Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::SoarAlertMetadata.
Metadata fields of alerts coming from other SIEM systems.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#alert_id
def alert_id() -> ::String
Returns
- (::String) — Alert ID in the source SIEM system.
#alert_id=
def alert_id=(value) -> ::String
Parameter
- value (::String) — Alert ID in the source SIEM system.
Returns
- (::String) — Alert ID in the source SIEM system.
#product
def product() -> ::String
Returns
- (::String) — Name of the product the alert is coming from.
#product=
def product=(value) -> ::String
Parameter
- value (::String) — Name of the product the alert is coming from.
Returns
- (::String) — Name of the product the alert is coming from.
#source_rule
def source_rule() -> ::String
Returns
- (::String) — Name of the rule triggering the alert in the source SIEM.
#source_rule=
def source_rule=(value) -> ::String
Parameter
- value (::String) — Name of the rule triggering the alert in the source SIEM.
Returns
- (::String) — Name of the rule triggering the alert in the source SIEM.
#source_system
def source_system() -> ::String
Returns
- (::String) — Name of the Source SIEM system.
#source_system=
def source_system=(value) -> ::String
Parameter
- value (::String) — Name of the Source SIEM system.
Returns
- (::String) — Name of the Source SIEM system.
#source_system_ticket_id
def source_system_ticket_id() -> ::String
Returns
- (::String) — Ticket id for the alert in the source system.
#source_system_ticket_id=
def source_system_ticket_id=(value) -> ::String
Parameter
- value (::String) — Ticket id for the alert in the source system.
Returns
- (::String) — Ticket id for the alert in the source system.
#source_system_uri
def source_system_uri() -> ::String
Returns
- (::String) — Url to the source SIEM system.
#source_system_uri=
def source_system_uri=(value) -> ::String
Parameter
- value (::String) — Url to the source SIEM system.
Returns
- (::String) — Url to the source SIEM system.
#vendor
def vendor() -> ::String
Returns
- (::String) — Name of the vendor.
#vendor=
def vendor=(value) -> ::String
Parameter
- value (::String) — Name of the vendor.
Returns
- (::String) — Name of the vendor.