DataSource

LINT.IfChange(dataSources)

Enums
DATA_SOURCE_UNSPECIFIED
UDM
ENTITY
INGESTION_METRICS
RULE_DETECTIONSRULE_DETECTIONS is used for detections datasource.
RULESETSRULESETS is used for ruleset with detections datasource.
GLOBALGLOBAL is used for standard time range filter.
IOC_MATCHESIOC_MATCHES is used for iocMatches datasource.
RULESRULES is used for rules datasource.
SOAR_CASESSOAR Cases - identified ascase.
SOAR_PLAYBOOKSSOAR Playbooks - identified asplaybook.
SOAR_CASE_HISTORYSOAR Case History - identified ascase_history.
DATA_TABLEDATA_TABLE is used for data tables source.
INVESTIGATIONINVESTIGATION is used as the data source for triage agent investigations. Identified asgemini_investigation.
INVESTIGATION_FEEDBACKINVESTIGATION_FEEDBACK is used as the data source for user feedback on triage agent investigations. Identified asgemini_investigation_feedback.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-10 UTC.