Method: entities.add

Full name: projects.locations.instances.watchlists.entities.add

Adds an entity in watchlist.

HTTP request

POST https://chronicle.googleapis.com/v1alpha/{parent}/entities:add

Path parameters

Parameters
parent

string

Required. The parent resource where this entity will be added. Format: projects/{project}/locations/{location}/instances/{instance}/watchlists/{watchlist}

Request body

The request body contains data with the following structure:

JSON representation 
{
  "entity": {
    object (Entity)
  }
}
Fields
entity

object (Entity)

Required. The entity to add. Note that one and only one of the following field should be populated: - entity.asset.ip (with only one element) - entity.asset.mac (with only one element) - entity.asset.hostname - entity.asset.product_object_id - entity.user.userid - entity.user.email_addresses (with only one element) - entity.user.employee_id - entity.user.windows_sid - entity.user.product_object_id On the other hand, entity.namespace is optional.

Response body

If successful, the response body contains an instance of Entity.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the parent resource:

  • chronicle.entities.create

For more information, see the IAM documentation.