EventsWidget

Events widget.

JSON representation
{
  "columns": [
    string
  ],
  "rows": [
    {
      object (EventWidgetRow)
    }
  ],
  "title": string,
  "order": integer,
  "type": enum (WidgetTemplateType),
  "gridColumns": enum (WidgetTemplateGridColumns),
  "description": string,
  "identifier": string,
  "jsonData": string,
  "errorJsonData": string,
  "resultStatus": enum (WidgetResultStatus)
}
Fields
columns[]

string

Output only. The columns to display.

rows[]

object (EventWidgetRow)

Output only. The rows to display.

title

string

Output only. The widget title.

order

integer

Output only. The widget order.

type

enum (WidgetTemplateType)

Output only. The widget template type.

gridColumns

enum (WidgetTemplateGridColumns)

Output only. The widget template grid columns.

description

string

Output only. The widget description.

identifier

string

Output only. The widget identifier.

jsonData

string

Output only. The widget json data.

errorJsonData

string

Output only. The widget error json data.

resultStatus

enum (WidgetResultStatus)

Output only. The widget result status.

EventWidgetRow

Event widget row.

JSON representation
{
  "sourceSystemName": string,
  "product": string,
  "eventName": string,
  "cells": [
    {
      object (EventWidgetCell)
    }
  ],
  "fieldsGroups": [
    {
      object (WidgetFieldGroupData)
    }
  ]
}
Fields
sourceSystemName

string

Output only. Which alerting system raises the alert. E.g. "QRadar", "Arcsight", "Microsoft CASB". The Integration Name in soar.

product

string

Output only. The product associated with the alert. E.g. DLP, WinEventLog:Security

eventName

string

Output only. Event display name. For example: Email Check, Data Exfiltration, IRC etc.

cells[]

object (EventWidgetCell)

Output only. The cells to display.

fieldsGroups[]

object (WidgetFieldGroupData)

Output only. The event fields.

EventWidgetCell

Event widget cell.

JSON representation
{
  "value": string,
  "relatedEntity": {
    object (SecurityEntity)
  }
}
Fields
value

string

Output only. The cell value.

relatedEntity

object (SecurityEntity)

Output only. The related entity.