Contents

# Create a detection rule with type 'impossible_travel' returns "OK" response

require "datadog_api_client"
api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new

body = DatadogAPIClient::V2::SecurityMonitoringStandardRuleCreatePayload.new({
  queries: [
    DatadogAPIClient::V2::SecurityMonitoringStandardRuleQuery.new({
      aggregation: DatadogAPIClient::V2::SecurityMonitoringRuleQueryAggregation::GEO_DATA,
      group_by_fields: [
        "@usr.id",
      ],
      distinct_fields: [],
      metric: "@network.client.geoip",
      query: "*",
    }),
  ],
  cases: [
    DatadogAPIClient::V2::SecurityMonitoringRuleCaseCreate.new({
      name: "",
      status: DatadogAPIClient::V2::SecurityMonitoringRuleSeverity::INFO,
      notifications: [],
    }),
  ],
  has_extended_title: true,
  message: "test",
  is_enabled: true,
  options: DatadogAPIClient::V2::SecurityMonitoringRuleOptions.new({
    max_signal_duration: DatadogAPIClient::V2::SecurityMonitoringRuleMaxSignalDuration::ONE_DAY,
    evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::FIFTEEN_MINUTES,
    keep_alive: DatadogAPIClient::V2::SecurityMonitoringRuleKeepAlive::ONE_HOUR,
    detection_method: DatadogAPIClient::V2::SecurityMonitoringRuleDetectionMethod::IMPOSSIBLE_TRAVEL,
    impossible_travel_options: DatadogAPIClient::V2::SecurityMonitoringRuleImpossibleTravelOptions.new({
      baseline_user_locations: false,
    }),
  }),
  name: "Example-Security-Monitoring",
  type: DatadogAPIClient::V2::SecurityMonitoringRuleTypeCreate::LOG_DETECTION,
  tags: [],
  filters: [],
})
p api_instance.create_security_monitoring_rule(body)

Version data entries

19 entries across 19 versions & 1 rubygems

Version	Path
datadog_api_client-2.28.1	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.27.1	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.26.1	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.26.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.25.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.24.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.22.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.21.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.20.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.19.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.18.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.17.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.16.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.15.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.14.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.13.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.12.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.11.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb
datadog_api_client-2.10.0	examples/v2/security-monitoring/CreateSecurityMonitoringRule_461183901.rb