Chilkat Online Tools

C# / Datadog API Collection / Create a security filter

Back to Collection Items

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

Chilkat.Http http = new Chilkat.Http();
bool success;

// Use this online tool to generate code from sample JSON: Generate Code to Create JSON

// The following JSON is sent in the request body.

// {
//   "data": {
//     "type": "security_filters",
//     "attributes": {
//       "name": "<string>",
//       "query": "<string>",
//       "exclusion_filters": [
//         {
//           "name": "<string>",
//           "query": "<string>"
//         },
//         {
//           "name": "<string>",
//           "query": "<string>"
//         }
//       ],
//       "filtered_data_type": "logs",
//       "is_enabled": "<boolean>"
//     }
//   }
// }

Chilkat.JsonObject json = new Chilkat.JsonObject();
json.UpdateString("data.type","security_filters");
json.UpdateString("data.attributes.name","<string>");
json.UpdateString("data.attributes.query","<string>");
json.UpdateString("data.attributes.exclusion_filters[0].name","<string>");
json.UpdateString("data.attributes.exclusion_filters[0].query","<string>");
json.UpdateString("data.attributes.exclusion_filters[1].name","<string>");
json.UpdateString("data.attributes.exclusion_filters[1].query","<string>");
json.UpdateString("data.attributes.filtered_data_type","logs");
json.UpdateString("data.attributes.is_enabled","<boolean>");

http.SetRequestHeader("Content-Type","application/json");
http.SetRequestHeader("Accept","application/json");

Chilkat.HttpResponse resp = http.PostJson3("https://api.app.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters","application/json",json);
if (http.LastMethodSuccess == false) {
    Debug.WriteLine(http.LastErrorText);
    return;
}

Chilkat.StringBuilder sbResponseBody = new Chilkat.StringBuilder();
resp.GetBodySb(sbResponseBody);

Chilkat.JsonObject jResp = new Chilkat.JsonObject();
jResp.LoadSb(sbResponseBody);
jResp.EmitCompact = false;

Debug.WriteLine("Response Body:");
Debug.WriteLine(jResp.Emit());

int respStatusCode = resp.StatusCode;
Debug.WriteLine("Response Status Code = " + Convert.ToString(respStatusCode));
if (respStatusCode >= 400) {
    Debug.WriteLine("Response Header:");
    Debug.WriteLine(resp.Header);
    Debug.WriteLine("Failed.");

    return;
}

// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)

// {
//   "data": {
//     "attributes": {
//       "exclusion_filters": [
//         {
//           "name": "<string>",
//           "query": "<string>"
//         },
//         {
//           "name": "<string>",
//           "query": "<string>"
//         }
//       ],
//       "filtered_data_type": "logs",
//       "is_builtin": "<boolean>",
//       "is_enabled": "<boolean>",
//       "name": "<string>",
//       "query": "<string>",
//       "version": "<integer>"
//     },
//     "id": "<string>",
//     "type": "security_filters"
//   },
//   "meta": {
//     "warning": "<string>"
//   }
// }

// Sample code for parsing the JSON response...
// Use this online tool to generate parsing code from sample JSON: Generate JSON Parsing Code

string name;
string query;

string Filtered_data_type = jResp.StringOf("data.attributes.filtered_data_type");
string Is_builtin = jResp.StringOf("data.attributes.is_builtin");
string Is_enabled = jResp.StringOf("data.attributes.is_enabled");
string Name = jResp.StringOf("data.attributes.name");
string Query = jResp.StringOf("data.attributes.query");
string Version = jResp.StringOf("data.attributes.version");
string Id = jResp.StringOf("data.id");
string v_Type = jResp.StringOf("data.type");
string Warning = jResp.StringOf("meta.warning");
int i = 0;
int count_i = jResp.SizeOfArray("data.attributes.exclusion_filters");
while (i < count_i) {
    jResp.I = i;
    name = jResp.StringOf("data.attributes.exclusion_filters[i].name");
    query = jResp.StringOf("data.attributes.exclusion_filters[i].query");
    i = i + 1;
}

Curl Command

curl -X POST
	-H "Content-Type: application/json"
	-H "Accept: application/json"
	-d '{
  "data": {
    "type": "security_filters",
    "attributes": {
      "name": "<string>",
      "query": "<string>",
      "exclusion_filters": [
        {
          "name": "<string>",
          "query": "<string>"
        },
        {
          "name": "<string>",
          "query": "<string>"
        }
      ],
      "filtered_data_type": "logs",
      "is_enabled": "<boolean>"
    }
  }
}'
https://api.app.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters

