Reference documentation and code samples for the Chronicle V1 API class Google::Cloud::Chronicle::V1::SearchRequest.
Request message for the Search method.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#dialect
def dialect() -> ::Google::Cloud::Chronicle::V1::QueryDialect
Returns
- (::Google::Cloud::Chronicle::V1::QueryDialect) — Optional. Specifies the dialect the Search Query is written in. If not specified, the query will be parsed as YL2.
#dialect=
def dialect=(value) -> ::Google::Cloud::Chronicle::V1::QueryDialect
Parameter
- value (::Google::Cloud::Chronicle::V1::QueryDialect) — Optional. Specifies the dialect the Search Query is written in. If not specified, the query will be parsed as YL2.
Returns
- (::Google::Cloud::Chronicle::V1::QueryDialect) — Optional. Specifies the dialect the Search Query is written in. If not specified, the query will be parsed as YL2.
#draft_data_access_scope
def draft_data_access_scope() -> ::Google::Cloud::Chronicle::V1::DataAccessScope
Returns
- (::Google::Cloud::Chronicle::V1::DataAccessScope) — Optional. Data access scope used to filter events. This is intended to be used by admins to preview in-development scopes. Should only be called by users with global access. If the caller does not have global access, the request will fail.
#draft_data_access_scope=
def draft_data_access_scope=(value) -> ::Google::Cloud::Chronicle::V1::DataAccessScope
Parameter
- value (::Google::Cloud::Chronicle::V1::DataAccessScope) — Optional. Data access scope used to filter events. This is intended to be used by admins to preview in-development scopes. Should only be called by users with global access. If the caller does not have global access, the request will fail.
Returns
- (::Google::Cloud::Chronicle::V1::DataAccessScope) — Optional. Data access scope used to filter events. This is intended to be used by admins to preview in-development scopes. Should only be called by users with global access. If the caller does not have global access, the request will fail.
#parent
def parent() -> ::String
Returns
- (::String) — Required. The resource name of the instance on which to perform the search. Format: projects/{project}/locations/{location}/instances/{instance}
#parent=
def parent=(value) -> ::String
Parameter
- value (::String) — Required. The resource name of the instance on which to perform the search. Format: projects/{project}/locations/{location}/instances/{instance}
Returns
- (::String) — Required. The resource name of the instance on which to perform the search. Format: projects/{project}/locations/{location}/instances/{instance}
#query
def query() -> ::String
Returns
-
(::String) — Required. The search query, in the dialect set in
dialect. Example: 'ip=/172.*/ AND metadata.event_type!="NETWORK_CONNECTION" AND ( target.ip = "3.225.179.73" OR target.ip = "23.47.48.70")'
#query=
def query=(value) -> ::String
Parameter
-
value (::String) — Required. The search query, in the dialect set in
dialect. Example: 'ip=/172.*/ AND metadata.event_type!="NETWORK_CONNECTION" AND ( target.ip = "3.225.179.73" OR target.ip = "23.47.48.70")'
Returns
-
(::String) — Required. The search query, in the dialect set in
dialect. Example: 'ip=/172.*/ AND metadata.event_type!="NETWORK_CONNECTION" AND ( target.ip = "3.225.179.73" OR target.ip = "23.47.48.70")'
#result_limit
def result_limit() -> ::Integer
Returns
-
(::Integer) — Optional. Requested maximum number of rows to materialize. The service may
return fewer. If unspecified, a server-side default of 10,000 is used. The
maximum value is 1,000,000. Some dialects have a lower maximum; see
QueryDialect.
#result_limit=
def result_limit=(value) -> ::Integer
Parameter
-
value (::Integer) — Optional. Requested maximum number of rows to materialize. The service may
return fewer. If unspecified, a server-side default of 10,000 is used. The
maximum value is 1,000,000. Some dialects have a lower maximum; see
QueryDialect.
Returns
-
(::Integer) — Optional. Requested maximum number of rows to materialize. The service may
return fewer. If unspecified, a server-side default of 10,000 is used. The
maximum value is 1,000,000. Some dialects have a lower maximum; see
QueryDialect.
#simulated_data_visibility
def simulated_data_visibility() -> ::Google::Cloud::Chronicle::V1::SimulatedDataVisibility
Returns
- (::Google::Cloud::Chronicle::V1::SimulatedDataVisibility) — Optional. Specifies visibility of simulated data to include in search results.
#simulated_data_visibility=
def simulated_data_visibility=(value) -> ::Google::Cloud::Chronicle::V1::SimulatedDataVisibility
Parameter
- value (::Google::Cloud::Chronicle::V1::SimulatedDataVisibility) — Optional. Specifies visibility of simulated data to include in search results.
Returns
- (::Google::Cloud::Chronicle::V1::SimulatedDataVisibility) — Optional. Specifies visibility of simulated data to include in search results.
#time_range
def time_range() -> ::Google::Type::Interval
Returns
- (::Google::Type::Interval) — Required. Time range to search for [Inclusive start time, exclusive end time).
#time_range=
def time_range=(value) -> ::Google::Type::Interval
Parameter
- value (::Google::Type::Interval) — Required. Time range to search for [Inclusive start time, exclusive end time).
Returns
- (::Google::Type::Interval) — Required. Time range to search for [Inclusive start time, exclusive end time).