Method: legacy.legacyGetRulesTrends

Full name: projects.locations.instances.legacy.legacyGetRulesTrends

Legacy RPC for listing detection counts and last detection timestamp for a list of user-defined rule ids.

HTTP request


Path parameters

Parameters
instance

string

Required. The name of the parent resource, which is the SecOps instance the resource belongs to. Format: projects/{project}/locations/{location}/instances/{instance}

Query parameters

Parameters
ruleId[]

string

Optional. List of rule IDs to return results for. If no rule IDs are provided, this will default to all of the ruleIds for the instance.
bucketTimeRange

object (Interval)

Required. The time range to return bucketed counts for. Note that this will not affect the lastDetectionTime, which indicates the time of the latest detection for the rule regardless of this time range.
bucketSize

enum (BucketSize)

Required. The bucket size.

Request body

The request body must be empty.

Response body

A legacy rpc response for summary of detection counts and last detection timestamp for a list of rule ids.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "ruleTrends": [
    {
      object (LegacyRuleTrends)
    }
  ]
}
Fields

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacies.legacyGetRulesTrends

For more information, see the IAM documentation.