Chronicle v1 API - Class FindingsRefinement (1.0.0-beta07) 

public sealed class FindingsRefinement : IMessage<FindingsRefinement>, IEquatable<FindingsRefinement>, IDeepCloneable<FindingsRefinement>, IBufferMessage, IMessage

Reference documentation and code samples for the Chronicle v1 API class FindingsRefinement.

Represents a set of logic conditions used to refine various types of findings such as curated rule detections.

Inheritance

object > FindingsRefinement

Namespace

Google.Cloud.Chronicle.V1

Assembly

Google.Cloud.Chronicle.V1.dll

Constructors

FindingsRefinement()

public FindingsRefinement()

FindingsRefinement(FindingsRefinement)

public FindingsRefinement(FindingsRefinement other)
Parameter
Name Description
other FindingsRefinement

Properties

CreateTime

public Timestamp CreateTime { get; set; }

Output only. The timestamp of when the findings refinement was created.

Property Value
Type Description
Timestamp

DisplayName

public string DisplayName { get; set; }

Display name of the findings refinement.

Property Value
Type Description
string

FindingsRefinementName

public FindingsRefinementName FindingsRefinementName { get; set; }

FindingsRefinementName-typed view over the Name resource name property.

Property Value
Type Description
FindingsRefinementName

Name

public string Name { get; set; }

Full resource name for the findings refinement. Format: projects/{project}/locations/{region}/instances/{instance}/findingsRefinements/{findings_refinement}

Property Value
Type Description
string

OutcomeFilters

public RepeatedField<OutcomeFilter> OutcomeFilters { get; }

Optional. The outcome filters for the findings refinement. These allow you to specify filters that are applied to the outcome variables in the detection. All filters must be true for a detection to match the findings refinement.

Property Value
Type Description
RepeatedFieldOutcomeFilter

Query

public string Query { get; set; }

The query for the findings refinement. Works in conjunction with the type field to determine the findings refinement behavior. The syntax of this query is the same as a UDM search string. See the following for more information: https://cloud.google.com/chronicle/docs/investigation/udm-search

Property Value
Type Description
string

Type

public FindingsRefinementType Type { get; set; }

The type of findings refinement.

Property Value
Type Description
FindingsRefinementType

UpdateTime

public Timestamp UpdateTime { get; set; }

Output only. The timestamp of when the findings refinement was last updated.

Property Value
Type Description
Timestamp