Chilkat Online Tools

DataFlex / Datadog API Collection / List rules

Back to Collection Items

Use ChilkatAx-9.5.0-win32.pkg

Procedure Test
    Handle hoHttp
    Boolean iSuccess
    Variant vQueryParams
    Handle hoQueryParams
    Variant vResp
    Handle hoResp
    Variant vSbResponseBody
    Handle hoSbResponseBody
    Handle hoJResp
    Integer iRespStatusCode
    String sDefaultActivationStatus
    String sUserActivationStatus
    String sCreatedAt
    String sCreationAuthorId
    String sDeprecationDate
    String sHasExtendedTitle
    String sId
    String sIsDefault
    String sIsDeleted
    String sIsEnabled
    String sMessage
    String sName
    String sComplexRule
    String sPolicy
    String sResourceType
    String sDecreaseCriticalityBasedOnEnv
    String sDetectionMethod
    Integer iEvaluationWindow
    String sHardcodedEvaluatorType
    String sBaselineUserLocations
    Integer iKeepAlive
    Integer iMaxSignalDuration
    Integer iForgetAfter
    Integer iLearningDuration
    String sLearningMethod
    Integer iLearningThreshold
    String sV_type
    String sUpdateAuthorId
    String sVersion
    Integer j
    Integer iCount_j
    String sCondition
    String sStatus
    Integer k
    Integer iCount_k
    String sStrVal
    String sAction
    String sQuery
    String sAggregation
    String sMetric
    String sTotal_count
    String sTotal_filtered_count
    Integer i
    Integer iCount_i
    String sTemp1
    Boolean bTemp1

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatHttp)) To hoHttp
    If (Not(IsComObjectCreated(hoHttp))) Begin
        Send CreateComObject of hoHttp
    End

    Get Create (RefClass(cComChilkatJsonObject)) To hoQueryParams
    If (Not(IsComObjectCreated(hoQueryParams))) Begin
        Send CreateComObject of hoQueryParams
    End
    Get ComUpdateInt Of hoQueryParams "page[size]" 10 To iSuccess
    Get ComUpdateInt Of hoQueryParams "page[number]" 0 To iSuccess

    Send ComSetRequestHeader To hoHttp "Accept" "application/json"

    Get pvComObject of hoQueryParams to vQueryParams
    Get ComQuickRequestParams Of hoHttp "GET" "https://api.app.ddog-gov.com/api/v2/security_monitoring/rules" vQueryParams To vResp
    If (IsComObject(vResp)) Begin
        Get Create (RefClass(cComChilkatHttpResponse)) To hoResp
        Set pvComObject Of hoResp To vResp
    End
    Get ComLastMethodSuccess Of hoHttp To bTemp1
    If (bTemp1 = False) Begin
        Get ComLastErrorText Of hoHttp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbResponseBody
    If (Not(IsComObjectCreated(hoSbResponseBody))) Begin
        Send CreateComObject of hoSbResponseBody
    End
    Get pvComObject of hoSbResponseBody to vSbResponseBody
    Get ComGetBodySb Of hoResp vSbResponseBody To iSuccess

    Get Create (RefClass(cComChilkatJsonObject)) To hoJResp
    If (Not(IsComObjectCreated(hoJResp))) Begin
        Send CreateComObject of hoJResp
    End
    Get pvComObject of hoSbResponseBody to vSbResponseBody
    Get ComLoadSb Of hoJResp vSbResponseBody To iSuccess
    Set ComEmitCompact Of hoJResp To False

    Showln "Response Body:"
    Get ComEmit Of hoJResp To sTemp1
    Showln sTemp1

    Get ComStatusCode Of hoResp To iRespStatusCode
    Showln "Response Status Code = " iRespStatusCode
    If (iRespStatusCode >= 400) Begin
        Showln "Response Header:"
        Get ComHeader Of hoResp To sTemp1
        Showln sTemp1
        Showln "Failed."
        Send Destroy of hoResp
        Procedure_Return
    End

    Send Destroy of hoResp

    // Sample JSON response:
    // (Sample code for parsing the JSON response is shown below)

