DataSource

LINT.IfChange(data_sources)

Enums
DATA_SOURCE_UNSPECIFIED
UDM
ENTITY
INGESTION_METRICS
RULE_DETECTIONS RULE_DETECTIONS is used for detections datasource.
RULESETS RULESETS is used for ruleset with detections datasource.
GLOBAL GLOBAL is used for standard time range filter.
IOC_MATCHES IOC_MATCHES is used for ioc_matches datasource.
RULES RULES is used for rules datasource.
SOAR_CASES SOAR Cases - identified as case.
SOAR_PLAYBOOKS SOAR Playbooks - identified as playbook.
SOAR_CASE_HISTORY SOAR Case History - identified as case_history.