Chronicle V1 API - Class Google::Cloud::Chronicle::V1::ResultRow (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API class Google::Cloud::Chronicle::V1::ResultRow.

ResultRow is a flexible collection that captures a search result row. It can currently support UDM Events, Entity Contexts, Data Tables, Join results, etc. and will support all other data sources in the future.

Inherits

  • Object

Extended By

  • Google::Protobuf::MessageExts::ClassMethods

Includes

  • Google::Protobuf::MessageExts

Methods

#data_table_record

def data_table_record() -> ::Google::Cloud::Chronicle::V1::DataTableRecord
Returns
  • (::Google::Cloud::Chronicle::V1::DataTableRecord) — Data table.

    Note: The following fields are mutually exclusive: data_table_record, event_record, stats_record, entity_context_record, join_record, detection_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#data_table_record=

def data_table_record=(value) -> ::Google::Cloud::Chronicle::V1::DataTableRecord
Parameter
  • value (::Google::Cloud::Chronicle::V1::DataTableRecord) — Data table.

    Note: The following fields are mutually exclusive: data_table_record, event_record, stats_record, entity_context_record, join_record, detection_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns
  • (::Google::Cloud::Chronicle::V1::DataTableRecord) — Data table.

    Note: The following fields are mutually exclusive: data_table_record, event_record, stats_record, entity_context_record, join_record, detection_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#detection_record

def detection_record() -> ::Google::Cloud::Chronicle::V1::DetectionRecord
Returns
  • (::Google::Cloud::Chronicle::V1::DetectionRecord) — Detection.

    Note: The following fields are mutually exclusive: detection_record, event_record, stats_record, entity_context_record, join_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#detection_record=

def detection_record=(value) -> ::Google::Cloud::Chronicle::V1::DetectionRecord
Parameter
  • value (::Google::Cloud::Chronicle::V1::DetectionRecord) — Detection.

    Note: The following fields are mutually exclusive: detection_record, event_record, stats_record, entity_context_record, join_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns
  • (::Google::Cloud::Chronicle::V1::DetectionRecord) — Detection.

    Note: The following fields are mutually exclusive: detection_record, event_record, stats_record, entity_context_record, join_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#entity_context_record

def entity_context_record() -> ::Google::Cloud::Chronicle::V1::EntityContextRecord
Returns
  • (::Google::Cloud::Chronicle::V1::EntityContextRecord) — Entity context graph.

    Note: The following fields are mutually exclusive: entity_context_record, event_record, stats_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#entity_context_record=

def entity_context_record=(value) -> ::Google::Cloud::Chronicle::V1::EntityContextRecord
Parameter
  • value (::Google::Cloud::Chronicle::V1::EntityContextRecord) — Entity context graph.

    Note: The following fields are mutually exclusive: entity_context_record, event_record, stats_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns
  • (::Google::Cloud::Chronicle::V1::EntityContextRecord) — Entity context graph.

    Note: The following fields are mutually exclusive: entity_context_record, event_record, stats_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#event_record

def event_record() -> ::Google::Cloud::Chronicle::V1::EventRecord
Returns
  • (::Google::Cloud::Chronicle::V1::EventRecord) — UDM event.

    Note: The following fields are mutually exclusive: event_record, stats_record, entity_context_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#event_record=

def event_record=(value) -> ::Google::Cloud::Chronicle::V1::EventRecord
Parameter
  • value (::Google::Cloud::Chronicle::V1::EventRecord) — UDM event.

    Note: The following fields are mutually exclusive: event_record, stats_record, entity_context_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns
  • (::Google::Cloud::Chronicle::V1::EventRecord) — UDM event.

    Note: The following fields are mutually exclusive: event_record, stats_record, entity_context_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#join_record

def join_record() -> ::Google::Cloud::Chronicle::V1::JoinRecord
Returns
  • (::Google::Cloud::Chronicle::V1::JoinRecord) — Join results.

    Note: The following fields are mutually exclusive: join_record, event_record, stats_record, entity_context_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#join_record=

def join_record=(value) -> ::Google::Cloud::Chronicle::V1::JoinRecord
Parameter
  • value (::Google::Cloud::Chronicle::V1::JoinRecord) — Join results.

    Note: The following fields are mutually exclusive: join_record, event_record, stats_record, entity_context_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns
  • (::Google::Cloud::Chronicle::V1::JoinRecord) — Join results.

    Note: The following fields are mutually exclusive: join_record, event_record, stats_record, entity_context_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#outcomes

def outcomes() -> ::Array<::Google::Cloud::Chronicle::V1::ColumnType>
Returns

#outcomes=

def outcomes=(value) -> ::Array<::Google::Cloud::Chronicle::V1::ColumnType>
Parameter
Returns

#stats_record

def stats_record() -> ::Google::Cloud::Chronicle::V1::StatsRecord
Returns
  • (::Google::Cloud::Chronicle::V1::StatsRecord) — Stats record.

    Note: The following fields are mutually exclusive: stats_record, event_record, entity_context_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

#stats_record=

def stats_record=(value) -> ::Google::Cloud::Chronicle::V1::StatsRecord
Parameter
  • value (::Google::Cloud::Chronicle::V1::StatsRecord) — Stats record.

    Note: The following fields are mutually exclusive: stats_record, event_record, entity_context_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns
  • (::Google::Cloud::Chronicle::V1::StatsRecord) — Stats record.

    Note: The following fields are mutually exclusive: stats_record, event_record, entity_context_record, join_record, detection_record, data_table_record. If a field in that set is populated, all other fields in the set will automatically be cleared.