Pemetaan endpoint API SIEM

Didukung di:

Dokumen ini memetakan endpoint SIEM API lama (Backstory API termasuk Customer Management API, dan Ingestion API) ke endpoint Chronicle API modern yang sesuai.

Tabel pemetaan API

Area fitur Metode API lama Versi API lama Metode Chronicle API Izin IAM diperlukan
BigQuery UpdateBigQueryAccess v1 ProvideBigQueryAccess chronicle.googleapis.com/bigQueryAccesses.provide
CuratedRule ListCuratedRuleDetections v2 LegacySearchCuratedDetections chronicle.googleapis.com/legacies.legacySearchCuratedDetections
CuratedRule ListCuratedRules v2 ListCuratedRules chronicle.googleapis.com/curatedRules.list
LegacyAlert UpdateAlert v1 LegacyUpdateAlert chronicle.googleapis.com/legacies.legacyUpdateAlert
Kasus CreateOrUpdateCase v1 LegacyCreateOrUpdateCase chronicle.googleapis.com/legacies.legacyCreateOrUpdateCase
Ekspor Data CancelDataExport v1 CancelDataExport chronicle.googleapis.com/dataExports.cancel
Ekspor Data CreateDataExport v1 CreateDataExport chronicle.googleapis.com/dataExports.create
Ekspor Data GetDataExport v1 GetDataExport chronicle.googleapis.com/dataExports.get
Ekspor Data ListAvailableLogTypes v1 FetchLogTypesAvailableForExport chronicle.googleapis.com/dataExports.fetchAvailableLogTypes
DataTap CreateDataTap v1 CreateDataTap chronicle.googleapis.com/dataTaps.create
DataTap DeleteDataTap v1 DeleteDataTap chronicle.googleapis.com/dataTaps.delete
DataTap GetDataTap v1 GetDataTap chronicle.googleapis.com/dataTaps.get
DataTap ListDataTaps v1 ListDataTaps chronicle.googleapis.com/dataTaps.list
DataTap UpdateDataTap v1 UpdateDataTap chronicle.googleapis.com/dataTaps.update
Feed CreateFeed v1 CreateFeed chronicle.googleapis.com/feeds.create
Feed DeleteFeed v1 DeleteFeed chronicle.googleapis.com/feeds.delete
Feed DisableFeed v1 DisableFeed chronicle.googleapis.com/feeds.disable
Feed EnableFeed v1 EnableFeed chronicle.googleapis.com/feeds.enable
Feed FetchFeedServiceAccount v1 FetchServiceAccountForCustomer chronicle.googleapis.com/feeds.fetchServiceAccount
Feed GetFeed v1 GetFeed chronicle.googleapis.com/feeds.get
Feed GetFeedSchema v1 ListLogTypeSchemas chronicle.googleapis.com/feeds.listLogTypeSchemas
Feed GetLogTypeSchema v1 ListLogTypeSchemas chronicle.googleapis.com/feeds.listLogTypeSchemas
Feed ListFeeds v1 ListFeeds chronicle.googleapis.com/feeds.list
Feed ListFeedSourceTypeSchemas v1 ListFeedSourceTypeSchemas chronicle.googleapis.com/feeds.listFeedSourceTypeSchemas
Feed ListLogTypeSchemas v1 ListLogTypeSchemas chronicle.googleapis.com/feeds.listLogTypeSchemas
Feed UpdateFeed v1 UpdateFeed chronicle.googleapis.com/feeds.update
Penerus CreateForwarder v2 CreateForwarder chronicle.googleapis.com/forwarders.create
Penerus GetForwarder v2 GetForwarder chronicle.googleapis.com/forwarders.get
Penerus ListForwarders v2 ListForwarders chronicle.googleapis.com/forwarders.list
Penerus UpdateForwarder v2 UpdateForwarder chronicle.googleapis.com/forwarders.update
Penerus DeleteForwarder v2 DeleteForwarder chronicle.googleapis.com/forwarders.delete
Penerus GenerateForwarderFiles v2 GenerateForwarderFiles chronicle.googleapis.com/forwarders.generateFiles
Penerus CreateCollector v2 CreateCollector chronicle.googleapis.com/collectors.create
Penerus GetCollector v2 GetCollector chronicle.googleapis.com/collectors.get
Penerus ListCollectors v2 ListCollectors chronicle.googleapis.com/collectors.list
Penerus UpdateCollector v2 UpdateCollector chronicle.googleapis.com/collectors.update
Penerus DeleteCollector v2 DeleteCollector chronicle.googleapis.com/collectors.delete