    // {
    //   "data": [
    //     {
    //       "cases": [
    //         {
    //           "condition": "<string>",
    //           "name": "<string>",
    //           "notifications": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "status": "medium"
    //         },
    //         {
    //           "condition": "<string>",
    //           "name": "<string>",
    //           "notifications": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "status": "info"
    //         }
    //       ],
    //       "complianceSignalOptions": {
    //         "defaultActivationStatus": "<boolean>",
    //         "defaultGroupByFields": [
    //           "<string>",
    //           "<string>"
    //         ],
    //         "userActivationStatus": "<boolean>",
    //         "userGroupByFields": [
    //           "<string>",
    //           "<string>"
    //         ]
    //       },
    //       "createdAt": "<long>",
    //       "creationAuthorId": "<long>",
    //       "deprecationDate": "<long>",
    //       "filters": [
    //         {
    //           "action": "suppress",
    //           "query": "<string>"
    //         },
    //         {
    //           "action": "require",
    //           "query": "<string>"
    //         }
    //       ],
    //       "hasExtendedTitle": "<boolean>",
    //       "id": "<string>",
    //       "isDefault": "<boolean>",
    //       "isDeleted": "<boolean>",
    //       "isEnabled": "<boolean>",
    //       "message": "<string>",
    //       "name": "<string>",
    //       "options": {
    //         "complianceRuleOptions": {
    //           "complexRule": "<boolean>",
    //           "regoRule": {
    //             "policy": "<string>",
    //             "resourceTypes": [
    //               "<string>",
    //               "<string>"
    //             ]
    //           },
    //           "resourceType": "<string>",
    //           "sunt__": {}
    //         },
    //         "decreaseCriticalityBasedOnEnv": "<boolean>",
    //         "detectionMethod": "threshold",
    //         "evaluationWindow": 7200,
    //         "hardcodedEvaluatorType": "log4shell",
    //         "impossibleTravelOptions": {
    //           "baselineUserLocations": "<boolean>"
    //         },
    //         "keepAlive": 60,
    //         "maxSignalDuration": 60,
    //         "newValueOptions": {
    //           "forgetAfter": 14,
    //           "learningDuration": 0,
    //           "learningMethod": "duration",
    //           "learningThreshold": 0
    //         }
    //       },
    //       "queries": [
    //         {
    //           "aggregation": "geo_data",
    //           "distinctFields": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "groupByFields": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "metric": "<string>",
    //           "metrics": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "name": "<string>",
    //           "query": "<string>"
    //         },
    //         {
    //           "aggregation": "new_value",
    //           "distinctFields": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "groupByFields": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "metric": "<string>",
    //           "metrics": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "name": "<string>",
    //           "query": "<string>"
    //         }
    //       ],
    //       "tags": [
    //         "<string>",
    //         "<string>"
    //       ],
    //       "type": "log_detection",
    //       "updateAuthorId": "<long>",
    //       "version": "<long>"
    //     },
    //     {
    //       "cases": [
    //         {
    //           "condition": "<string>",
    //           "name": "<string>",
    //           "notifications": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "status": "medium"
    //         },
    //         {
    //           "condition": "<string>",
    //           "name": "<string>",
    //           "notifications": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "status": "critical"
    //         }
    //       ],
    //       "complianceSignalOptions": {
    //         "defaultActivationStatus": "<boolean>",
    //         "defaultGroupByFields": [
    //           "<string>",
    //           "<string>"
    //         ],
    //         "userActivationStatus": "<boolean>",
    //         "userGroupByFields": [
    //           "<string>",
    //           "<string>"
    //         ]
    //       },
    //       "createdAt": "<long>",
    //       "creationAuthorId": "<long>",
    //       "deprecationDate": "<long>",
    //       "filters": [
    //         {
    //           "action": "suppress",
    //           "query": "<string>"
    //         },
    //         {
    //           "action": "suppress",
    //           "query": "<string>"
    //         }
    //       ],
    //       "hasExtendedTitle": "<boolean>",
    //       "id": "<string>",
    //       "isDefault": "<boolean>",
    //       "isDeleted": "<boolean>",
    //       "isEnabled": "<boolean>",
    //       "message": "<string>",
    //       "name": "<string>",
    //       "options": {
    //         "complianceRuleOptions": {
    //           "complexRule": "<boolean>",
    //           "regoRule": {
    //             "policy": "<string>",
    //             "resourceTypes": [
    //               "<string>",
    //               "<string>"
    //             ]
    //           },
    //           "resourceType": "<string>",
    //           "mollit_4": {},
    //           "culpa_2": {}
    //         },
    //         "decreaseCriticalityBasedOnEnv": "<boolean>",
    //         "detectionMethod": "hardcoded",
    //         "evaluationWindow": 300,
    //         "hardcodedEvaluatorType": "log4shell",
    //         "impossibleTravelOptions": {
    //           "baselineUserLocations": "<boolean>"
    //         },
    //         "keepAlive": 21600,
    //         "maxSignalDuration": 10800,
    //         "newValueOptions": {
    //           "forgetAfter": 2,
    //           "learningDuration": 0,
    //           "learningMethod": "duration",
    //           "learningThreshold": 0
    //         }
    //       },
    //       "queries": [
    //         {
    //           "aggregation": "new_value",
    //           "distinctFields": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "groupByFields": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "metric": "<string>",
    //           "metrics": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "name": "<string>",
    //           "query": "<string>"
    //         },
    //         {
    //           "aggregation": "geo_data",
    //           "distinctFields": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "groupByFields": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "metric": "<string>",
    //           "metrics": [
    //             "<string>",
    //             "<string>"
    //           ],
    //           "name": "<string>",
    //           "query": "<string>"
    //         }
    //       ],
    //       "tags": [
    //         "<string>",
    //         "<string>"
    //       ],
    //       "type": "infrastructure_configuration",
    //       "updateAuthorId": "<long>",
    //       "version": "<long>"
    //     }
    //   ],
    //   "meta": {
    //     "page": {
    //       "total_count": "<long>",
    //       "total_filtered_count": "<long>"
    //     }
    //   }
    // }

