Resource: LogType
A Log type represents a data label for data customers send to Chronicle.
JSON representation |
---|
{
"name": string,
"customLogTypeLabel": string,
"displayName": string,
"golden": boolean,
"productSource": string,
"isCustom": boolean,
"hasCustomParser": boolean,
"lastIngestedTime": string,
"feedCount": integer,
"parserType": enum ( |
Fields | |
---|---|
name |
Output only. The resource name of this log type. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{logType} |
customLogTypeLabel |
Output only. the custom log type label |
displayName |
Required. The display name of this log type. This is the tag used in YARA-l rules and search queries. |
golden |
Output only. Whether a LogType is a 'Golden' log type or not. LogTypes that support rapid customer onboarding are considered 'Golden' log types. |
productSource |
Required. This is what users see in the UI to identify the logtype while creating feed. |
isCustom |
Required. Whether the log type is custom or globally available. |
hasCustomParser |
Required. The log type could be custom logtype but still be using prebuilt parser. If this is set to true that means that there is a custom parser for this log type. ( deprecated ) |
lastIngestedTime |
Required. The last time the log type was ingested. Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
feedCount |
Required. The number of feeds that are ingested for this log type. |
parserType |
Required. The type of parser used for this log type. (custom/prebuilt/-) |
ParserType
enum for getting a ParserType.
Enums | |
---|---|
PARSER_TYPE_UNSPECIFIED |
Unspecified parser type. |
CUSTOM_PARSER |
Custom parser. |
PREBUILT_PARSER |
Prebuilt parser. |
Methods |
|
---|---|
|
Create LogType. |
|
GenerateEventTypesSuggestions generates event types suggestions that can be mapped by a lowcode parser. |
|
Gets a LogTypeSetting. |
|
LegacySubmitParserExtension creates validates and then makes the extension live. |
|
Lists all LogTypes. |
|
RunParser runs the parser against a log and returns normalized events or any error that occurred during the normalization. |
|
UpdateLogTypeSetting updates the log type setting for a log type. |