Skip to content

Commit 22fba60

Browse files
author
ci.datadog-api-spec
committed
Regenerate client from commit 18f6524 of spec repo
1 parent 04ab6d2 commit 22fba60

16 files changed

+650
-4
lines changed

‎.generated-info

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
{
2-
"spec_repo_commit": "b308db8",
3-
"generated": "2025-08-04 15:45:09.334"
2+
"spec_repo_commit": "18f6524",
3+
"generated": "2025-08-05 08:49:07.022"
44
}

‎.generator/schemas/v2/openapi.yaml

Lines changed: 69 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36257,6 +36257,12 @@ components:
3625736257
SecurityMonitoringRuleUpdatePayload:
3625836258
description: Update an existing rule.
3625936259
properties:
36260+
calculatedFields:
36261+
description: Calculated fields. Only allowed for scheduled rules - in other
36262+
words, when schedulingOptions is also defined.
36263+
items:
36264+
$ref: '#/components/schemas/CalculatedField'
36265+
type: array
3626036266
cases:
3626136267
description: Cases for generating signals.
3626236268
items:
@@ -36313,6 +36319,8 @@ components:
3631336319
items:
3631436320
$ref: '#/components/schemas/SecurityMonitoringReferenceTable'
3631536321
type: array
36322+
schedulingOptions:
36323+
$ref: '#/components/schemas/SecurityMonitoringSchedulingOptions'
3631636324
tags:
3631736325
description: Tags for generated signals.
3631836326
items:
@@ -36339,6 +36347,27 @@ components:
3633936347
- $ref: '#/components/schemas/SecurityMonitoringStandardRulePayload'
3634036348
- $ref: '#/components/schemas/SecurityMonitoringSignalRulePayload'
3634136349
- $ref: '#/components/schemas/CloudConfigurationRulePayload'
36350+
SecurityMonitoringSchedulingOptions:
36351+
description: Options for scheduled rules. When this field is present, the rule
36352+
runs based on the schedule. When absent, it runs real-time on ingested logs.
36353+
nullable: true
36354+
properties:
36355+
rrule:
36356+
description: Schedule for the rule queries, written in RRULE syntax. See
36357+
[RFC](https://icalendar.org/iCalendar-RFC-5545/3-8-5-3-recurrence-rule.html)
36358+
for syntax reference.
36359+
example: FREQ=HOURLY;INTERVAL=1;
36360+
type: string
36361+
start:
36362+
description: Start date for the schedule, in ISO 8601 format without timezone.
36363+
example: '2025-07-14T12:00:00'
36364+
type: string
36365+
timezone:
36366+
description: Time zone of the start date, in the [tz database](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones)
36367+
format.
36368+
example: America/New_York
36369+
type: string
36370+
type: object
3634236371
SecurityMonitoringSignal:
3634336372
description: Object description of a security signal.
3634436373
properties:
@@ -37017,6 +37046,12 @@ components:
3701737046
SecurityMonitoringStandardRuleCreatePayload:
3701837047
description: Create a new rule.
3701937048
properties:
37049+
calculatedFields:
37050+
description: Calculated fields. Only allowed for scheduled rules - in other
37051+
words, when schedulingOptions is also defined.
37052+
items:
37053+
$ref: '#/components/schemas/CalculatedField'
37054+
type: array
3702037055
cases:
3702137056
description: Cases for generating signals.
3702237057
example: []
@@ -37069,6 +37104,8 @@ components:
3706937104
items:
3707037105
$ref: '#/components/schemas/SecurityMonitoringReferenceTable'
3707137106
type: array
37107+
schedulingOptions:
37108+
$ref: '#/components/schemas/SecurityMonitoringSchedulingOptions'
3707237109
tags:
3707337110
description: Tags for generated signals.
3707437111
example:
@@ -37098,6 +37135,12 @@ components:
3709837135
SecurityMonitoringStandardRulePayload:
3709937136
description: The payload of a rule.
3710037137
properties:
37138+
calculatedFields:
37139+
description: Calculated fields. Only allowed for scheduled rules - in other
37140+
words, when schedulingOptions is also defined.
37141+
items:
37142+
$ref: '#/components/schemas/CalculatedField'
37143+
type: array
3710137144
cases:
3710237145
description: Cases for generating signals.
3710337146
example: []
@@ -37158,6 +37201,8 @@ components:
3715837201
items:
3715937202
$ref: '#/components/schemas/SecurityMonitoringReferenceTable'
3716037203
type: array
37204+
schedulingOptions:
37205+
$ref: '#/components/schemas/SecurityMonitoringSchedulingOptions'
3716137206
tags:
3716237207
description: Tags for generated signals.
3716337208
example:
@@ -37214,6 +37259,14 @@ components:
3721437259
example: false
3721537260
readOnly: true
3721637261
type: boolean
37262+
index:
37263+
description: '**This field is currently unstable and might be removed in
37264+
a minor version upgrade.**
37265+
37266+
The index to run the query on, if the `dataSource` is `logs`. Only used
37267+
for scheduled rules - in other words, when the `schedulingOptions` field
37268+
is present in the rule payload.'
37269+
type: string
3721737270
metric:
3721837271
deprecated: true
3721937272
description: '(Deprecated) The target field to aggregate over when using
@@ -37241,6 +37294,12 @@ components:
3724137294
SecurityMonitoringStandardRuleResponse:
3724237295
description: Rule.
3724337296
properties:
37297+
calculatedFields:
37298+
description: Calculated fields. Only allowed for scheduled rules - in other
37299+
words, when schedulingOptions is also defined.
37300+
items:
37301+
$ref: '#/components/schemas/CalculatedField'
37302+
type: array
3724437303
cases:
3724537304
description: Cases for generating signals.
3724637305
items:
@@ -37326,6 +37385,8 @@ components:
3732637385
items:
3732737386
$ref: '#/components/schemas/SecurityMonitoringReferenceTable'
3732837387
type: array
37388+
schedulingOptions:
37389+
$ref: '#/components/schemas/SecurityMonitoringSchedulingOptions'
3732937390
tags:
3733037391
description: Tags for generated signals.
3733137392
items:
@@ -37357,6 +37418,12 @@ components:
3735737418
SecurityMonitoringStandardRuleTestPayload:
3735837419
description: The payload of a rule to test
3735937420
properties:
37421+
calculatedFields:
37422+
description: Calculated fields. Only allowed for scheduled rules - in other
37423+
words, when schedulingOptions is also defined.
37424+
items:
37425+
$ref: '#/components/schemas/CalculatedField'
37426+
type: array
3736037427
cases:
3736137428
description: Cases for generating signals.
3736237429
example: []
@@ -37409,6 +37476,8 @@ components:
3740937476
items:
3741037477
$ref: '#/components/schemas/SecurityMonitoringReferenceTable'
3741137478
type: array
37479+
schedulingOptions:
37480+
$ref: '#/components/schemas/SecurityMonitoringSchedulingOptions'
3741237481
tags:
3741337482
description: Tags for generated signals.
3741437483
example:

