Method: legacy.legacySearchRuleDetectionCountBuckets

• HTTP request
• Path parameters
• Query parameters
• Request body
• Response body
  • JSON representation
• Authorization scopes
• IAM Permissions
• Try it!

Full name: projects.locations.instances.legacy.legacySearchRuleDetectionCountBuckets

Legacy endpoint for listing detection count buckets for a Rules Engine rule.

HTTP request

Choose a location:

africa-south1 asia-northeast1 asia-south1 asia-southeast1 asia-southeast2 australia-southeast1 europe-west12 europe-west2 europe-west3 europe-west6 europe-west9 me-central1 me-central2 me-west1 northamerica-northeast2 southamerica-east1 us eu

Path parameters

Parameters
instance	string Required. The instance the resource belongs to. Format: projects/{project}/locations/{location}/instances/{instance}

Query parameters

Parameters
ruleId	string Required. The rule/curated rule ID to return buckets for.
versionTimestamp	string (Timestamp format) Optional. The version timestamp of the rule. If not specified for a customer rule, buckets will be returned for the latest revision of the rule. Ignored for curated rules. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
timeRange	object (Interval) Required. The time range to return buckets for.
bucketSize	enum (BucketSize) Required. The bucket size. Only BUCKET_SIZE_DAY is currently supported.
ruleSource	enum (RuleSource) Optional. The rule source to return buckets for. If omitted, will default to USER_RULE. Should be consistent with ruleId (USER_RULE for rules, UPPERCASE_RULE for curated rules); otherwise, there could be unexpected behavior.

Request body

The request body must be empty.

Response body

Legacy response with list of found detection count buckets.

If successful, the response body contains data with the following structure:

JSON representation
{ "detectionCountBuckets": [ { object (DetectionCountBucket) } ] }

Fields
detectionCountBuckets[]	object (DetectionCountBucket) Detection count buckets for the rule/curated rule.

Authorization scopes

Requires the following OAuth scope:

• https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

• chronicle.legacies.legacySearchRuleDetectionCountBuckets

For more information, see the IAM documentation.