    // Sample code for parsing the JSON response...
    // Use this online tool to generate parsing code from sample JSON: Generate JSON Parsing Code

    Get ComStringOf Of hoJResp "meta.page.total_count" To sTotal_count
    Get ComStringOf Of hoJResp "meta.page.total_filtered_count" To sTotal_filtered_count
    Move 0 To i
    Get ComSizeOfArray Of hoJResp "data" To iCount_i
    While (i < iCount_i)
        Set ComI Of hoJResp To i
        Get ComStringOf Of hoJResp "data[i].complianceSignalOptions.defaultActivationStatus" To sDefaultActivationStatus
        Get ComStringOf Of hoJResp "data[i].complianceSignalOptions.userActivationStatus" To sUserActivationStatus
        Get ComStringOf Of hoJResp "data[i].createdAt" To sCreatedAt
        Get ComStringOf Of hoJResp "data[i].creationAuthorId" To sCreationAuthorId
        Get ComStringOf Of hoJResp "data[i].deprecationDate" To sDeprecationDate
        Get ComStringOf Of hoJResp "data[i].hasExtendedTitle" To sHasExtendedTitle
        Get ComStringOf Of hoJResp "data[i].id" To sId
        Get ComStringOf Of hoJResp "data[i].isDefault" To sIsDefault
        Get ComStringOf Of hoJResp "data[i].isDeleted" To sIsDeleted
        Get ComStringOf Of hoJResp "data[i].isEnabled" To sIsEnabled
        Get ComStringOf Of hoJResp "data[i].message" To sMessage
        Get ComStringOf Of hoJResp "data[i].name" To sName
        Get ComStringOf Of hoJResp "data[i].options.complianceRuleOptions.complexRule" To sComplexRule
        Get ComStringOf Of hoJResp "data[i].options.complianceRuleOptions.regoRule.policy" To sPolicy
        Get ComStringOf Of hoJResp "data[i].options.complianceRuleOptions.resourceType" To sResourceType
        Get ComStringOf Of hoJResp "data[i].options.decreaseCriticalityBasedOnEnv" To sDecreaseCriticalityBasedOnEnv
        Get ComStringOf Of hoJResp "data[i].options.detectionMethod" To sDetectionMethod
        Get ComIntOf Of hoJResp "data[i].options.evaluationWindow" To iEvaluationWindow
        Get ComStringOf Of hoJResp "data[i].options.hardcodedEvaluatorType" To sHardcodedEvaluatorType
        Get ComStringOf Of hoJResp "data[i].options.impossibleTravelOptions.baselineUserLocations" To sBaselineUserLocations
        Get ComIntOf Of hoJResp "data[i].options.keepAlive" To iKeepAlive
        Get ComIntOf Of hoJResp "data[i].options.maxSignalDuration" To iMaxSignalDuration
        Get ComIntOf Of hoJResp "data[i].options.newValueOptions.forgetAfter" To iForgetAfter
        Get ComIntOf Of hoJResp "data[i].options.newValueOptions.learningDuration" To iLearningDuration
        Get ComStringOf Of hoJResp "data[i].options.newValueOptions.learningMethod" To sLearningMethod
        Get ComIntOf Of hoJResp "data[i].options.newValueOptions.learningThreshold" To iLearningThreshold
        Get ComStringOf Of hoJResp "data[i].type" To sV_type
        Get ComStringOf Of hoJResp "data[i].updateAuthorId" To sUpdateAuthorId
        Get ComStringOf Of hoJResp "data[i].version" To sVersion
        Move 0 To j
        Get ComSizeOfArray Of hoJResp "data[i].cases" To iCount_j
        While (j < iCount_j)
            Set ComJ Of hoJResp To j
            Get ComStringOf Of hoJResp "data[i].cases[j].condition" To sCondition
            Get ComStringOf Of hoJResp "data[i].cases[j].name" To sName
            Get ComStringOf Of hoJResp "data[i].cases[j].status" To sStatus
            Move 0 To k
            Get ComSizeOfArray Of hoJResp "data[i].cases[j].notifications" To iCount_k
            While (k < iCount_k)
                Set ComK Of hoJResp To k
                Get ComStringOf Of hoJResp "data[i].cases[j].notifications[k]" To sStrVal
                Move (k + 1) To k
            Loop