‎examples/v2_security-monitoring_CreateSecurityMonitoringRule_868881438.rs

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
// Create a scheduled detection rule returns "OK" response
2+
use datadog_api_client::datadog;
3+
use datadog_api_client::datadogV2::api_security_monitoring::SecurityMonitoringAPI;
4+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleCaseCreate;
5+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleCreatePayload;
6+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleEvaluationWindow;
7+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleKeepAlive;
8+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleMaxSignalDuration;
9+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleOptions;
10+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleQueryAggregation;
11+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleSeverity;
12+
use datadog_api_client::datadogV2::model::SecurityMonitoringRuleTypeCreate;
13+
use datadog_api_client::datadogV2::model::SecurityMonitoringSchedulingOptions;
14+
use datadog_api_client::datadogV2::model::SecurityMonitoringStandardRuleCreatePayload;
15+
use datadog_api_client::datadogV2::model::SecurityMonitoringStandardRuleQuery;
16+
17+
#[tokio::main]
18+
async fn main() {
19+
let body =
20+
SecurityMonitoringRuleCreatePayload::SecurityMonitoringStandardRuleCreatePayload(Box::new(
21+
SecurityMonitoringStandardRuleCreatePayload::new(
22+
vec![
23+
SecurityMonitoringRuleCaseCreate::new(SecurityMonitoringRuleSeverity::INFO)
24+
.condition("a > 0".to_string())
25+
.name("".to_string())
26+
.notifications(vec![]),
27+
],
28+
true,
29+
"Test rule".to_string(),
30+
"Example-Security-Monitoring".to_string(),
31+
SecurityMonitoringRuleOptions::new()
32+
.evaluation_window(SecurityMonitoringRuleEvaluationWindow::FIFTEEN_MINUTES)
33+
.keep_alive(SecurityMonitoringRuleKeepAlive::ONE_HOUR)
34+
.max_signal_duration(SecurityMonitoringRuleMaxSignalDuration::ONE_DAY),
35+
vec![SecurityMonitoringStandardRuleQuery::new()
36+
.aggregation(SecurityMonitoringRuleQueryAggregation::COUNT)
37+
.distinct_fields(vec![])
38+
.group_by_fields(vec![])
39+
.index("main".to_string())
40+
.query("@test:true".to_string())],
41+
)
42+
.filters(vec![])
43+
.scheduling_options(Some(
44+
SecurityMonitoringSchedulingOptions::new()
45+
.rrule("FREQ=HOURLY;INTERVAL=2;".to_string())
46+
.start("2025-06-18T12:00:00".to_string())
47+
.timezone("Europe/Paris".to_string()),
48+
))
49+
.tags(vec![])
50+
.type_(SecurityMonitoringRuleTypeCreate::LOG_DETECTION),
51+
));
52+
let configuration = datadog::Configuration::new();
53+
let api = SecurityMonitoringAPI::with_config(configuration);
54+
let resp = api.create_security_monitoring_rule(body).await;
55+
if let Ok(value) = resp {
56+
println!("{:#?}", value);
57+
} else {
58+
println!("{:#?}", resp.unwrap_err());
59+
}
60+
}

