[SEC-19484] Add datasource to rule model (#2972)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-03-11 16:30:30.102793",
-            "spec_repo_commit": "baf04a80"
+            "regenerated": "2025-03-13 09:11:30.011128",
+            "spec_repo_commit": "a1fc1148"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-03-11 16:30:30.118458",
-            "spec_repo_commit": "baf04a80"
+            "regenerated": "2025-03-13 09:11:30.026653",
+            "spec_repo_commit": "a1fc1148"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -27642,6 +27642,17 @@ components:
       x-enum-varnames:
       - TIMESTAMP_ASCENDING
       - TIMESTAMP_DESCENDING
+    SecurityMonitoringStandardDataSource:
+      default: logs
+      description: Source of events, either logs or audit trail.
+      enum:
+      - logs
+      - audit
+      example: logs
+      type: string
+      x-enum-varnames:
+      - LOGS
+      - AUDIT
     SecurityMonitoringStandardRuleCreatePayload:
       description: Create a new rule.
       properties:
@@ -27809,6 +27820,8 @@ components:
       properties:
         aggregation:
           $ref: '#/components/schemas/SecurityMonitoringRuleQueryAggregation'
+        dataSource:
+          $ref: '#/components/schemas/SecurityMonitoringStandardDataSource'
         distinctFields:
           description: Field for which the cardinality is measured. Sent as an array.
           items:

api/datadogV2/model_security_monitoring_standard_data_source.go

@@ -0,0 +1,66 @@
+// Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+// This product includes software developed at Datadog (https://www.datadoghq.com/).
+// Copyright 2019-Present Datadog, Inc.
+
+package datadogV2
+
+import (
+	"fmt"
+
+	"github.com/DataDog/datadog-api-client-go/v2/api/datadog"
+)
+
+// SecurityMonitoringStandardDataSource Source of events, either logs or audit trail.
+type SecurityMonitoringStandardDataSource string
+
+// List of SecurityMonitoringStandardDataSource.
+const (
+	SECURITYMONITORINGSTANDARDDATASOURCE_LOGS  SecurityMonitoringStandardDataSource = "logs"
+	SECURITYMONITORINGSTANDARDDATASOURCE_AUDIT SecurityMonitoringStandardDataSource = "audit"
+)
+
+var allowedSecurityMonitoringStandardDataSourceEnumValues = []SecurityMonitoringStandardDataSource{
+	SECURITYMONITORINGSTANDARDDATASOURCE_LOGS,
+	SECURITYMONITORINGSTANDARDDATASOURCE_AUDIT,
+}
+
+// GetAllowedValues reeturns the list of possible values.
+func (v *SecurityMonitoringStandardDataSource) GetAllowedValues() []SecurityMonitoringStandardDataSource {
+	return allowedSecurityMonitoringStandardDataSourceEnumValues
+}
+
+// UnmarshalJSON deserializes the given payload.
+func (v *SecurityMonitoringStandardDataSource) UnmarshalJSON(src []byte) error {
+	var value string
+	err := datadog.Unmarshal(src, &value)
+	if err != nil {
+		return err
+	}
+	*v = SecurityMonitoringStandardDataSource(value)
+	return nil
+}
+
+// NewSecurityMonitoringStandardDataSourceFromValue returns a pointer to a valid SecurityMonitoringStandardDataSource
+// for the value passed as argument, or an error if the value passed is not allowed by the enum.
+func NewSecurityMonitoringStandardDataSourceFromValue(v string) (*SecurityMonitoringStandardDataSource, error) {
+	ev := SecurityMonitoringStandardDataSource(v)
+	if ev.IsValid() {
+		return &ev, nil
+	}
+	return nil, fmt.Errorf("invalid value '%v' for SecurityMonitoringStandardDataSource: valid values are %v", v, allowedSecurityMonitoringStandardDataSourceEnumValues)
+}
+
+// IsValid return true if the value is valid for the enum, false otherwise.
+func (v SecurityMonitoringStandardDataSource) IsValid() bool {
+	for _, existing := range allowedSecurityMonitoringStandardDataSourceEnumValues {
+		if existing == v {
+			return true
+		}
+	}
+	return false
+}
+
+// Ptr returns reference to SecurityMonitoringStandardDataSource value.
+func (v SecurityMonitoringStandardDataSource) Ptr() *SecurityMonitoringStandardDataSource {
+	return &v
+}

api/datadogV2/model_security_monitoring_standard_rule_query.go

@@ -12,6 +12,8 @@ import (
 type SecurityMonitoringStandardRuleQuery struct {
 	// The aggregation type.
 	Aggregation *SecurityMonitoringRuleQueryAggregation `json:"aggregation,omitempty"`
+	// Source of events, either logs or audit trail.
+	DataSource *SecurityMonitoringStandardDataSource `json:"dataSource,omitempty"`
 	// Field for which the cardinality is measured. Sent as an array.
 	DistinctFields []string `json:"distinctFields,omitempty"`
 	// Fields to group by.
@@ -39,6 +41,8 @@ type SecurityMonitoringStandardRuleQuery struct {
 // will change when the set of required properties is changed.
 func NewSecurityMonitoringStandardRuleQuery() *SecurityMonitoringStandardRuleQuery {
 	this := SecurityMonitoringStandardRuleQuery{}
+	var dataSource SecurityMonitoringStandardDataSource = SECURITYMONITORINGSTANDARDDATASOURCE_LOGS
+	this.DataSource = &dataSource
 	return &this
 }
 
