UdmEventInfo

JSON representation 
{
  "event": {
    object (UDM)
  },
  "entity": {
    object (Entity)
  },
  "filter_properties": {
    object (FilterProperties)
  },
  "event_log_token": string,
  "alert_number": integer,
  "display_name": string,
  "chip": {
    object (Chip)
  },
  "uid": string,
  "annotations": [
    enum (Annotation)
  ],
  "detections": [
    {
      object (Collection)
    }
  ],
  "outcomes": [
    {
      object (UdmColumnType)
    }
  ],
  "tenant_id": string
}
Fields
event

object (UDM)
entity

object (Entity)
filter_properties
(deprecated)

object (FilterProperties)
event_log_token

string
alert_number

integer
display_name
(deprecated)

string
chip
(deprecated)

object (Chip)
uid

string (bytes format)

A base64-encoded string.
annotations[]

enum (Annotation)
detections[]

object (Collection)
outcomes[]

object (UdmColumnType)
tenant_id

string

Optional.

Annotation

Enums
ANNOTATION_UNSPECIFIED
ANNOTATION_ALERT

UdmColumnType

JSON representation 
{

  // Union field type can be only one of the following:
  "value": {
    object (UdmColumnValue)
  },
  "list": {
    object (UdmColumnList)
  }
  // End of list of possible types for union field type.
}
Fields

Union field type.

type can be only one of the following:
value

object (UdmColumnValue)
list

object (UdmColumnList)

UdmColumnValue

JSON representation 
{

  // Union field value can be only one of the following:
  "null_val": boolean,
  "bool_val": boolean,
  "bytes_val": string,
  "double_val": number,
  "int64_val": string,
  "uint64_val": string,
  "string_val": string,
  "timestamp_val": string,
  "date_val": {
    object (Date)
  },
  "proto_val": {
    "@type": string,
    field1: ...,
    ...
  }
  // End of list of possible types for union field value.
}
Fields

Union field value.

value can be only one of the following:
null_val

boolean
bool_val

boolean
bytes_val

string (bytes format)

A base64-encoded string.
double_val

number
int64_val

string (int64 format)
uint64_val

string
string_val

string
timestamp_val

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
date_val

object (Date)
proto_val

object

An object containing fields of an arbitrary type. An additional field "@type" contains a URI identifying the type. Example: { "id": 1234, "@type": "types.example.com/standard/id" }.

UdmColumnList

JSON representation 
{
  "values": [
    {
      object (UdmColumnValue)
    }
  ]
}
Fields
values[]

object (UdmColumnValue)