@@ -100272,6 +100272,15 @@ paths:
100272100272 requestBody:
100273100273 content:
100274100274 application/json:
100275+ examples:
100276+ default:
100277+ value:
100278+ data:
100279+ attributes:
100280+ description: Queue for annotating customer support traces
100281+ name: My annotation queue
100282+ project_id: a33671aa-24fd-4dcd-9b33-a8ec7dde7751
100283+ type: queues
100275100284 schema:
100276100285 $ref: "#/components/schemas/LLMObsAnnotationQueueRequest"
100277100286 description: Create annotation queue payload.
@@ -100359,6 +100368,14 @@ paths:
100359100368 requestBody:
100360100369 content:
100361100370 application/json:
100371+ examples:
100372+ default:
100373+ value:
100374+ data:
100375+ attributes:
100376+ description: Updated description
100377+ name: Updated queue name
100378+ type: queues
100362100379 schema:
100363100380 $ref: "#/components/schemas/LLMObsAnnotationQueueUpdateRequest"
100364100381 description: Update annotation queue payload.
@@ -100464,6 +100481,15 @@ paths:
100464100481 requestBody:
100465100482 content:
100466100483 application/json:
100484+ examples:
100485+ default:
100486+ value:
100487+ data:
100488+ attributes:
100489+ interactions:
100490+ - content_id: trace-abc-123
100491+ type: trace
100492+ type: interactions
100467100493 schema:
100468100494 $ref: "#/components/schemas/LLMObsAnnotationQueueInteractionsRequest"
100469100495 description: Add interactions payload.
@@ -100519,6 +100545,14 @@ paths:
100519100545 requestBody:
100520100546 content:
100521100547 application/json:
100548+ examples:
100549+ default:
100550+ value:
100551+ data:
100552+ attributes:
100553+ interaction_ids:
100554+ - 00000000-0000-0000-0000-000000000000
100555+ type: interactions
100522100556 schema:
100523100557 $ref: "#/components/schemas/LLMObsDeleteAnnotationQueueInteractionsRequest"
100524100558 description: Delete interactions payload.
@@ -108849,6 +108883,17 @@ paths:
108849108883 requestBody:
108850108884 content:
108851108885 application/json:
108886+ examples:
108887+ default:
108888+ value:
108889+ data:
108890+ attributes:
108891+ name: Updated Personal Access Token
108892+ scopes:
108893+ - dashboards_read
108894+ - dashboards_write
108895+ id: 00112233-4455-6677-8899-aabbccddeeff
108896+ type: personal_access_tokens
108852108897 schema:
108853108898 $ref: "#/components/schemas/PersonalAccessTokenUpdateRequest"
108854108899 required: true
@@ -118148,6 +118193,21 @@ paths:
118148118193 requestBody:
118149118194 content:
118150118195 "application/json":
118196+ examples:
118197+ default:
118198+ value:
118199+ cases: []
118200+ filters: []
118201+ hasExtendedTitle: true
118202+ isEnabled: true
118203+ message: ""
118204+ name: My security monitoring rule.
118205+ options: {}
118206+ queries: []
118207+ tags:
118208+ - env:prod
118209+ - team:security
118210+ type: log_detection
118151118211 schema:
118152118212 $ref: "#/components/schemas/SecurityMonitoringRuleCreatePayload"
118153118213 required: true
@@ -118596,6 +118656,21 @@ paths:
118596118656 requestBody:
118597118657 content:
118598118658 "application/json":
118659+ examples:
118660+ default:
118661+ value:
118662+ cases: []
118663+ filters: []
118664+ hasExtendedTitle: true
118665+ isEnabled: true
118666+ message: ""
118667+ name: My security monitoring rule.
118668+ options: {}
118669+ queries: []
118670+ tags:
118671+ - env:prod
118672+ - team:security
118673+ version: 1
118599118674 schema:
118600118675 $ref: "#/components/schemas/SecurityMonitoringRuleUpdatePayload"
118601118676 required: true
@@ -118677,6 +118752,25 @@ paths:
118677118752 requestBody:
118678118753 content:
118679118754 "application/json":
118755+ examples:
118756+ default:
118757+ value:
118758+ rule:
118759+ cases: []
118760+ hasExtendedTitle: true
118761+ isEnabled: true
118762+ message: ""
118763+ name: My security monitoring rule.