@@ -47,6 +51,8 @@ func NewSecurityMonitoringStandardRuleQuery() *SecurityMonitoringStandardRuleQue
 // but it doesn't guarantee that properties required by API are set.
 func NewSecurityMonitoringStandardRuleQueryWithDefaults() *SecurityMonitoringStandardRuleQuery {
 	this := SecurityMonitoringStandardRuleQuery{}
+	var dataSource SecurityMonitoringStandardDataSource = SECURITYMONITORINGSTANDARDDATASOURCE_LOGS
+	this.DataSource = &dataSource
 	return &this
 }
 
@@ -78,6 +84,34 @@ func (o *SecurityMonitoringStandardRuleQuery) SetAggregation(v SecurityMonitorin
 	o.Aggregation = &v
 }
 
+// GetDataSource returns the DataSource field value if set, zero value otherwise.
+func (o *SecurityMonitoringStandardRuleQuery) GetDataSource() SecurityMonitoringStandardDataSource {
+	if o == nil || o.DataSource == nil {
+		var ret SecurityMonitoringStandardDataSource
+		return ret
+	}
+	return *o.DataSource
+}
+
+// GetDataSourceOk returns a tuple with the DataSource field value if set, nil otherwise
+// and a boolean to check if the value has been set.
+func (o *SecurityMonitoringStandardRuleQuery) GetDataSourceOk() (*SecurityMonitoringStandardDataSource, bool) {
+	if o == nil || o.DataSource == nil {
+		return nil, false
+	}
+	return o.DataSource, true
+}
+
+// HasDataSource returns a boolean if a field has been set.
+func (o *SecurityMonitoringStandardRuleQuery) HasDataSource() bool {
+	return o != nil && o.DataSource != nil
+}
+
+// SetDataSource gets a reference to the given SecurityMonitoringStandardDataSource and assigns it to the DataSource field.
+func (o *SecurityMonitoringStandardRuleQuery) SetDataSource(v SecurityMonitoringStandardDataSource) {
+	o.DataSource = &v
+}
+
 // GetDistinctFields returns the DistinctFields field value if set, zero value otherwise.
 func (o *SecurityMonitoringStandardRuleQuery) GetDistinctFields() []string {
 	if o == nil || o.DistinctFields == nil {
@@ -286,6 +320,9 @@ func (o SecurityMonitoringStandardRuleQuery) MarshalJSON() ([]byte, error) {
 	if o.Aggregation != nil {
 		toSerialize["aggregation"] = o.Aggregation
 	}
+	if o.DataSource != nil {
+		toSerialize["dataSource"] = o.DataSource
+	}
 	if o.DistinctFields != nil {
 		toSerialize["distinctFields"] = o.DistinctFields
 	}
@@ -318,6 +355,7 @@ func (o SecurityMonitoringStandardRuleQuery) MarshalJSON() ([]byte, error) {
 func (o *SecurityMonitoringStandardRuleQuery) UnmarshalJSON(bytes []byte) (err error) {
 	all := struct {
 		Aggregation              *SecurityMonitoringRuleQueryAggregation `json:"aggregation,omitempty"`
+		DataSource               *SecurityMonitoringStandardDataSource   `json:"dataSource,omitempty"`
 		DistinctFields           []string                                `json:"distinctFields,omitempty"`
 		GroupByFields            []string                                `json:"groupByFields,omitempty"`
 		HasOptionalGroupByFields *bool                                   `json:"hasOptionalGroupByFields,omitempty"`
@@ -331,7 +369,7 @@ func (o *SecurityMonitoringStandardRuleQuery) UnmarshalJSON(bytes []byte) (err e
 	}
 	additionalProperties := make(map[string]interface{})
 	if err = datadog.Unmarshal(bytes, &additionalProperties); err == nil {
-		datadog.DeleteKeys(additionalProperties, &[]string{"aggregation", "distinctFields", "groupByFields", "hasOptionalGroupByFields", "metric", "metrics", "name", "query"})
+		datadog.DeleteKeys(additionalProperties, &[]string{"aggregation", "dataSource", "distinctFields", "groupByFields", "hasOptionalGroupByFields", "metric", "metrics", "name", "query"})
 	} else {
 		return err
 	}
@@ -342,6 +380,11 @@ func (o *SecurityMonitoringStandardRuleQuery) UnmarshalJSON(bytes []byte) (err e
 	} else {
 		o.Aggregation = all.Aggregation
 	}
+	if all.DataSource != nil && !all.DataSource.IsValid() {
+		hasInvalidField = true
+	} else {
+		o.DataSource = all.DataSource
+	}
 	o.DistinctFields = all.DistinctFields
 	o.GroupByFields = all.GroupByFields
 	o.HasOptionalGroupByFields = all.HasOptionalGroupByFields