Interface CreateCustomLogSourceRequest.Builder

    • Method Detail

      • configuration

        CreateCustomLogSourceRequest.Builder configuration​(CustomLogSourceConfiguration configuration)

        The configuration for the third-party custom source.

        Parameters:
        configuration - The configuration for the third-party custom source.
        Returns:
        Returns a reference to this object so that method calls can be chained together.
      • eventClasses

        CreateCustomLogSourceRequest.Builder eventClasses​(Collection<String> eventClasses)

        The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake. The supported event classes are:

        • ACCESS_ACTIVITY

        • FILE_ACTIVITY

        • KERNEL_ACTIVITY

        • KERNEL_EXTENSION

        • MEMORY_ACTIVITY

        • MODULE_ACTIVITY

        • PROCESS_ACTIVITY

        • REGISTRY_KEY_ACTIVITY

        • REGISTRY_VALUE_ACTIVITY

        • RESOURCE_ACTIVITY

        • SCHEDULED_JOB_ACTIVITY

        • SECURITY_FINDING

        • ACCOUNT_CHANGE

        • AUTHENTICATION

        • AUTHORIZATION

        • ENTITY_MANAGEMENT_AUDIT

        • DHCP_ACTIVITY

        • NETWORK_ACTIVITY

        • DNS_ACTIVITY

        • FTP_ACTIVITY

        • HTTP_ACTIVITY

        • RDP_ACTIVITY

        • SMB_ACTIVITY

        • SSH_ACTIVITY

        • CONFIG_STATE

        • INVENTORY_INFO

        • EMAIL_ACTIVITY

        • API_ACTIVITY

        • CLOUD_API

        Parameters:
        eventClasses - The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake. The supported event classes are:

        • ACCESS_ACTIVITY

        • FILE_ACTIVITY

        • KERNEL_ACTIVITY

        • KERNEL_EXTENSION

        • MEMORY_ACTIVITY

        • MODULE_ACTIVITY

        • PROCESS_ACTIVITY

        • REGISTRY_KEY_ACTIVITY

        • REGISTRY_VALUE_ACTIVITY

        • RESOURCE_ACTIVITY

        • SCHEDULED_JOB_ACTIVITY

        • SECURITY_FINDING

        • ACCOUNT_CHANGE

        • AUTHENTICATION

        • AUTHORIZATION

        • ENTITY_MANAGEMENT_AUDIT

        • DHCP_ACTIVITY

        • NETWORK_ACTIVITY

        • DNS_ACTIVITY

        • FTP_ACTIVITY

        • HTTP_ACTIVITY

        • RDP_ACTIVITY

        • SMB_ACTIVITY

        • SSH_ACTIVITY

        • CONFIG_STATE

        • INVENTORY_INFO

        • EMAIL_ACTIVITY

        • API_ACTIVITY

        • CLOUD_API

        Returns:
        Returns a reference to this object so that method calls can be chained together.
      • eventClasses

        CreateCustomLogSourceRequest.Builder eventClasses​(String... eventClasses)

        The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake. The supported event classes are:

        • ACCESS_ACTIVITY

        • FILE_ACTIVITY

        • KERNEL_ACTIVITY

        • KERNEL_EXTENSION

        • MEMORY_ACTIVITY

        • MODULE_ACTIVITY

        • PROCESS_ACTIVITY

        • REGISTRY_KEY_ACTIVITY

        • REGISTRY_VALUE_ACTIVITY

        • RESOURCE_ACTIVITY

        • SCHEDULED_JOB_ACTIVITY

        • SECURITY_FINDING

        • ACCOUNT_CHANGE

        • AUTHENTICATION

        • AUTHORIZATION

        • ENTITY_MANAGEMENT_AUDIT

        • DHCP_ACTIVITY

        • NETWORK_ACTIVITY

        • DNS_ACTIVITY

        • FTP_ACTIVITY

        • HTTP_ACTIVITY

        • RDP_ACTIVITY

        • SMB_ACTIVITY

        • SSH_ACTIVITY

        • CONFIG_STATE

        • INVENTORY_INFO

        • EMAIL_ACTIVITY

        • API_ACTIVITY

        • CLOUD_API

        Parameters:
        eventClasses - The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake. The supported event classes are:

        • ACCESS_ACTIVITY

        • FILE_ACTIVITY

        • KERNEL_ACTIVITY

        • KERNEL_EXTENSION

        • MEMORY_ACTIVITY

        • MODULE_ACTIVITY

        • PROCESS_ACTIVITY

        • REGISTRY_KEY_ACTIVITY

        • REGISTRY_VALUE_ACTIVITY

        • RESOURCE_ACTIVITY

        • SCHEDULED_JOB_ACTIVITY

        • SECURITY_FINDING

        • ACCOUNT_CHANGE

        • AUTHENTICATION

        • AUTHORIZATION

        • ENTITY_MANAGEMENT_AUDIT

        • DHCP_ACTIVITY

        • NETWORK_ACTIVITY

        • DNS_ACTIVITY

        • FTP_ACTIVITY

        • HTTP_ACTIVITY

        • RDP_ACTIVITY

        • SMB_ACTIVITY

        • SSH_ACTIVITY

        • CONFIG_STATE

        • INVENTORY_INFO

        • EMAIL_ACTIVITY

        • API_ACTIVITY

        • CLOUD_API

        Returns:
        Returns a reference to this object so that method calls can be chained together.
      • sourceName

        CreateCustomLogSourceRequest.Builder sourceName​(String sourceName)

        Specify the name for a third-party custom source. This must be a Regionally unique value.

        Parameters:
        sourceName - Specify the name for a third-party custom source. This must be a Regionally unique value.
        Returns:
        Returns a reference to this object so that method calls can be chained together.
      • sourceVersion

        CreateCustomLogSourceRequest.Builder sourceVersion​(String sourceVersion)

        Specify the source version for the third-party custom source, to limit log collection to a specific version of custom data source.

        Parameters:
        sourceVersion - Specify the source version for the third-party custom source, to limit log collection to a specific version of custom data source.
        Returns:
        Returns a reference to this object so that method calls can be chained together.