Chronicle Curated Events

List of chronicle UDM events from curated rule detections.

Google SecOps grid

Details

IDincident_chroniclecuratedevents
CLI Namechroniclecuratedevents
Typegrid
Version-1
RequiredNo
Read OnlyNo
Use as KPINo
SearchableYes

Associated Incident Types

{
    "id": "incident_chroniclecuratedevents",
    "version": -1,
    "modified": "2023-06-20T14:31:56.511726091+05:30",
    "name": "Chronicle Curated Events",
    "ownerOnly": false,
    "description": "List of chronicle UDM events from curated rule detections.",
    "cliName": "chroniclecuratedevents",
    "type": "grid",
    "closeForm": false,
    "editForm": false,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "associatedTypes": [
        "Chronicle Curated Rule Detection"
    ],
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "columns": [
        {
            "key": "eventtimestamp",
            "displayName": "Event Timestamp",
            "type": "date",
            "required": false,
            "script": "",
            "width": 180,
            "isDefault": true,
            "fieldCalcScript": "",
            "isReadOnly": false,
            "selectValues": null
        },
        {
            "key": "eventtype",
            "displayName": "Event Type",
            "type": "shortText",
            "required": false,
            "script": "",
            "width": 200,
            "isDefault": true,
            "fieldCalcScript": "",
            "isReadOnly": false,
            "selectValues": null
        },
        {
            "key": "principalassetidentifier",
            "displayName": "Principal Asset Identifier",
            "type": "shortText",
            "required": false,
            "script": "",
            "width": 180,
            "isDefault": true,
            "fieldCalcScript": "",
            "isReadOnly": false,
            "selectValues": null
        },
        {
            "key": "targetassetidentifier",
            "displayName": "Target Asset Identifier",
            "type": "shortText",
            "required": false,
            "script": "",
            "width": 180,
            "isDefault": true,
            "fieldCalcScript": "",
            "isReadOnly": false,
            "selectValues": null
        },
        {
            "key": "eventseverity",
            "displayName": "Severity",
            "type": "shortText",
            "orgType": "shortText",
            "required": false,
            "script": "",
            "width": 150,
            "isDefault": true,
            "fieldCalcScript": "",
            "isReadOnly": false,
            "selectValues": null
        }
    ],
    "sla": 0,
    "threshold": 72,
    "fromVersion": "6.5.0"
}