[SEC-19484] Add datasource to rule model

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-03-11 16:30:33.807462",
-            "spec_repo_commit": "baf04a80"
+            "regenerated": "2025-03-13 09:11:27.330897",
+            "spec_repo_commit": "a1fc1148"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-03-11 16:30:33.823846",
-            "spec_repo_commit": "baf04a80"
+            "regenerated": "2025-03-13 09:11:27.346427",
+            "spec_repo_commit": "a1fc1148"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -27642,6 +27642,17 @@ components:
       x-enum-varnames:
       - TIMESTAMP_ASCENDING
       - TIMESTAMP_DESCENDING
+    SecurityMonitoringStandardDataSource:
+      default: logs
+      description: Source of events, either logs or audit trail.
+      enum:
+      - logs
+      - audit
+      example: logs
+      type: string
+      x-enum-varnames:
+      - LOGS
+      - AUDIT
     SecurityMonitoringStandardRuleCreatePayload:
       description: Create a new rule.
       properties:
@@ -27809,6 +27820,8 @@ components:
       properties:
         aggregation:
           $ref: '#/components/schemas/SecurityMonitoringRuleQueryAggregation'
+        dataSource:
+          $ref: '#/components/schemas/SecurityMonitoringStandardDataSource'
         distinctFields:
           description: Field for which the cardinality is measured. Sent as an array.
           items:

src/main/java/com/datadog/api/client/v2/model/SecurityMonitoringStandardDataSource.java

@@ -0,0 +1,62 @@
+/*
+ * Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ * This product includes software developed at Datadog (https://www.datadoghq.com/).
+ * Copyright 2019-Present Datadog, Inc.
+ */
+
+package com.datadog.api.client.v2.model;
+
+import com.datadog.api.client.ModelEnum;
+import com.fasterxml.jackson.annotation.JsonCreator;
+import com.fasterxml.jackson.core.JsonGenerator;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.SerializerProvider;
+import com.fasterxml.jackson.databind.annotation.JsonSerialize;
+import com.fasterxml.jackson.databind.ser.std.StdSerializer;
+import java.io.IOException;
+import java.util.Arrays;
+import java.util.HashSet;
+import java.util.Set;
+
+/** Source of events, either logs or audit trail. */
+@JsonSerialize(
+    using =
+        SecurityMonitoringStandardDataSource.SecurityMonitoringStandardDataSourceSerializer.class)
+public class SecurityMonitoringStandardDataSource extends ModelEnum<String> {
+
+  private static final Set<String> allowedValues =
+      new HashSet<String>(Arrays.asList("logs", "audit"));
+
+  public static final SecurityMonitoringStandardDataSource LOGS =
+      new SecurityMonitoringStandardDataSource("logs");
+  public static final SecurityMonitoringStandardDataSource AUDIT =
+      new SecurityMonitoringStandardDataSource("audit");
+
+  SecurityMonitoringStandardDataSource(String value) {
+    super(value, allowedValues);
+  }
+
+  public static class SecurityMonitoringStandardDataSourceSerializer
+      extends StdSerializer<SecurityMonitoringStandardDataSource> {
+    public SecurityMonitoringStandardDataSourceSerializer(
+        Class<SecurityMonitoringStandardDataSource> t) {
+      super(t);
+    }
+
+    public SecurityMonitoringStandardDataSourceSerializer() {
+      this(null);
+    }
+
+    @Override
+    public void serialize(
+        SecurityMonitoringStandardDataSource value, JsonGenerator jgen, SerializerProvider provider)
+        throws IOException, JsonProcessingException {
+      jgen.writeObject(value.value);
+    }
+  }
+
+  @JsonCreator
+  public static SecurityMonitoringStandardDataSource fromValue(String value) {
+    return new SecurityMonitoringStandardDataSource(value);
+  }
+}

src/main/java/com/datadog/api/client/v2/model/SecurityMonitoringStandardRuleQuery.java