‎src/datadogV2/model/mod.rs

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4638,6 +4638,8 @@ pub mod model_security_monitoring_list_rules_response;
46384638
pub use self::model_security_monitoring_list_rules_response::SecurityMonitoringListRulesResponse;
46394639
pub mod model_security_monitoring_standard_rule_response;
46404640
pub use self::model_security_monitoring_standard_rule_response::SecurityMonitoringStandardRuleResponse;
4641+
pub mod model_calculated_field;
4642+
pub use self::model_calculated_field::CalculatedField;
46414643
pub mod model_security_monitoring_rule_case;
46424644
pub use self::model_security_monitoring_rule_case::SecurityMonitoringRuleCase;
46434645
pub mod model_security_monitoring_rule_case_action;
@@ -4696,6 +4698,8 @@ pub mod model_security_monitoring_standard_data_source;
46964698
pub use self::model_security_monitoring_standard_data_source::SecurityMonitoringStandardDataSource;
46974699
pub mod model_security_monitoring_reference_table;
46984700
pub use self::model_security_monitoring_reference_table::SecurityMonitoringReferenceTable;
4701+
pub mod model_security_monitoring_scheduling_options;
4702+
pub use self::model_security_monitoring_scheduling_options::SecurityMonitoringSchedulingOptions;
46994703
pub mod model_security_monitoring_third_party_rule_case;
47004704
pub use self::model_security_monitoring_third_party_rule_case::SecurityMonitoringThirdPartyRuleCase;
47014705
pub mod model_security_monitoring_rule_type_read;
@@ -5120,8 +5124,6 @@ pub mod model_historical_job_response_attributes;
51205124
pub use self::model_historical_job_response_attributes::HistoricalJobResponseAttributes;
51215125
pub mod model_job_definition;
51225126
pub use self::model_job_definition::JobDefinition;
5123-
pub mod model_calculated_field;
5124-
pub use self::model_calculated_field::CalculatedField;
51255127
pub mod model_historical_job_options;
51265128
pub use self::model_historical_job_options::HistoricalJobOptions;
51275129
pub mod model_historical_job_query;

‎src/datadogV2/model/model_security_monitoring_rule_update_payload.rs

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,9 @@ use std::fmt::{self, Formatter};
1111
#[skip_serializing_none]
1212
#[derive(Clone, Debug, PartialEq, Serialize)]
1313
pub struct SecurityMonitoringRuleUpdatePayload {
14+
/// Calculated fields. Only allowed for scheduled rules - in other words, when schedulingOptions is also defined.
15+
#[serde(rename = "calculatedFields")]
16+
pub calculated_fields: Option<Vec<crate::datadogV2::model::CalculatedField>>,
1417
/// Cases for generating signals.
1518
#[serde(rename = "cases")]
1619
pub cases: Option<Vec<crate::datadogV2::model::SecurityMonitoringRuleCase>>,
@@ -51,6 +54,14 @@ pub struct SecurityMonitoringRuleUpdatePayload {
5154
/// Reference tables for the rule.
5255
#[serde(rename = "referenceTables")]
5356
pub reference_tables: Option<Vec<crate::datadogV2::model::SecurityMonitoringReferenceTable>>,
57+
/// Options for scheduled rules. When this field is present, the rule runs based on the schedule. When absent, it runs real-time on ingested logs.
58+
#[serde(
59+
rename = "schedulingOptions",
60+
default,
61+
with = "::serde_with::rust::double_option"
62+
)]
63+
pub scheduling_options:
64+
Option<Option<crate::datadogV2::model::SecurityMonitoringSchedulingOptions>>,
5465
/// Tags for generated signals.
5566
#[serde(rename = "tags")]
5667
pub tags: Option<Vec<String>>,
@@ -71,6 +82,7 @@ pub struct SecurityMonitoringRuleUpdatePayload {
7182
impl SecurityMonitoringRuleUpdatePayload {
7283
pub fn new() -> SecurityMonitoringRuleUpdatePayload {
7384
SecurityMonitoringRuleUpdatePayload {
85+
calculated_fields: None,
7486
cases: None,
7587
compliance_signal_options: None,
7688
custom_message: None,
@@ -84,6 +96,7 @@ impl SecurityMonitoringRuleUpdatePayload {
8496
options: None,
8597
queries: None,
8698
reference_tables: None,
99+
scheduling_options: None,
87100
tags: None,
88101
third_party_cases: None,
89102
version: None,
@@ -92,6 +105,14 @@ impl SecurityMonitoringRuleUpdatePayload {
92105
}
93106
}
94107

