2121/** Query for matching rule. */
2222@ JsonPropertyOrder ({
2323 SecurityMonitoringStandardRuleQuery .JSON_PROPERTY_AGGREGATION ,
24+ SecurityMonitoringStandardRuleQuery .JSON_PROPERTY_DATA_SOURCE ,
2425 SecurityMonitoringStandardRuleQuery .JSON_PROPERTY_DISTINCT_FIELDS ,
2526 SecurityMonitoringStandardRuleQuery .JSON_PROPERTY_GROUP_BY_FIELDS ,
2627 SecurityMonitoringStandardRuleQuery .JSON_PROPERTY_HAS_OPTIONAL_GROUP_BY_FIELDS ,
@@ -36,6 +37,10 @@ public class SecurityMonitoringStandardRuleQuery {
3637 public static final String JSON_PROPERTY_AGGREGATION = "aggregation" ;
3738 private SecurityMonitoringRuleQueryAggregation aggregation ;
3839
40+ public static final String JSON_PROPERTY_DATA_SOURCE = "dataSource" ;
41+ private SecurityMonitoringStandardRuleQueryDataSource dataSource =
42+ SecurityMonitoringStandardRuleQueryDataSource .LOGS ;
43+
3944 public static final String JSON_PROPERTY_DISTINCT_FIELDS = "distinctFields" ;
4045 private List <String > distinctFields = null ;
4146
@@ -84,6 +89,32 @@ public void setAggregation(SecurityMonitoringRuleQueryAggregation aggregation) {
8489 this .aggregation = aggregation ;
8590 }
8691
92+ public SecurityMonitoringStandardRuleQuery dataSource (
93+ SecurityMonitoringStandardRuleQueryDataSource dataSource ) {
94+ this .dataSource = dataSource ;
95+ this .unparsed |= !dataSource .isValid ();
96+ return this ;
97+ }
98+
99+ /**
100+ * Source of events, either logs or audit trail.
101+ *
102+ * @return dataSource
103+ */
104+ @ jakarta .annotation .Nullable
105+ @ JsonProperty (JSON_PROPERTY_DATA_SOURCE )
106+ @ JsonInclude (value = JsonInclude .Include .USE_DEFAULTS )
107+ public SecurityMonitoringStandardRuleQueryDataSource getDataSource () {
108+ return dataSource ;
109+ }
110+
111+ public void setDataSource (SecurityMonitoringStandardRuleQueryDataSource dataSource ) {
112+ if (!dataSource .isValid ()) {
113+ this .unparsed = true ;
114+ }
115+ this .dataSource = dataSource ;
116+ }
117+
87118 public SecurityMonitoringStandardRuleQuery distinctFields (List <String > distinctFields ) {
88119 this .distinctFields = distinctFields ;
89120 return this ;
@@ -311,6 +342,7 @@ public boolean equals(Object o) {
311342 SecurityMonitoringStandardRuleQuery securityMonitoringStandardRuleQuery =
312343 (SecurityMonitoringStandardRuleQuery ) o ;
313344 return Objects .equals (this .aggregation , securityMonitoringStandardRuleQuery .aggregation )
345+ && Objects .equals (this .dataSource , securityMonitoringStandardRuleQuery .dataSource )
314346 && Objects .equals (this .distinctFields , securityMonitoringStandardRuleQuery .distinctFields )
315347 && Objects .equals (this .groupByFields , securityMonitoringStandardRuleQuery .groupByFields )
316348 && Objects .equals (
@@ -328,6 +360,7 @@ public boolean equals(Object o) {
328360 public int hashCode () {
329361 return Objects .hash (
330362 aggregation ,
363+ dataSource ,
331364 distinctFields ,
332365 groupByFields ,
333366 hasOptionalGroupByFields ,
@@ -343,6 +376,7 @@ public String toString() {
343376 StringBuilder sb = new StringBuilder ();
344377 sb .append ("class SecurityMonitoringStandardRuleQuery {\n " );
345378 sb .append (" aggregation: " ).append (toIndentedString (aggregation )).append ("\n " );
379+ sb .append (" dataSource: " ).append (toIndentedString (dataSource )).append ("\n " );
346380 sb .append (" distinctFields: " ).append (toIndentedString (distinctFields )).append ("\n " );
347381 sb .append (" groupByFields: " ).append (toIndentedString (groupByFields )).append ("\n " );
348382 sb .append (" hasOptionalGroupByFields: " )
0 commit comments