Postman Collection Item JSON

{
  "name": "Create a security filter",
  "request": {
    "method": "POST",
    "header": [
      {
        "key": "Content-Type",
        "value": "application/json"
      },
      {
        "key": "Accept",
        "value": "application/json"
      }
    ],
    "body": {
      "mode": "raw",
      "raw": "{\n  \"data\": {\n    \"type\": \"security_filters\",\n    \"attributes\": {\n      \"name\": \"<string>\",\n      \"query\": \"<string>\",\n      \"exclusion_filters\": [\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"filtered_data_type\": \"logs\",\n      \"is_enabled\": \"<boolean>\"\n    }\n  }\n}",
      "options": {
        "raw": {
          "headerFamily": "json",
          "language": "json"
        }
      }
    },
    "url": {
      "raw": "{{baseUrl}}/api/v2/security_monitoring/configuration/security_filters",
      "host": [
        "{{baseUrl}}"
      ],
      "path": [
        "api",
        "v2",
        "security_monitoring",
        "configuration",
        "security_filters"
      ]
    },
    "description": "Create a security filter.\n\nSee the [security filter guide](https://docs.datadoghq.com/security_platform/guide/how-to-setup-security-filters-using-security-monitoring-api/)\nfor more examples."
  },
  "response": [
    {
      "name": "OK",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"data\": {\n    \"type\": \"security_filters\",\n    \"attributes\": {\n      \"name\": \"<string>\",\n      \"query\": \"<string>\",\n      \"exclusion_filters\": [\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"filtered_data_type\": \"logs\",\n      \"is_enabled\": \"<boolean>\"\n    }\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/security_monitoring/configuration/security_filters",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "security_monitoring",
            "configuration",
            "security_filters"
          ]
        }
      },
      "status": "OK",
      "code": 200,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"data\": {\n    \"attributes\": {\n      \"exclusion_filters\": [\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"filtered_data_type\": \"logs\",\n      \"is_builtin\": \"<boolean>\",\n      \"is_enabled\": \"<boolean>\",\n      \"name\": \"<string>\",\n      \"query\": \"<string>\",\n      \"version\": \"<integer>\"\n    },\n    \"id\": \"<string>\",\n    \"type\": \"security_filters\"\n  },\n  \"meta\": {\n    \"warning\": \"<string>\"\n  }\n}"
    },
    {
      "name": "Bad Request",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"data\": {\n    \"type\": \"security_filters\",\n    \"attributes\": {\n      \"name\": \"<string>\",\n      \"query\": \"<string>\",\n      \"exclusion_filters\": [\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"filtered_data_type\": \"logs\",\n      \"is_enabled\": \"<boolean>\"\n    }\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/security_monitoring/configuration/security_filters",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "security_monitoring",
            "configuration",
            "security_filters"
          ]
        }
      },
      "status": "Bad Request",
      "code": 400,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    },
    {
      "name": "Not Authorized",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"data\": {\n    \"type\": \"security_filters\",\n    \"attributes\": {\n      \"name\": \"<string>\",\n      \"query\": \"<string>\",\n      \"exclusion_filters\": [\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"filtered_data_type\": \"logs\",\n      \"is_enabled\": \"<boolean>\"\n    }\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/security_monitoring/configuration/security_filters",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "security_monitoring",
            "configuration",
            "security_filters"
          ]
        }
      },
      "status": "Forbidden",
      "code": 403,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    },
    {
      "name": "Conflict",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"data\": {\n    \"type\": \"security_filters\",\n    \"attributes\": {\n      \"name\": \"<string>\",\n      \"query\": \"<string>\",\n      \"exclusion_filters\": [\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"filtered_data_type\": \"logs\",\n      \"is_enabled\": \"<boolean>\"\n    }\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/security_monitoring/configuration/security_filters",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "security_monitoring",
            "configuration",
            "security_filters"
          ]
        }
      },
      "status": "Conflict",
      "code": 409,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    },
    {
      "name": "Too many requests",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"data\": {\n    \"type\": \"security_filters\",\n    \"attributes\": {\n      \"name\": \"<string>\",\n      \"query\": \"<string>\",\n      \"exclusion_filters\": [\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        },\n        {\n          \"name\": \"<string>\",\n          \"query\": \"<string>\"\n        }\n      ],\n      \"filtered_data_type\": \"logs\",\n      \"is_enabled\": \"<boolean>\"\n    }\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/security_monitoring/configuration/security_filters",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "security_monitoring",
            "configuration",
            "security_filters"
          ]
        }
      },
      "status": "Too Many Requests",
      "code": 429,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    }
  ]
}