@@ -21,6 +21,7 @@
 /** Query for matching rule. */
 @JsonPropertyOrder({
   SecurityMonitoringStandardRuleQuery.JSON_PROPERTY_AGGREGATION,
+  SecurityMonitoringStandardRuleQuery.JSON_PROPERTY_DATA_SOURCE,
   SecurityMonitoringStandardRuleQuery.JSON_PROPERTY_DISTINCT_FIELDS,
   SecurityMonitoringStandardRuleQuery.JSON_PROPERTY_GROUP_BY_FIELDS,
   SecurityMonitoringStandardRuleQuery.JSON_PROPERTY_HAS_OPTIONAL_GROUP_BY_FIELDS,
@@ -36,6 +37,10 @@ public class SecurityMonitoringStandardRuleQuery {
   public static final String JSON_PROPERTY_AGGREGATION = "aggregation";
   private SecurityMonitoringRuleQueryAggregation aggregation;
 
+  public static final String JSON_PROPERTY_DATA_SOURCE = "dataSource";
+  private SecurityMonitoringStandardDataSource dataSource =
+      SecurityMonitoringStandardDataSource.LOGS;
+
   public static final String JSON_PROPERTY_DISTINCT_FIELDS = "distinctFields";
   private List<String> distinctFields = null;
 
@@ -84,6 +89,32 @@ public void setAggregation(SecurityMonitoringRuleQueryAggregation aggregation) {
     this.aggregation = aggregation;
   }
 
+  public SecurityMonitoringStandardRuleQuery dataSource(
+      SecurityMonitoringStandardDataSource dataSource) {
+    this.dataSource = dataSource;
+    this.unparsed |= !dataSource.isValid();
+    return this;
+  }
+
+  /**
+   * Source of events, either logs or audit trail.
+   *
+   * @return dataSource
+   */
+  @jakarta.annotation.Nullable
+  @JsonProperty(JSON_PROPERTY_DATA_SOURCE)
+  @JsonInclude(value = JsonInclude.Include.USE_DEFAULTS)
+  public SecurityMonitoringStandardDataSource getDataSource() {
+    return dataSource;
+  }
+
+  public void setDataSource(SecurityMonitoringStandardDataSource dataSource) {
+    if (!dataSource.isValid()) {
+      this.unparsed = true;
+    }
+    this.dataSource = dataSource;
+  }
+
   public SecurityMonitoringStandardRuleQuery distinctFields(List<String> distinctFields) {
     this.distinctFields = distinctFields;
     return this;
@@ -311,6 +342,7 @@ public boolean equals(Object o) {
     SecurityMonitoringStandardRuleQuery securityMonitoringStandardRuleQuery =
         (SecurityMonitoringStandardRuleQuery) o;
     return Objects.equals(this.aggregation, securityMonitoringStandardRuleQuery.aggregation)
+        && Objects.equals(this.dataSource, securityMonitoringStandardRuleQuery.dataSource)
         && Objects.equals(this.distinctFields, securityMonitoringStandardRuleQuery.distinctFields)
         && Objects.equals(this.groupByFields, securityMonitoringStandardRuleQuery.groupByFields)
         && Objects.equals(
@@ -328,6 +360,7 @@ public boolean equals(Object o) {
   public int hashCode() {
     return Objects.hash(
         aggregation,
+        dataSource,
         distinctFields,
         groupByFields,
         hasOptionalGroupByFields,
@@ -343,6 +376,7 @@ public String toString() {
     StringBuilder sb = new StringBuilder();
     sb.append("class SecurityMonitoringStandardRuleQuery {\n");
     sb.append("    aggregation: ").append(toIndentedString(aggregation)).append("\n");
+    sb.append("    dataSource: ").append(toIndentedString(dataSource)).append("\n");
     sb.append("    distinctFields: ").append(toIndentedString(distinctFields)).append("\n");
     sb.append("    groupByFields: ").append(toIndentedString(groupByFields)).append("\n");
     sb.append("    hasOptionalGroupByFields: ")