1717 from datadog_api_client .v2 .model .security_monitoring_rule_query_aggregation import (
1818 SecurityMonitoringRuleQueryAggregation ,
1919 )
20+ from datadog_api_client .v2 .model .security_monitoring_standard_data_source import (
21+ SecurityMonitoringStandardDataSource ,
22+ )
2023
2124
2225class HistoricalJobQuery (ModelNormal ):
@@ -25,9 +28,13 @@ def openapi_types(_):
2528 from datadog_api_client .v2 .model .security_monitoring_rule_query_aggregation import (
2629 SecurityMonitoringRuleQueryAggregation ,
2730 )
31+ from datadog_api_client .v2 .model .security_monitoring_standard_data_source import (
32+ SecurityMonitoringStandardDataSource ,
33+ )
2834
2935 return {
3036 "aggregation" : (SecurityMonitoringRuleQueryAggregation ,),
37+ "data_source" : (SecurityMonitoringStandardDataSource ,),
3138 "distinct_fields" : ([str ],),
3239 "group_by_fields" : ([str ],),
3340 "has_optional_group_by_fields" : (bool ,),
@@ -38,6 +45,7 @@ def openapi_types(_):
3845
3946 attribute_map = {
4047 "aggregation" : "aggregation" ,
48+ "data_source" : "dataSource" ,
4149 "distinct_fields" : "distinctFields" ,
4250 "group_by_fields" : "groupByFields" ,
4351 "has_optional_group_by_fields" : "hasOptionalGroupByFields" ,
@@ -52,6 +60,7 @@ def openapi_types(_):
5260 def __init__ (
5361 self_ ,
5462 aggregation : Union [SecurityMonitoringRuleQueryAggregation , UnsetType ] = unset ,
63+ data_source : Union [SecurityMonitoringStandardDataSource , UnsetType ] = unset ,
5564 distinct_fields : Union [List [str ], UnsetType ] = unset ,
5665 group_by_fields : Union [List [str ], UnsetType ] = unset ,
5766 has_optional_group_by_fields : Union [bool , UnsetType ] = unset ,
@@ -66,6 +75,9 @@ def __init__(
6675 :param aggregation: The aggregation type.
6776 :type aggregation: SecurityMonitoringRuleQueryAggregation, optional
6877
78+ :param data_source: Source of events, either logs or audit trail.
79+ :type data_source: SecurityMonitoringStandardDataSource, optional
80+
6981 :param distinct_fields: Field for which the cardinality is measured. Sent as an array.
7082 :type distinct_fields: [str], optional
7183
@@ -86,6 +98,8 @@ def __init__(
8698 """
8799 if aggregation is not unset :
88100 kwargs ["aggregation" ] = aggregation
101+ if data_source is not unset :
102+ kwargs ["data_source" ] = data_source
89103 if distinct_fields is not unset :
90104 kwargs ["distinct_fields" ] = distinct_fields
91105 if group_by_fields is not unset :
0 commit comments