108+
pub fn calculated_fields(
109+
mut self,
110+
value: Vec<crate::datadogV2::model::CalculatedField>,
111+
) -> Self {
112+
self.calculated_fields = Some(value);
113+
self
114+
}
115+
95116
pub fn cases(
96117
mut self,
97118
value: Vec<crate::datadogV2::model::SecurityMonitoringRuleCase>,
@@ -175,6 +196,14 @@ impl SecurityMonitoringRuleUpdatePayload {
175196
self
176197
}
177198

199+
pub fn scheduling_options(
200+
mut self,
201+
value: Option<crate::datadogV2::model::SecurityMonitoringSchedulingOptions>,
202+
) -> Self {
203+
self.scheduling_options = Some(value);
204+
self
205+
}
206+
178207
pub fn tags(mut self, value: Vec<String>) -> Self {
179208
self.tags = Some(value);
180209
self
@@ -225,6 +254,8 @@ impl<'de> Deserialize<'de> for SecurityMonitoringRuleUpdatePayload {
225254
where
226255
M: MapAccess<'a>,
227256
{
257+
let mut calculated_fields: Option<Vec<crate::datadogV2::model::CalculatedField>> =
258+
None;
228259
let mut cases: Option<Vec<crate::datadogV2::model::SecurityMonitoringRuleCase>> =
229260
None;
230261
let mut compliance_signal_options: Option<
@@ -246,6 +277,9 @@ impl<'de> Deserialize<'de> for SecurityMonitoringRuleUpdatePayload {
246277
let mut reference_tables: Option<
247278
Vec<crate::datadogV2::model::SecurityMonitoringReferenceTable>,
248279
> = None;
280+
let mut scheduling_options: Option<
281+
Option<crate::datadogV2::model::SecurityMonitoringSchedulingOptions>,
282+
> = None;
249283
let mut tags: Option<Vec<String>> = None;
250284
let mut third_party_cases: Option<
251285
Vec<crate::datadogV2::model::SecurityMonitoringThirdPartyRuleCase>,
@@ -259,6 +293,13 @@ impl<'de> Deserialize<'de> for SecurityMonitoringRuleUpdatePayload {
259293

260294
while let Some((k, v)) = map.next_entry::<String, serde_json::Value>()? {
261295
match k.as_str() {
296+
"calculatedFields" => {
297+
if v.is_null() {
298+
continue;
299+
}
300+
calculated_fields =
301+
Some(serde_json::from_value(v).map_err(M::Error::custom)?);
302+
}
262303
"cases" => {
263304
if v.is_null() {
264305
continue;
@@ -343,6 +384,10 @@ impl<'de> Deserialize<'de> for SecurityMonitoringRuleUpdatePayload {
343384
reference_tables =
344385
Some(serde_json::from_value(v).map_err(M::Error::custom)?);
345386
}
387+
"schedulingOptions" => {
388+
scheduling_options =
389+
Some(serde_json::from_value(v).map_err(M::Error::custom)?);
390+
}
346391
"tags" => {
347392
if v.is_null() {
348393
continue;
@@ -371,6 +416,7 @@ impl<'de> Deserialize<'de> for SecurityMonitoringRuleUpdatePayload {
371416
}
372417

373418
let content = SecurityMonitoringRuleUpdatePayload {
419+
calculated_fields,
374420
cases,
375421
compliance_signal_options,
376422
custom_message,
@@ -384,6 +430,7 @@ impl<'de> Deserialize<'de> for SecurityMonitoringRuleUpdatePayload {
384430
options,
385431
queries,
386432
reference_tables,
433+
scheduling_options,
387434
tags,
388435
third_party_cases,
389436
version,

0 commit comments

Comments
 (0)