17
17
from datadog_api_client .v2 .model .security_monitoring_rule_query_aggregation import (
18
18
SecurityMonitoringRuleQueryAggregation ,
19
19
)
20
+ from datadog_api_client .v2 .model .security_monitoring_standard_data_source import (
21
+ SecurityMonitoringStandardDataSource ,
22
+ )
20
23
21
24
22
25
class HistoricalJobQuery (ModelNormal ):
@@ -25,9 +28,13 @@ def openapi_types(_):
25
28
from datadog_api_client .v2 .model .security_monitoring_rule_query_aggregation import (
26
29
SecurityMonitoringRuleQueryAggregation ,
27
30
)
31
+ from datadog_api_client .v2 .model .security_monitoring_standard_data_source import (
32
+ SecurityMonitoringStandardDataSource ,
33
+ )
28
34
29
35
return {
30
36
"aggregation" : (SecurityMonitoringRuleQueryAggregation ,),
37
+ "data_source" : (SecurityMonitoringStandardDataSource ,),
31
38
"distinct_fields" : ([str ],),
32
39
"group_by_fields" : ([str ],),
33
40
"has_optional_group_by_fields" : (bool ,),
@@ -38,6 +45,7 @@ def openapi_types(_):
38
45
39
46
attribute_map = {
40
47
"aggregation" : "aggregation" ,
48
+ "data_source" : "dataSource" ,
41
49
"distinct_fields" : "distinctFields" ,
42
50
"group_by_fields" : "groupByFields" ,
43
51
"has_optional_group_by_fields" : "hasOptionalGroupByFields" ,
@@ -52,6 +60,7 @@ def openapi_types(_):
52
60
def __init__ (
53
61
self_ ,
54
62
aggregation : Union [SecurityMonitoringRuleQueryAggregation , UnsetType ] = unset ,
63
+ data_source : Union [SecurityMonitoringStandardDataSource , UnsetType ] = unset ,
55
64
distinct_fields : Union [List [str ], UnsetType ] = unset ,
56
65
group_by_fields : Union [List [str ], UnsetType ] = unset ,
57
66
has_optional_group_by_fields : Union [bool , UnsetType ] = unset ,
@@ -66,6 +75,9 @@ def __init__(
66
75
:param aggregation: The aggregation type.
67
76
:type aggregation: SecurityMonitoringRuleQueryAggregation, optional
68
77
78
+ :param data_source: Source of events, either logs or audit trail.
79
+ :type data_source: SecurityMonitoringStandardDataSource, optional
80
+
69
81
:param distinct_fields: Field for which the cardinality is measured. Sent as an array.
70
82
:type distinct_fields: [str], optional
71
83
@@ -86,6 +98,8 @@ def __init__(
86
98
"""
87
99
if aggregation is not unset :
88
100
kwargs ["aggregation" ] = aggregation
101
+ if data_source is not unset :
102
+ kwargs ["data_source" ] = data_source
89
103
if distinct_fields is not unset :
90
104
kwargs ["distinct_fields" ] = distinct_fields
91
105
if group_by_fields is not unset :
0 commit comments