public RepeatedField<CompilationDiagnostic> CompilationDiagnostics { get; }
Output only. A list of a rule's corresponding compilation diagnostic
messages such as compilation errors and compilation warnings. Populated in
FULL view.
The etag for this rule.
If this is provided on update, the request will succeed if and only if it
matches the server-computed value, and will fail with an ABORTED error
otherwise.
Populated in BASIC view and FULL view.
public bool NearRealTimeLiveRuleEligible { get; set; }
Output only. Indicate the rule can run in near real time live rule.
If this is true, the rule uses the near real time live rule when the run
frequency is set to LIVE.
Output only. The revision ID of the rule.
A new revision is created whenever the rule text is changed in any way.
Format: v_{10 digits}_{9 digits}
Populated in REVISION_METADATA_ONLY view and FULL view.
Resource name of the DataAccessScope bound to this rule.
Populated in BASIC view and FULL view.
If reference lists are used in the rule, validations will be performed
against this scope to ensure that the reference lists are compatible with
both the user's and the rule's scopes.
The scope should be in the format:
projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope}.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[],[],null,["# Chronicle v1 API - Class Rule (1.0.0-beta02)\n\nVersion latestkeyboard_arrow_down\n\n- [1.0.0-beta02 (latest)](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.Rule)\n- [1.0.0-beta01](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/1.0.0-beta01/Google.Cloud.Chronicle.V1.Rule) \n\n public sealed class Rule : IMessage\u003cRule\u003e, IEquatable\u003cRule\u003e, IDeepCloneable\u003cRule\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Chronicle v1 API class Rule.\n\nThe Rule resource represents a user-created rule.\nNEXT TAG: 21 \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e Rule \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[Rule](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.Rule), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[Rule](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.Rule), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[Rule](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.Rule), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.Chronicle.V1](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.Chronicle.V1.dll\n\nConstructors\n------------\n\n### Rule()\n\n public Rule()\n\n### Rule(Rule)\n\n public Rule(Rule other)\n\nProperties\n----------\n\n### AllowedRunFrequencies\n\n public RepeatedField\u003cRunFrequency\u003e AllowedRunFrequencies { get; }\n\nOutput only. The run frequencies that are allowed for the rule.\nPopulated in BASIC view and FULL view.\n\n### Author\n\n public string Author { get; set; }\n\nOutput only. The author of the rule. Extracted from the meta section of\ntext. Populated in BASIC view and FULL view.\n\n### CompilationDiagnostics\n\n public RepeatedField\u003cCompilationDiagnostic\u003e CompilationDiagnostics { get; }\n\nOutput only. A list of a rule's corresponding compilation diagnostic\nmessages such as compilation errors and compilation warnings. Populated in\nFULL view.\n\n### CompilationState\n\n public Rule.Types.CompilationState CompilationState { get; set; }\n\nOutput only. The current compilation state of the rule.\nPopulated in FULL view.\n\n### CreateTime\n\n public Timestamp CreateTime { get; set; }\n\nOutput only. The timestamp of when the rule was created.\nPopulated in FULL view.\n\n### DisplayName\n\n public string DisplayName { get; set; }\n\nOutput only. Display name of the rule.\nPopulated in BASIC view and FULL view.\n\n### Etag\n\n public string Etag { get; set; }\n\nThe etag for this rule.\nIf this is provided on update, the request will succeed if and only if it\nmatches the server-computed value, and will fail with an ABORTED error\notherwise.\nPopulated in BASIC view and FULL view.\n\n### InputsUsed\n\n public InputsUsed InputsUsed { get; set; }\n\nOutput only. The set of inputs used in the rule. For example, if the rule\nuses $e.principal.hostname, then the uses_udm field will be true.\n\n### Metadata\n\n public MapField\u003cstring, string\u003e Metadata { get; }\n\nOutput only. Additional metadata specified in the meta section of text.\nPopulated in FULL view.\n\n### Name\n\n public string Name { get; set; }\n\nIdentifier. Full resource name for the rule.\nFormat:\n`projects/{project}/locations/{location}/instances/{instance}/rules/{rule}`\n\n### NearRealTimeLiveRuleEligible\n\n public bool NearRealTimeLiveRuleEligible { get; set; }\n\nOutput only. Indicate the rule can run in near real time live rule.\nIf this is true, the rule uses the near real time live rule when the run\nfrequency is set to LIVE.\n\n### ReferenceLists\n\n public RepeatedField\u003cstring\u003e ReferenceLists { get; }\n\nOutput only. Resource names of the reference lists used in this rule.\nPopulated in FULL view.\n\n### ReferenceListsAsReferenceListNames\n\n public ResourceNameList\u003cReferenceListName\u003e ReferenceListsAsReferenceListNames { get; }\n\n[ReferenceListName](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.ReferenceListName)-typed view over the [ReferenceLists](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.Rule#Google_Cloud_Chronicle_V1_Rule_ReferenceLists) resource name property.\n\n### RevisionCreateTime\n\n public Timestamp RevisionCreateTime { get; set; }\n\nOutput only. The timestamp of when the rule revision was created.\nPopulated in FULL, REVISION_METADATA_ONLY views.\n\n### RevisionId\n\n public string RevisionId { get; set; }\n\nOutput only. The revision ID of the rule.\nA new revision is created whenever the rule text is changed in any way.\nFormat: `v_{10 digits}_{9 digits}`\nPopulated in REVISION_METADATA_ONLY view and FULL view.\n\n### RuleName\n\n public RuleName RuleName { get; set; }\n\n[RuleName](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.RuleName)-typed view over the [Name](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.Rule#Google_Cloud_Chronicle_V1_Rule_Name) resource name property.\n\n### Scope\n\n public string Scope { get; set; }\n\nResource name of the DataAccessScope bound to this rule.\nPopulated in BASIC view and FULL view.\nIf reference lists are used in the rule, validations will be performed\nagainst this scope to ensure that the reference lists are compatible with\nboth the user's and the rule's scopes.\nThe scope should be in the format:\n`projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope}`.\n\n### ScopeAsDataAccessScopeName\n\n public DataAccessScopeName ScopeAsDataAccessScopeName { get; set; }\n\n[DataAccessScopeName](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.DataAccessScopeName)-typed view over the [Scope](/dotnet/docs/reference/Google.Cloud.Chronicle.V1/latest/Google.Cloud.Chronicle.V1.Rule#Google_Cloud_Chronicle_V1_Rule_Scope) resource name property.\n\n### Severity\n\n public Severity Severity { get; set; }\n\nOutput only. The severity of the rule as specified in the meta section of\ntext. Populated in BASIC view and FULL view.\n\n### Text\n\n public string Text { get; set; }\n\nThe YARA-L content of the rule.\nPopulated in FULL view.\n\n### Type\n\n public RuleType Type { get; set; }\n\nOutput only. User-facing type of the rule. Extracted from the events\nsection of rule text. Populated in BASIC view and FULL view."]]
