Full name: projects.locations.instances.legacy.legacyGetRulesTrends
Legacy RPC for listing detection counts and last detection timestamp for a list of user-defined rule ids.
HTTP request
Path parameters
Parameters
instance
string
Required. The name of the parent resource, which is the SecOps instance the resource belongs to. Format: projects/{project}/locations/{location}/instances/{instance}
Query parameters
Parameters
ruleId[]
string
Optional. List of rule IDs to return results for. If no rule IDs are provided, this will default to all of the ruleIds for the instance.
Required. The time range to return bucketed counts for. Note that this will not affect the lastDetectionTime, which indicates the time of the latest detection for the rule regardless of this time range.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eThis endpoint, \u003ccode\u003eprojects.locations.instances.legacy.legacyGetRulesTrends\u003c/code\u003e, provides a legacy method to retrieve detection counts and the timestamp of the last detection for a list of user-defined rule IDs within a specific instance.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP request is a \u003ccode\u003eGET\u003c/code\u003e method using a URL structure that includes an \u003ccode\u003einstance\u003c/code\u003e path parameter, along with \u003ccode\u003eruleId[]\u003c/code\u003e, \u003ccode\u003ebucketTimeRange\u003c/code\u003e, and \u003ccode\u003ebucketSize\u003c/code\u003e query parameters for rule filtering and bucket configuration.\u003c/p\u003e\n"],["\u003cp\u003eThe request body for this endpoint must be empty, and the response body returns a JSON structure that includes an array of \u003ccode\u003erule_trends\u003c/code\u003e, which contains summaries for each rule.\u003c/p\u003e\n"],["\u003cp\u003eAccessing this endpoint requires the \u003ccode\u003echronicle.legacies.legacyGetRulesTrends\u003c/code\u003e IAM permission on the specified \u003ccode\u003einstance\u003c/code\u003e resource and the \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e OAuth scope.\u003c/p\u003e\n"]]],[],null,["# Method: legacy.legacyGetRulesTrends\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Query parameters](#body.QUERY_PARAMETERS)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n - [JSON representation](#body.LegacyGetRuleTrendsResponse.SCHEMA_REPRESENTATION)\n- [Authorization scopes](#body.aspect)\n- [IAM Permissions](#body.aspect_1)\n- [Try it!](#try-it)\n\n**Full name**: projects.locations.instances.legacy.legacyGetRulesTrends\n\nLegacy RPC for listing detection counts and last detection timestamp for a list of user-defined rule ids.\n\n### HTTP request\n\nChoose a location: \nafrica-south1 asia-northeast1 asia-south1 asia-southeast1 asia-southeast2 australia-southeast1 europe-west12 europe-west2 europe-west3 europe-west6 europe-west9 me-central1 me-central2 me-west1 northamerica-northeast2 southamerica-east1 us eu \n\n\u003cbr /\u003e\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body must be empty.\n\n### Response body\n\nA legacy rpc response for summary of detection counts and last detection timestamp for a list of rule ids.\n\nIf successful, the response body contains data with the following structure:\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp).\n\n### IAM Permissions\n\nRequires the following [IAM](https://cloud.google.com/iam/docs) permission on the `instance` resource:\n\n- `chronicle.legacies.legacyGetRulesTrends`\n\nFor more information, see the [IAM documentation](https://cloud.google.com/iam/docs)."]]
