REST Resource: projects.locations.instances.logTypes

Resource: LogType

A Log type represents a data label for data customers send to Chronicle.

JSON representation 
{
  "name": string,
  "custom_log_type_label": string,
  "display_name": string,
  "golden": boolean,
  "product_source": string,
  "is_custom": boolean
}
Fields
name

string

Output only. The resource name of this log type. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}
custom_log_type_label

string

Output only. the custom log type label
display_name

string

Required. The display name of this log type. This is the tag used in YARA-l rules and search queries.
golden

boolean

Output only. Whether a LogType is a 'Golden' log type or not. LogTypes that support rapid customer onboarding are considered 'Golden' log types.
product_source

string

Required. This is what users see in the UI to identify the logtype while creating feed.
is_custom

boolean

Required. Whether the log type is custom or globally available.

Methods

create

 Create LogType.

generateEventTypesSuggestions

 GenerateEventTypesSuggestions generates event types suggestions that can be mapped by a lowcode parser.

get

 Gets a LogType.

getLogTypeSetting

 Gets a LogTypeSetting.

legacySubmitParserExtension

 LegacySubmitParserExtension creates validates and then makes the extension live.

list

 Lists all LogTypes.

patch

 Update LogType.

runParser

 RunParser runs the parser against a log and returns normalized events or any error that occurred during the normalization.

updateLogTypeSetting

 UpdateLogTypeSetting updates the log type setting for a log type.