Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
94 changes: 21 additions & 73 deletions .generator/schemas/v2/openapi.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -37853,7 +37853,7 @@ components:
$ref: "#/components/schemas/LLMObsAnnotationItem"
type: array
content_id:
description: Identifier of the content for this interaction.
description: Identifier of the content (trace ID or session ID) for this interaction.
example: "trace-abc-123"
type: string
id:
Expand Down Expand Up @@ -38052,7 +38052,7 @@ components:
description: A single interaction to add to an annotation queue.
properties:
content_id:
description: Identifier of the content (such as trace ID) for this interaction.
description: Identifier of the content (trace ID or session ID) for this interaction.
example: "trace-abc-123"
type: string
type:
Expand All @@ -38069,7 +38069,7 @@ components:
example: false
type: boolean
content_id:
description: Identifier of the content for this interaction.
description: Identifier of the content (trace ID or session ID) for this interaction.
example: "trace-abc-123"
type: string
id:
Expand Down Expand Up @@ -39516,11 +39516,13 @@ components:
enum:
- trace
- experiment_trace
- session
example: trace
type: string
x-enum-varnames:
- TRACE
- EXPERIMENT_TRACE
- SESSION
LLMObsMetricAssessment:
description: Assessment result for an LLM Observability experiment metric.
enum:
Expand Down Expand Up @@ -62654,23 +62656,19 @@ components:
- DONE
- TIMEOUT
SecurityMonitoringContentPackActivation:
description: The activation status of a content pack.
description: The activation status of a content pack
enum:
- never_activated
- activated
- deactivated
example: activated
type: string
x-enum-descriptions:
- Pack has never been activated for this organization.
- Pack is currently activated.
- Pack was previously activated but has since been deactivated.
x-enum-varnames:
- NEVER_ACTIVATED
- ACTIVATED
- DEACTIVATED
SecurityMonitoringContentPackIntegrationStatus:
description: The installation status of the related integration.
description: The installation status of the related integration
enum:
- installed
- available
Expand All @@ -62679,12 +62677,6 @@ components:
- error
example: installed
type: string
x-enum-descriptions:
- Integration is fully installed.
- Integration exists in the catalog but is not installed.
- Integration is only partially configured.
- Integration detected (for example, logs are flowing) but not explicitly installed.
- Integration is in an error state.
x-enum-varnames:
- INSTALLED
- AVAILABLE
Expand All @@ -62701,17 +62693,15 @@ components:
cp_activation:
$ref: "#/components/schemas/SecurityMonitoringContentPackActivation"
filters_configured_for_logs:
description: |-
Whether filters (Security Filters or Index Query depending on the pricing model) are
present and correctly configured to route logs into Cloud SIEM.
description: Whether filters (Security Filters or Index Query depending on the pricing model) are configured for logs
example: true
type: boolean
integration_installed_status:
$ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus"
logs_last_collected:
$ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket"
logs_seen_from_any_index:
description: Whether logs for this content pack have been seen in any Datadog index within the last 72 hours.
description: Whether logs have been seen from any index
example: true
type: boolean
state:
Expand Down Expand Up @@ -62776,7 +62766,7 @@ components:
- meta
type: object
SecurityMonitoringContentPackStatus:
description: The current operational status of a content pack.
description: The current status of a content pack
enum:
- install
- activate
Expand All @@ -62786,13 +62776,6 @@ components:
- broken
example: active
type: string
x-enum-descriptions:
- Not activated; no logs detected in the last 72 hours.
- Not activated; logs are flowing into a Datadog index but not yet routed through Cloud SIEM.
- Activated; awaiting first log ingestion.
- Activated; logs received within the last 24 hours.
- Activated; integration not installed or logs last seen 24 to 72 hours ago.
- Activated; no logs for over 72 hours, filter missing, or Cloud SIEM index incorrectly ordered.
x-enum-varnames:
- INSTALL
- ACTIVATE
Expand All @@ -62801,7 +62784,7 @@ components:
- WARNING
- BROKEN
SecurityMonitoringContentPackTimestampBucket:
description: Timestamp bucket indicating when logs were last collected.
description: Timestamp bucket indicating when logs were last collected
enum:
- not_seen
- within_24_hours
Expand All @@ -62810,12 +62793,6 @@ components:
- over_30d
example: within_24_hours
type: string
x-enum-descriptions:
- No logs observed.
- Logs received within the last 24 hours.
- Logs last seen 24 to 72 hours ago.
- Logs last seen 3 to 30 days ago.
