty.

Response body

A legacy rpc response for rule count stats.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "total_active_count": integer,
  "total_archived_count": integer,
  "total_live_rule_counts_per_rule_type": [
    {
      object (UserFacingRuleTypeToCount)
    }
  ],
  "max_live_rule_counts_per_rule_type": [
    {
      object (UserFacingRuleTypeToCount)
    }
  ],
  "total_live_rule_count": integer,
  "max_live_rule_count": integer,
  "chronicle_rules_quota_limit": integer,
  "chronicle_rules_quota_usage": integer
}
Fields
total_active_count

integer

Number of active rules for a customer.
total_archived_count

integer

Number of archived rules for a customer.
total_live_rule_counts_per_rule_type[]

object (UserFacingRuleTypeToCount)

Total rule count of all enabled Live Rules, per RuleType.
max_live_rule_counts_per_rule_type[]

object (UserFacingRuleTypeToCount)

Maximum rule count of all enabled Live Rules, per RuleType.
total_live_rule_count

integer

Total rule count
max_live_rule_count

integer

Maximum rule count
chronicle_rules_quota_limit

integer

Chronicle rules quota limit.
chronicle_rules_quota_usage

integer

Chronicle rules quota usage.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacies.legacyGetRuleCounts

For more information, see the IAM documentation.

UserFacingRuleTypeToCount

JSON representation 
{
  "type": enum (UserFacingRuleType),
  "count": integer
}
Fields
type

enum (UserFacingRuleType)
count

integer