            Move (j + 1) To j
        Loop

        Move 0 To j
        Get ComSizeOfArray Of hoJResp "data[i].complianceSignalOptions.defaultGroupByFields" To iCount_j
        While (j < iCount_j)
            Set ComJ Of hoJResp To j
            Get ComStringOf Of hoJResp "data[i].complianceSignalOptions.defaultGroupByFields[j]" To sStrVal
            Move (j + 1) To j
        Loop

        Move 0 To j
        Get ComSizeOfArray Of hoJResp "data[i].complianceSignalOptions.userGroupByFields" To iCount_j
        While (j < iCount_j)
            Set ComJ Of hoJResp To j
            Get ComStringOf Of hoJResp "data[i].complianceSignalOptions.userGroupByFields[j]" To sStrVal
            Move (j + 1) To j
        Loop

        Move 0 To j
        Get ComSizeOfArray Of hoJResp "data[i].filters" To iCount_j
        While (j < iCount_j)
            Set ComJ Of hoJResp To j
            Get ComStringOf Of hoJResp "data[i].filters[j].action" To sAction
            Get ComStringOf Of hoJResp "data[i].filters[j].query" To sQuery
            Move (j + 1) To j
        Loop

        Move 0 To j
        Get ComSizeOfArray Of hoJResp "data[i].options.complianceRuleOptions.regoRule.resourceTypes" To iCount_j
        While (j < iCount_j)
            Set ComJ Of hoJResp To j
            Get ComStringOf Of hoJResp "data[i].options.complianceRuleOptions.regoRule.resourceTypes[j]" To sStrVal
            Move (j + 1) To j
        Loop

        Move 0 To j
        Get ComSizeOfArray Of hoJResp "data[i].queries" To iCount_j
        While (j < iCount_j)
            Set ComJ Of hoJResp To j
            Get ComStringOf Of hoJResp "data[i].queries[j].aggregation" To sAggregation
            Get ComStringOf Of hoJResp "data[i].queries[j].metric" To sMetric
            Get ComStringOf Of hoJResp "data[i].queries[j].name" To sName
            Get ComStringOf Of hoJResp "data[i].queries[j].query" To sQuery
            Move 0 To k
            Get ComSizeOfArray Of hoJResp "data[i].queries[j].distinctFields" To iCount_k
            While (k < iCount_k)
                Set ComK Of hoJResp To k
                Get ComStringOf Of hoJResp "data[i].queries[j].distinctFields[k]" To sStrVal
                Move (k + 1) To k
            Loop

            Move 0 To k
            Get ComSizeOfArray Of hoJResp "data[i].queries[j].groupByFields" To iCount_k
            While (k < iCount_k)
                Set ComK Of hoJResp To k
                Get ComStringOf Of hoJResp "data[i].queries[j].groupByFields[k]" To sStrVal
                Move (k + 1) To k
            Loop

            Move 0 To k
            Get ComSizeOfArray Of hoJResp "data[i].queries[j].metrics" To iCount_k
            While (k < iCount_k)
                Set ComK Of hoJResp To k
                Get ComStringOf Of hoJResp "data[i].queries[j].metrics[k]" To sStrVal
                Move (k + 1) To k
            Loop

            Move (j + 1) To j
        Loop

        Move 0 To j
        Get ComSizeOfArray Of hoJResp "data[i].tags" To iCount_j
        While (j < iCount_j)
            Set ComJ Of hoJResp To j
            Get ComStringOf Of hoJResp "data[i].tags[j]" To sStrVal
            Move (j + 1) To j
        Loop