- Logs last seen more than 30 days ago.
x-enum-varnames:
- NOT_SEEN
- WITHIN_24_HOURS
Expand Down Expand Up @@ -63906,7 +63883,7 @@ components:
- $ref: "#/components/schemas/SecurityMonitoringSignalRulePayload"
- $ref: "#/components/schemas/CloudConfigurationRulePayload"
SecurityMonitoringSKU:
description: The Cloud SIEM pricing model (SKU) for the organization.
description: The SIEM pricing model (SKU) for the organization
enum:
- per_gb_analyzed
- per_event_in_siem_index_2023
Expand Down Expand Up @@ -101142,7 +101119,7 @@ paths:
If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
/api/v2/llm-obs/v1/annotation-queues/{queue_id}/annotated-interactions:
get:
description: Retrieve all interactions and their annotations for a given annotation queue.
description: Retrieve all interactions (traces and sessions) and their annotations for a given annotation queue.
operationId: GetLLMObsAnnotatedInteractions
parameters:
- $ref: "#/components/parameters/LLMObsAnnotationQueueIDPathParameter"
Expand Down Expand Up @@ -101191,7 +101168,7 @@ paths:
/api/v2/llm-obs/v1/annotation-queues/{queue_id}/interactions:
post:
description: |-
Add one or more interactions (traces) to an annotation queue.
Add one or more interactions (traces or sessions) to an annotation queue.
At least one interaction must be provided.
operationId: CreateLLMObsAnnotationQueueInteractions
parameters:
Expand Down Expand Up @@ -118729,8 +118706,9 @@ paths:
/api/v2/security_monitoring/content_packs/states:
get:
description: |-
Get the activation state, integration status, and log collection status
for all Cloud SIEM content packs.
Get the activation and configuration states for all security monitoring content packs.
This endpoint returns status information about each content pack including activation state,
integration status, and log collection status.
operationId: GetContentPacksStates
responses:
"200":
Expand All @@ -118753,31 +118731,21 @@ paths:
description: Not Found
"429":
$ref: "#/components/responses/TooManyRequestsResponse"
security:
- apiKeyAuth: []
appKeyAuth: []
- AuthZ:
- security_monitoring_filters_read
summary: Get content pack states
tags:
- Security Monitoring
"x-permission":
operator: OR
permissions:
- security_monitoring_filters_read
- logs_read_index_data
x-unstable: |-
**Note**: This endpoint is in preview and is subject to change.
If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
/api/v2/security_monitoring/content_packs/{content_pack_id}/activate:
put:
description: |-
Activate a Cloud SIEM content pack. This operation configures the necessary
Activate a security monitoring content pack. This operation configures the necessary
log filters or security filters depending on the pricing model and updates the content
pack activation state.
operationId: ActivateContentPack
parameters:
- description: The ID of the content pack to activate (for example, `aws-cloudtrail`).
- description: The ID of the content pack to activate.
in: path
name: content_pack_id
required: true
Expand All @@ -118801,30 +118769,20 @@ paths:
description: Not Found
"429":
$ref: "#/components/responses/TooManyRequestsResponse"
security:
- apiKeyAuth: []
appKeyAuth: []
- AuthZ:
- security_monitoring_filters_write
summary: Activate content pack
tags:
- Security Monitoring
"x-permission":
operator: OR
permissions:
- security_monitoring_filters_write
- logs_modify_indexes
x-unstable: |-
**Note**: This endpoint is in preview and is subject to change.
If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate:
put:
description: |-
Deactivate a Cloud SIEM content pack. This operation removes the content pack's
Deactivate a security monitoring content pack. This operation removes the content pack's
configuration from log filters or security filters and updates the content pack activation state.
operationId: DeactivateContentPack
parameters:
- description: The ID of the content pack to deactivate (for example, `aws-cloudtrail`).
- description: The ID of the content pack to deactivate.
in: path
name: content_pack_id
required: true
Expand All @@ -118848,19 +118806,9 @@ paths:
description: Not Found
"429":
$ref: "#/components/responses/TooManyRequestsResponse"
security:
- apiKeyAuth: []
appKeyAuth: []
- AuthZ:
- security_monitoring_filters_write
summary: Deactivate content pack
tags:
- Security Monitoring
"x-permission":
operator: OR
permissions:
- security_monitoring_filters_write
- logs_modify_indexes
x-unstable: |-
**Note**: This endpoint is in preview and is subject to change.
If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -267,8 +267,8 @@ public LLMObsAnnotationQueueInteractionsResponse createLLMObsAnnotationQueueInte
}

/**
* Add one or more interactions (traces) to an annotation queue. At least one interaction must be
* provided.
* Add one or more interactions (traces or sessions) to an annotation queue. At least one
* interaction must be provided.
*
* @param queueId The ID of the LLM Observability annotation queue. (required)
* @param body Add interactions payload. (required)
Expand Down Expand Up @@ -2491,7 +2491,8 @@ public CompletableFuture<LLMObsAnnotatedInteractionsResponse> getLLMObsAnnotated
}

/**
* Retrieve all interactions and their annotations for a given annotation queue.
* Retrieve all interactions (traces and sessions) and their annotations for a given annotation
* queue.
*
* @param queueId The ID of the LLM Observability annotation queue. (required)
* @return ApiResponse&lt;LLMObsAnnotatedInteractionsResponse&gt;
Expand Down
Loading
Loading