REST Resource: projects.locations.instances

Resource: Instance

A Instance represents an instantiation of the Instance product.

JSON representation 
{
  "name": string
}
Fields
name

string

Output only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}

Methods

batchValidateWatchlistEntities

 Validates a batch of entities that could be added into watchlist under an instance.

computeAllFindingsRefinementActivities

 Returns findings refinement activity for all findings refinements.

countAllCuratedRuleSetDetections

 Count detections across all curated rule sets.

createFeedback

 RPC to submit user feedback on content generated by Malachite Atlas services.

extractSyslog

 ExtractSyslog extracts structured part of log from a unstructured log by running a grok regex over it.

findEntity

 Identifies the entity type and retrieves relevant data associated with a specified indicator.

findEntityAlerts

 Get alerts for an entity

findRelatedEntities

 Finds all the entities associated with provided entity.

findUdmFieldValues

 Finds ingested UDM field values that match a query.

generateUdmKeyValueMappings

 GenerateUDMKeyValueMappings generates key value mapping of a raw log.

get

 Gets a Instance.

getMultitenantDirectory

 Gets the super and subtenants and gets the current tenant name.

getRiskConfig

 Queries the instance to get the Risk Configurations used for the computation of Entity Risk Score.

listAllFindingsRefinementDeployments

 Lists all findings refinement deployments.

queryProductSourceStats

 Gets available product sources along with their stats.

report

 Generate a report summarizing this chronicle instance.

searchEntities

 Identifies the entity type and retrieves relevant data associated with a specified indicator.

searchRawLogs

 Api to get events, entities, or unparsed raw logs matching the given raw log query.

summarizeEntitiesFromQuery

 Parses the query and identifies the entities contained within the search query.

summarizeEntity

 Returns all entity data over specified time.

testFindingsRefinement

 Tests for and returns past activity for a findings refinement, including, potentially, times when the findings refinement was not yet created.

translateUdmQuery

 Translate natural language to a UDM Search query.

translateYlRule

 Translate natural language to a Yara-L rule.

udmSearch

 Performs a UDM search that returns matching events for the query.

updateRiskConfig

 Updates RiskConfig used for the computation of Entity Risk Score.

validateQuery

 Validates UDM search query by compiling the query.

verifyReferenceList

 VerifyReferenceList validates list content and returns line errors, if any.

verifyRuleText

 Verifies the given rule text.