@@ -4884,6 +4884,8 @@ components:
48844884 - sds_scanned_bytes_usage
48854885 - serverless_apps_usage
48864886 - serverless_apps_apm_usage
4887+ - siem_12mo_retention_usage
4888+ - siem_6mo_retention_usage
48874889 - siem_analyzed_logs_add_on_usage
48884890 - siem_ingested_bytes_usage
48894891 - snmp_usage
@@ -4973,6 +4975,8 @@ components:
49734975 - SDS_SCANNED_BYTES_USAGE
49744976 - SERVERLESS_APPS_USAGE
49754977 - SERVERLESS_APPS_APM_USAGE
4978+ - SIEM_12MO_RETENTION_USAGE
4979+ - SIEM_6MO_RETENTION_USAGE
49764980 - SIEM_ANALYZED_LOGS_ADD_ON_USAGE
49774981 - SIEM_INGESTED_BYTES_USAGE
49784982 - SNMP_USAGE
@@ -9229,19 +9233,11 @@ components:
92299233 description: The monitor `CRITICAL` threshold.
92309234 format: double
92319235 type: number
9232- critical_query:
9233- description: Query evaluated as a dynamic `CRITICAL` threshold. Only supported on metric monitors with a formula query and options['variables']. Cannot be combined with static thresholds. This field is in preview.
9234- example: 'formula("2 * query1").rollup("avg").last("6mo")'
9235- type: string
92369236 critical_recovery:
92379237 description: The monitor `CRITICAL` recovery threshold.
92389238 format: double
92399239 nullable: true
92409240 type: number
9241- critical_recovery_query:
9242- description: Query evaluated as a dynamic `CRITICAL` recovery threshold. Only supported on metric monitors with a formula query and options['variables']. Cannot be combined with static thresholds. This field is in preview.
9243- example: 'formula("1.5 * query1").rollup("avg").last("3mo")'
9244- type: string
92459241 ok:
92469242 description: The monitor `OK` threshold.
92479243 format: double
@@ -9605,6 +9601,10 @@ components:
96059601 - rum_browser_mobile_sessions_percentage
96069602 - ingested_spans_bytes_usage
96079603 - ingested_spans_bytes_percentage
9604+ - siem_12mo_retention_usage
9605+ - siem_12mo_retention_percentage
9606+ - siem_6mo_retention_usage
9607+ - siem_6mo_retention_percentage
96089608 - siem_analyzed_logs_add_on_usage
96099609 - siem_analyzed_logs_add_on_percentage
96109610 - siem_ingested_bytes_usage
@@ -9774,6 +9774,10 @@ components:
97749774 - RUM_BROWSER_MOBILE_SESSIONS_PERCENTAGE
97759775 - INGESTED_SPANS_BYTES_USAGE
97769776 - INGESTED_SPANS_BYTES_PERCENTAGE
9777+ - SIEM_12MO_RETENTION_USAGE
9778+ - SIEM_12MO_RETENTION_PERCENTAGE
9779+ - SIEM_6MO_RETENTION_USAGE
9780+ - SIEM_6MO_RETENTION_PERCENTAGE
97779781 - SIEM_ANALYZED_LOGS_ADD_ON_USAGE
97789782 - SIEM_ANALYZED_LOGS_ADD_ON_PERCENTAGE
97799783 - SIEM_INGESTED_BYTES_USAGE
@@ -10403,6 +10407,22 @@ components:
1040310407 description: The total Serverless Apps usage by tag(s).
1040410408 format: double
1040510409 type: number
10410+ siem_12mo_retention_percentage:
10411+ description: The percentage of Cloud SIEM Indexed Logs (12-month retention) usage by tag(s).
10412+ format: double
10413+ type: number
10414+ siem_12mo_retention_usage:
10415+ description: The Cloud SIEM Indexed Logs (12-month retention) usage by tag(s).
10416+ format: double
10417+ type: number
10418+ siem_6mo_retention_percentage:
10419+ description: The percentage of Cloud SIEM Indexed Logs (6-month retention) usage by tag(s).
10420+ format: double
10421+ type: number
10422+ siem_6mo_retention_usage:
10423+ description: The Cloud SIEM Indexed Logs (6-month retention) usage by tag(s).
10424+ format: double
10425+ type: number
1040610426 siem_analyzed_logs_add_on_percentage:
1040710427 description: The percentage of log events analyzed by Cloud SIEM usage by tag(s).
1040810428 format: double
@@ -22467,6 +22487,10 @@ components:
2246722487 description: Shows the sum of all Cloud Security Information and Event Management events over all hours in the current date for the given org.
2246822488 format: int64
2246922489 type: integer
22490+ cloud_siem_indexed_logs_sum:
22491+ description: Shows the sum of all Cloud SIEM Indexed Logs over all hours in the current date for the given org.