        Move (i + 1) To i
    Loop



End_Procedure

Curl Command

curl -G -d "page[size]=10"
	-d "page[number]=0"
	-H "Accept: application/json"
https://api.app.ddog-gov.com/api/v2/security_monitoring/rules

Postman Collection Item JSON

{
  "name": "List rules",
  "request": {
    "method": "GET",
    "header": [
      {
        "key": "Accept",
        "value": "application/json"
      }
    ],
    "url": {
      "raw": "{{baseUrl}}/api/v2/security_monitoring/rules?page[size]=10&page[number]=0",
      "host": [
        "{{baseUrl}}"
      ],
      "path": [
        "api",
        "v2",
        "security_monitoring",
        "rules"
      ],
      "query": [
        {
          "key": "page[size]",
          "value": "10",
          "description": "Size for a given page. The maximum allowed value is 100."
        },
        {
          "key": "page[number]",
          "value": "0",
          "description": "Specific page number to return."
        }
      ]
    },
    "description": "List rules."
  },
  "response": [
    {
      "name": "OK",
      "originalRequest": {
        "method": "GET",
        "header": [
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/api/v2/security_monitoring/rules?page[size]=10&page[number]=0",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "security_monitoring",
            "rules"
          ],
          "query": [
            {
              "key": "page[size]",
              "value": "10",
              "description": "Size for a given page. The maximum allowed value is 100."
            },
            {
              "key": "page[number]",
              "value": "0",
              "description": "Specific page number to return."
            }
          ]
        }
      },
      "status": "OK",
      "code": 200,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"data\": [\n    {\n      \"cases\": [\n        {\n          \"condition\": \"<string>\",\n          \"name\": \"<string>\",\n          \"notifications\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"status\": \"medium\"\n        },\n        {\n          \"condition\": \"<string>\",\n          \"name\": \"<string>\",\n          \"notifications\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"status\": \"info\"\n        }\n      ],\n      \"complianceSignalOptions\": {\n        \"defaultActivationStatus\": \"<boolean>\",\n        \"defaultGroupByFields\": [\n          \"<string>\",\n          \"<string>\"\n        ],\n        \"userActivationStatus\": \"<boolean>\",\n        \"userGroupByFields\": [\n          \"<string>\",\n          \"<string>\"\n        ]\n      },\n      \"createdAt\": \"<long>\",\n      \"creationAuthorId\": \"<long>\",\n      \"deprecationDate\": \"<long>\",\n      \"filters\": [\n        {\n          \"action\": \"suppress\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"action\": \"require\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"hasExtendedTitle\": \"<boolean>\",\n      \"id\": \"<string>\",\n      \"isDefault\": \"<boolean>\",\n      \"isDeleted\": \"<boolean>\",\n      \"isEnabled\": \"<boolean>\",\n      \"message\": \"<string>\",\n      \"name\": \"<string>\",\n      \"options\": {\n        \"complianceRuleOptions\": {\n          \"complexRule\": \"<boolean>\",\n          \"regoRule\": {\n            \"policy\": \"<string>\",\n            \"resourceTypes\": [\n              \"<string>\",\n              \"<string>\"\n            ]\n          },\n          \"resourceType\": \"<string>\",\n          \"sunt__\": {}\n        },\n        \"decreaseCriticalityBasedOnEnv\": \"<boolean>\",\n        \"detectionMethod\": \"threshold\",\n        \"evaluationWindow\": 7200,\n        \"hardcodedEvaluatorType\": \"log4shell\",\n        \"impossibleTravelOptions\": {\n          \"baselineUserLocations\": \"<boolean>\"\n        },\n        \"keepAlive\": 60,\n        \"maxSignalDuration\": 60,\n        \"newValueOptions\": {\n          \"forgetAfter\": 14,\n          \"learningDuration\": 0,\n          \"learningMethod\": \"duration\",\n          \"learningThreshold\": 0\n        }\n      },\n      \"queries\": [\n        {\n          \"aggregation\": \"geo_data\",\n          \"distinctFields\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"groupByFields\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"metric\": \"<string>\",\n          \"metrics\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"aggregation\": \"new_value\",\n          \"distinctFields\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"groupByFields\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"metric\": \"<string>\",\n          \"metrics\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"tags\": [\n        \"<string>\",\n        \"<string>\"\n      ],\n      \"type\": \"log_detection\",\n      \"updateAuthorId\": \"<long>\",\n      \"version\": \"<long>\"\n    },\n    {\n      \"cases\": [\n        {\n          \"condition\": \"<string>\",\n          \"name\": \"<string>\",\n          \"notifications\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"status\": \"medium\"\n        },\n        {\n          \"condition\": \"<string>\",\n          \"name\": \"<string>\",\n          \"notifications\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"status\": \"critical\"\n        }\n      ],\n      \"complianceSignalOptions\": {\n        \"defaultActivationStatus\": \"<boolean>\",\n        \"defaultGroupByFields\": [\n          \"<string>\",\n          \"<string>\"\n        ],\n        \"userActivationStatus\": \"<boolean>\",\n        \"userGroupByFields\": [\n          \"<string>\",\n          \"<string>\"\n        ]\n      },\n      \"createdAt\": \"<long>\",\n      \"creationAuthorId\": \"<long>\",\n      \"deprecationDate\": \"<long>\",\n      \"filters\": [\n        {\n          \"action\": \"suppress\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"action\": \"suppress\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"hasExtendedTitle\": \"<boolean>\",\n      \"id\": \"<string>\",\n      \"isDefault\": \"<boolean>\",\n      \"isDeleted\": \"<boolean>\",\n      \"isEnabled\": \"<boolean>\",\n      \"message\": \"<string>\",\n      \"name\": \"<string>\",\n      \"options\": {\n        \"complianceRuleOptions\": {\n          \"complexRule\": \"<boolean>\",\n          \"regoRule\": {\n            \"policy\": \"<string>\",\n            \"resourceTypes\": [\n              \"<string>\",\n              \"<string>\"\n            ]\n          },\n          \"resourceType\": \"<string>\",\n          \"mollit_4\": {},\n          \"culpa_2\": {}\n        },\n        \"decreaseCriticalityBasedOnEnv\": \"<boolean>\",\n        \"detectionMethod\": \"hardcoded\",\n        \"evaluationWindow\": 300,\n        \"hardcodedEvaluatorType\": \"log4shell\",\n        \"impossibleTravelOptions\": {\n          \"baselineUserLocations\": \"<boolean>\"\n        },\n        \"keepAlive\": 21600,\n        \"maxSignalDuration\": 10800,\n        \"newValueOptions\": {\n          \"forgetAfter\": 2,\n          \"learningDuration\": 0,\n          \"learningMethod\": \"duration\",\n          \"learningThreshold\": 0\n        }\n      },\n      \"queries\": [\n        {\n          \"aggregation\": \"new_value\",\n          \"distinctFields\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"groupByFields\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"metric\": \"<string>\",\n          \"metrics\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"aggregation\": \"geo_data\",\n          \"distinctFields\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"groupByFields\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"metric\": \"<string>\",\n          \"metrics\": [\n            \"<string>\",\n            \"<string>\"\n          ],\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"tags\": [\n        \"<string>\",\n        \"<string>\"\n      ],\n      \"type\": \"infrastructure_configuration\",\n      \"updateAuthorId\": \"<long>\",\n      \"version\": \"<long>\"\n    }\n  ],\n  \"meta\": {\n    \"page\": {\n      \"total_count\": \"<long>\",\n      \"total_filtered_count\": \"<long>\"\n    }\n  }\n}"
    },
    {
      "name": "Bad Request",
      "originalRequest": {
        "method": "GET",
        "header": [
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/api/v2/security_monitoring/rules?page[size]=10&page[number]=0",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "security_monitoring",
            "rules"
          ],
          "query": [
            {
              "key": "page[size]",
              "value": "10",
              "description": "Size for a given page. The maximum allowed value is 100."
            },
            {
              "key": "page[number]",
              "value": "0",
              "description": "Specific page number to return."
            }
          ]
        }
      },
      "status": "Bad Request",
      "code": 400,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    },
    {
      "name": "Too many requests",
      "originalRequest": {
        "method": "GET",
        "header": [
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/api/v2/security_monitoring/rules?page[size]=10&page[number]=0",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "security_monitoring",
            "rules"
          ],
          "query": [
            {
              "key": "page[size]",
              "value": "10",
              "description": "Size for a given page. The maximum allowed value is 100."
            },
            {
              "key": "page[number]",
              "value": "0",
              "description": "Specific page number to return."
            }
          ]
        }
      },
      "status": "Too Many Requests",
      "code": 429,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    }
  ]
}