Add security_signals to SecurityMonitoringStandardDataSource (#3394)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.generator/schemas/v2/openapi.yaml

@@ -60999,7 +60999,7 @@ components:
         - TIMESTAMP_DESCENDING
     SecurityMonitoringStandardDataSource:
       default: logs
-      description: Source of events, either logs, audit trail, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
+      description: Source of events, either logs, audit trail, security signals, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
       enum:
         - logs
         - audit
@@ -61008,6 +61008,7 @@ components:
         - security_runtime
         - network
         - events
+        - security_signals
       example: logs
       type: string
       x-enum-varnames:
@@ -61018,6 +61019,7 @@ components:
         - SECURITY_RUNTIME
         - NETWORK
         - EVENTS
+        - SECURITY_SIGNALS
     SecurityMonitoringStandardRuleCreatePayload:
       description: Create a new rule.
       properties:

src/datadog_api_client/v2/model/security_monitoring_rule_query.py

@@ -21,7 +21,7 @@ def __init__(self, **kwargs):
         :param custom_query_extension: Query extension to append to the logs query.
         :type custom_query_extension: str, optional
 
-        :param data_source: Source of events, either logs, audit trail, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
+        :param data_source: Source of events, either logs, audit trail, security signals, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
         :type data_source: SecurityMonitoringStandardDataSource, optional
 
         :param distinct_fields: Field for which the cardinality is measured. Sent as an array.

src/datadog_api_client/v2/model/security_monitoring_standard_data_source.py

@@ -14,9 +14,9 @@
 
 class SecurityMonitoringStandardDataSource(ModelSimple):
     """
-    Source of events, either logs, audit trail, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
+    Source of events, either logs, audit trail, security signals, or Datadog events. `app_sec_spans` is deprecated in favor of `spans`.
 
-    :param value: If omitted defaults to "logs". Must be one of ["logs", "audit", "app_sec_spans", "spans", "security_runtime", "network", "events"].
+    :param value: If omitted defaults to "logs". Must be one of ["logs", "audit", "app_sec_spans", "spans", "security_runtime", "network", "events", "security_signals"].
     :type value: str
     """
 
@@ -28,6 +28,7 @@ class SecurityMonitoringStandardDataSource(ModelSimple):
         "security_runtime",
         "network",
         "events",
+        "security_signals",
     }
     LOGS: ClassVar["SecurityMonitoringStandardDataSource"]
     AUDIT: ClassVar["SecurityMonitoringStandardDataSource"]
@@ -36,6 +37,7 @@ class SecurityMonitoringStandardDataSource(ModelSimple):
     SECURITY_RUNTIME: ClassVar["SecurityMonitoringStandardDataSource"]
     NETWORK: ClassVar["SecurityMonitoringStandardDataSource"]
     EVENTS: ClassVar["SecurityMonitoringStandardDataSource"]
+    SECURITY_SIGNALS: ClassVar["SecurityMonitoringStandardDataSource"]
 
     @cached_property
     def openapi_types(_):
@@ -51,3 +53,4 @@ def openapi_types(_):
 SecurityMonitoringStandardDataSource.SECURITY_RUNTIME = SecurityMonitoringStandardDataSource("security_runtime")
 SecurityMonitoringStandardDataSource.NETWORK = SecurityMonitoringStandardDataSource("network")
 SecurityMonitoringStandardDataSource.EVENTS = SecurityMonitoringStandardDataSource("events")
+SecurityMonitoringStandardDataSource.SECURITY_SIGNALS = SecurityMonitoringStandardDataSource("security_signals")

src/datadog_api_client/v2/model/security_monitoring_standard_rule_query.py

@@ -87,7 +87,7 @@ def __init__(
         :param custom_query_extension: Query extension to append to the logs query.
         :type custom_query_extension: str, optional
 
-        :param data_source: Source of events, either logs, audit trail, or Datadog events. ``app_sec_spans`` is deprecated in favor of ``spans``.
+        :param data_source: Source of events, either logs, audit trail, security signals, or Datadog events. ``app_sec_spans`` is deprecated in favor of ``spans``.
         :type data_source: SecurityMonitoringStandardDataSource, optional
 
         :param distinct_fields: Field for which the cardinality is measured. Sent as an array.

src/datadog_api_client/v2/model/threat_hunting_job_query.py

@@ -72,7 +72,7 @@ def __init__(
         :param aggregation: The aggregation type.
         :type aggregation: SecurityMonitoringRuleQueryAggregation, optional
 
-        :param data_source: Source of events, either logs, audit trail, or Datadog events. ``app_sec_spans`` is deprecated in favor of ``spans``.
+        :param data_source: Source of events, either logs, audit trail, security signals, or Datadog events. ``app_sec_spans`` is deprecated in favor of ``spans``.
         :type data_source: SecurityMonitoringStandardDataSource, optional
 
         :param distinct_fields: Field for which the cardinality is measured. Sent as an array.