22492+ format: int64
22493+ type: integer
2247022494 code_analysis_sa_committers_hwm:
2247122495 description: Shows the high-water mark of all Static Analysis committers over all hours in the current date for the given org.
2247222496 format: int64
@@ -23231,6 +23255,14 @@ components:
2323123255 description: Shows the average number of Serverless Apps for Azure and Google Cloud for the given date and given org.
2323223256 format: int64
2323323257 type: integer
23258+ siem_12mo_retention_sum:
23259+ description: Shows the sum of Cloud SIEM Indexed Logs (12-month retention) over all hours in the current date for the given org.
23260+ format: int64
23261+ type: integer
23262+ siem_6mo_retention_sum:
23263+ description: Shows the sum of Cloud SIEM Indexed Logs (6-month retention) over all hours in the current date for the given org.
23264+ format: int64
23265+ type: integer
2323423266 siem_analyzed_logs_add_on_count_sum:
2323523267 description: Shows the sum of all log events analyzed by Cloud SIEM over all hours in the current date for the given org.
2323623268 format: int64
@@ -23480,6 +23512,10 @@ components:
2348023512 description: Shows the sum of all Cloud Security Information and Event Management events over all hours in the current date for the given org.
2348123513 format: int64
2348223514 type: integer
23515+ cloud_siem_indexed_logs_sum:
23516+ description: Shows the sum of all Cloud SIEM Indexed Logs over all hours in the current date for the given org.
23517+ format: int64
23518+ type: integer
2348323519 code_analysis_sa_committers_hwm:
2348423520 description: Shows the high-water mark of all Static Analysis committers over all hours in the current date for the given org.
2348523521 format: int64
@@ -24256,6 +24292,14 @@ components:
2425624292 description: Shows the average number of Serverless Apps for Azure and Google Cloud for the given date and given org.
2425724293 format: int64
2425824294 type: integer
24295+ siem_12mo_retention_sum:
24296+ description: Shows the sum of Cloud SIEM Indexed Logs (12-month retention) over all hours in the current date for the given org.
24297+ format: int64
24298+ type: integer
24299+ siem_6mo_retention_sum:
24300+ description: Shows the sum of Cloud SIEM Indexed Logs (6-month retention) over all hours in the current date for the given org.
24301+ format: int64
24302+ type: integer
2425924303 siem_analyzed_logs_add_on_count_sum:
2426024304 description: Shows the sum of all log events analyzed by Cloud SIEM over all hours in the current date for the given org.
2426124305 format: int64
@@ -24503,6 +24547,10 @@ components:
2450324547 description: Shows the sum of all Cloud Security Information and Event Management events over all hours in the current month for all organizations.
2450424548 format: int64
2450524549 type: integer
24550+ cloud_siem_indexed_logs_agg_sum:
24551+ description: Shows the sum of all Cloud SIEM Indexed Logs over all hours in the current month for all organizations.
24552+ format: int64
24553+ type: integer
2450624554 code_analysis_sa_committers_hwm_sum:
2450724555 description: Shows the high-water mark of all Static Analysis committers over all hours in the current month for all organizations.
2450824556 format: int64
@@ -25299,6 +25347,14 @@ components:
2529925347 description: Sum of the average number of Serverless Apps for Azure and Google Cloud in the current month for all organizations.
2530025348 format: int64
2530125349 type: integer
25350+ siem_12mo_retention_agg_sum:
25351+ description: Shows the sum of Cloud SIEM Indexed Logs (12-month retention) over all hours in the current month for all organizations.
25352+ format: int64
25353+ type: integer
25354+ siem_6mo_retention_agg_sum:
25355+ description: Shows the sum of Cloud SIEM Indexed Logs (6-month retention) over all hours in the current month for all organizations.
25356+ format: int64
25357+ type: integer
2530225358 siem_analyzed_logs_add_on_count_agg_sum:
2530325359 description: Shows the sum of all log events analyzed by Cloud SIEM over all hours in the current month for all organizations.
2530425360 format: int64
@@ -33708,10 +33764,6 @@ paths:
3370833764 - `operator`: <, <=, >, >=, ==, or !=
3370933765 - `#`: an integer or decimal number used to set the threshold
3371033766
33711- To use a dynamic threshold on a metric monitor with a formula query, replace `#` with the `threshold` keyword
33712- (for example, `... > threshold`) and provide the threshold as a query via `critical_query` on `options.thresholds`.
33713- This feature is in preview.
33714-
3371533767 If you are using the `_change_` or `_pct_change_` time aggregator, instead use `change_aggr(time_aggr(time_window),
3371633768 timeshift):space_aggr:metric{tags} [by {key}] operator #` with:
3371733769
0 commit comments