118764+ options: {}
118765+ queries: []
118766+ tags:
118767+ - env:prod
118768+ - team:security
118769+ type: log_detection
118770+ ruleQueryPayloads:
118771+ - expectedResult: true
118772+ index: 0
118773+ payload: {}
118680118774 schema:
118681118775 $ref: "#/components/schemas/SecurityMonitoringRuleTestRequest"
118682118776 required: true
@@ -119217,6 +119311,14 @@ paths:
119217119311 requestBody:
119218119312 content:
119219119313 application/json:
119314+ examples:
119315+ default:
119316+ value:
119317+ data:
119318+ attributes:
119319+ resource_ids:
119320+ - ""
119321+ type: bulk_export_resources
119220119322 schema:
119221119323 $ref: "#/components/schemas/SecurityMonitoringTerraformBulkExportRequest"
119222119324 description: The resource IDs to export.
@@ -119266,6 +119368,18 @@ paths:
119266119368 requestBody:
119267119369 content:
119268119370 application/json:
119371+ examples:
119372+ default:
119373+ value:
119374+ data:
119375+ attributes:
119376+ resource_json:
119377+ enabled: true
119378+ name: Custom suppression
119379+ rule_query: "type:log_detection source:cloudtrail"
119380+ suppression_query: "env:staging status:low"
119381+ id: abc-123
119382+ type: convert_resource
119269119383 schema:
119270119384 $ref: "#/components/schemas/SecurityMonitoringTerraformConvertRequest"
119271119385 description: The resource JSON to convert.
@@ -120038,6 +120152,16 @@ paths:
120038120152 requestBody:
120039120153 content:
120040120154 application/json:
120155+ examples:
120156+ default:
120157+ value:
120158+ data:
120159+ attributes:
120160+ name: Service Account Access Token
120161+ scopes:
120162+ - dashboards_read
120163+ - dashboards_write
120164+ type: personal_access_tokens
120041120165 schema:
120042120166 $ref: "#/components/schemas/ServiceAccountAccessTokenCreateRequest"
120043120167 required: true
@@ -120150,6 +120274,17 @@ paths:
120150120274 requestBody:
120151120275 content:
120152120276 application/json:
120277+ examples:
120278+ default:
120279+ value:
120280+ data:
120281+ attributes:
120282+ name: Updated Personal Access Token
120283+ scopes:
120284+ - dashboards_read
120285+ - dashboards_write
120286+ id: 00112233-4455-6677-8899-aabbccddeeff
120287+ type: personal_access_tokens
120153120288 schema:
120154120289 $ref: "#/components/schemas/PersonalAccessTokenUpdateRequest"
120155120290 required: true
@@ -120874,6 +121009,16 @@ paths:
120874121009 requestBody:
120875121010 content:
120876121011 "application/json":
121012+ examples:
121013+ default:
121014+ value:
121015+ filter:
121016+ from: "2019-01-02T09:42:36.320Z"
121017+ query: "security:attack status:high"
121018+ to: "2019-01-03T09:42:36.320Z"
121019+ page:
121020+ limit: 25
121021+ sort: timestamp
120877121022 schema:
120878121023 $ref: "#/components/schemas/SecurityMonitoringSignalListRequest"
120879121024 required: false
@@ -120991,6 +121136,33 @@ paths:
120991121136 requestBody:
120992121137 content:
120993121138 "application/json":
121139+ examples:
121140+ default:
121141+ value:
121142+ data:
121143+ attributes:
121144+ jobDefinition:
121145+ cases:
121146+ - condition: "a > 100"
121147+ name: high
121148+ status: high
121149+ from: 1729843470000
121150+ index: cloud_siem
121151+ message: "A large number of failed login attempts."
121152+ name: "Excessive number of failed attempts."
121153+ options:
121154+ evaluationWindow: 300
121155+ keepAlive: 3600
121156+ maxSignalDuration: 86400
121157+ queries:
121158+ - aggregation: count
121159+ groupByFields: []
121160+ query: "a > 3"
121161+ tags:
121162+ - env:prod
121163+ to: 1729847070000
121164+ type: log_detection
121165+ type: historicalDetectionsJobCreate
120994121166 schema:
120995121167 $ref: "#/components/schemas/RunHistoricalJobRequest"
120996121168 required: true
@@ -121034,6 +121206,18 @@ paths:
121034121206 requestBody:
121035121207 content:
121036121208 "application/json":
121209+ examples:
121210+ default:
121211+ value:
121212+ data:
121213+ attributes:
121214+ jobResultIds:
121215+ - ""
121216+ notifications:
121217+ - ""
121218+ signalMessage: A large number of failed login attempts.
121219+ signalSeverity: critical
121220+ type: historicalDetectionsJobResultSignalConversion
121037121221 schema:
121038121222 $ref: "#/components/schemas/ConvertJobResultsToSignalsRequest"
121039121223 required: true
0 commit comments