SIEM API endpoint mapping | Google Security Operations | Google Cloud Documentation

Skip to main content

Technology areas

AI and ML
Application development
Application hosting
Compute
Data analytics and pipelines
Databases
Distributed, hybrid, and multicloud
Industry solutions
Migration
Networking
Observability and monitoring
Security
Storage

Cross-product tools

Access and resources management
Costs and usage management
Infrastructure as code
SDK, languages, frameworks, and tools

/

Console

English
Deutsch
Español – América Latina
Français
Português – Brasil
中文 – 简体
日本語
한국어

Sign in

Google Security Operations

Start free

Overview Guides Use cases Reference Support Resources

Technology areas
- More
- Overview
- Guides
- Use cases
- Reference
- Support
- Resources
Cross-product tools
- More
Console

Google SecOps API reference
APIs and libraries overview
Chronicle API reference
- Chronicle API overview
- Authenticate to the Chronicle API
- Permissions for the Chronicle API
- Migrate Chronicle API versions
- Migrate from legacy SIEM APIs to Chronicle API
  - Overview
  - SIEM API endpoint mapping
- v1
  - REST Resources
  - instances.feeds
    Overview
    importPushLogs
  - projects.locations.instances
    Overview
    computeAllFindingsRefinementActivities
    extractSyslog
    findEntity
    findEntityAlerts
    findRelatedEntities
    findUdmFieldValues
    get
    getBigQueryExport
    getEnrichmentCombination
    getRiskConfig
    getThreatCollectionFilterSet
    listAllFindingsRefinementDeployments
    queryProductSourceStats
    searchEntities
    summarizeEntitiesFromQuery
    summarizeEntity
    udmSearch
    updateBigQueryExport
    updateRiskConfig
    validateQuery
    verifyReferenceList
    verifyRuleText
  - projects.locations.instances.alertGroupingRules
    Overview
    create
    delete
    get
    list
    patch
  - projects.locations.instances.announcements
    Overview
    create
    delete
    get
    list
    patch
  - projects.locations.instances.bigQueryExport
    Overview
    provision
  - projects.locations.instances.caseCloseDefinitions
    Overview
    create
    delete
    get
    list
    patch
  - projects.locations.instances.caseQueueFilters
    Overview
    create
    delete
    get
    getShareConfig
    list
    patch
    updateShareConfig
  - projects.locations.instances.caseStageDefinitions
    Overview
    create
    delete
    get
    list
    patch
  - projects.locations.instances.caseTagDefinitions
    Overview
    create
    delete
    get
    import
    list
    patch
  - projects.locations.instances.cases
    Overview
    addTag
    createInsight
    executeBulkAddTag
    executeBulkAssign
    executeBulkChangePriority
    executeBulkChangeStage
    executeBulkClose
    executeBulkReopen
    generateReport
    get
    getCaseOverviewData
    list
    merge
    patch
    pauseSla
    removeTag
    resolveOverviewWidget
    resumeSla
  - projects.locations.instances.cases.caseAlerts
    Overview
    createRecommendationLongRunning
    fetchRecommendation
    get
    getAlertOverviewData