chronicle / api-samples-python Goto Github PK

update from pip3 install google-api-client
to pip3 install google-api-python-client

Testing an internal team process. Ignore this, there is no AI, and I will eventually close this

I believe you have the incorrect region name defined in common/regions.py for "eu". I think that is supposed to be "europe" (to get translated to utilizing https://europe-backstory.googleapis.com as the base URL)

Hi,

This is not related to this repo perse, but it is related to building interfaces for the Chronicle API - which this repo does with Python. Title says it all, are you planning on creating a Terraform provider for Chronicle? We've been developing one ourselves using https://github.com/Mastercard/terraform-provider-restapi - but ideally this would be something that is managed by Google.

I've run into an issue when trying to access the structured query events api.
When called with valid credentials as follows:
python -m search.list_structured_query_events -c "pathtocreds" -ts 2022-05-01T00:00:00Z -te 2022-05-02T00:00:00Z -rq ".*"
It returns:
{ "error": { "code": 403, "message": "The caller does not have permission", "status": "PERMISSION_DENIED" } }
I also cannot find any documentation for it. Does it only support UDM? And can logtype/source be filtered for?

For Europe tenants
CHRONICLE_API_BASE_URL = "https://backstory.googleapis.com"
needs to be replaced with
CHRONICLE_API_BASE_URL = "https://europe-backstory.googleapis.com"
Please can I make a suggestion that this is fully supported with he option of a region argument on the commandline?

For example
python3 -m detect.v2.list_rules -c ./credential.json -r europe

Where r is the region?