Parser ArchiveCbnParser v1 DeactivateParser chronicle.googleapis.com/parsers.deactivate
Parser CreateCbnParser v1 CreateParser chronicle.googleapis.com/parsers.create
Parser GetCbnParser v1 GetParser chronicle.googleapis.com/parsers.get
Parser ListCbnParserHistory v1 ListParsers chronicle.googleapis.com/parsers.list
Parser ListCbnParsers v1 ListParsers chronicle.googleapis.com/parsers.list
Parser RetrieveSampleLogs v1 ListLogs chronicle.googleapis.com/logs.list
Parser ValidateCbnParser v1 CreateParser chronicle.googleapis.com/parsers.create
Partner CreateCustomer v1 CreateTenant chronicle.googleapis.com/tenants.create
Partner GetCustomer v1 GetInstance chronicle.googleapis.com/instances.get
Partner GetForwarderConfigs v1 GenerateForwarderFiles chronicle.googleapis.com/forwarders.generateFiles
Partner ListCustomersOfPartner v1 ListTenants chronicle.googleapis.com/tenants.list
Partner SetAuthVersion v1 UpdateInstance chronicle.googleapis.com/instances.update
Partner SetComplianceRequirements v1 UpdateInstance chronicle.googleapis.com/instances.update
Partner SetUIState v1 UpdateInstance chronicle.googleapis.com/instances.update
Partner SetWorkforcePoolProvider v1 UpdateInstance chronicle.googleapis.com/instances.update
ReferenceList CreateReferenceList v2 CreateReferenceList chronicle.googleapis.com/referenceLists.create
ReferenceList VerifyReferenceList v2 VerifyReferenceList chronicle.googleapis.com/referenceLists.verify
ReferenceList GetReferenceList v2 GetReferenceList chronicle.googleapis.com/referenceLists.get
ReferenceList ListReferenceLists v2 ListReferenceLists chronicle.googleapis.com/referenceLists.list
ReferenceList UpdateReferenceList v2 UpdateReferenceList chronicle.googleapis.com/referenceLists.update
Retrohunt RunRetrohunt v2 CreateRetrohunt chronicle.googleapis.com/retrohunts.create
Retrohunt ListRetrohunts v2 ListRetrohunts chronicle.googleapis.com/retrohunts.list
Retrohunt GetRetrohunt v2 GetRetrohunt chronicle.googleapis.com/retrohunts.get
Retrohunt CancelRetrohunt v2 CancelOperation chronicle.googleapis.com/operations.cancel
Retrohunt WaitRetrohunt v2 GetOperation chronicle.googleapis.com/operations.get
Aturan GetRule v2 GetRule chronicle.googleapis.com/rules.get
Aturan CreateRule v2 CreateRule chronicle.googleapis.com/rules.create
Aturan VerifyRule v2 VerifyRuleText chronicle.googleapis.com/rules.verifyRuleText
Aturan ListRules v2 ListRules chronicle.googleapis.com/rules.list
Aturan DeleteRule v2 DeleteRule chronicle.googleapis.com/rules.delete
Aturan ArchiveRule v2 UpdateRuleDeployment chronicle.googleapis.com/ruleDeployments.update
Aturan UnarchiveRule v2 UpdateRuleDeployment chronicle.googleapis.com/ruleDeployments.update
Aturan EnableLiveRule v2 UpdateRuleDeployment chronicle.googleapis.com/ruleDeployments.update
Aturan DisableLiveRule v2 UpdateRuleDeployment chronicle.googleapis.com/ruleDeployments.update
Aturan ListRuleVersions v2 ListRuleVersions chronicle.googleapis.com/ruleVersions.list
Aturan CreateRuleVersion v2 CreateRule chronicle.googleapis.com/rules.create
Aturan EnableAlerting v2 UpdateRuleDeployment chronicle.googleapis.com/ruleDeployments.update
Aturan DisableAlerting v2 UpdateRuleDeployment chronicle.googleapis.com/ruleDeployments.update
Aturan ListDetections v2 LegacySearchDetections chronicle.googleapis.com/legacies.legacySearchDetections
Aturan GetDetection v2 LegacyGetDetection chronicle.googleapis.com/legacies.legacyGetDetection
Aturan StreamDetectionAlerts v2 LegacyStreamDetectionAlerts chronicle.googleapis.com/legacies.legacyStreamDetectionAlerts
Aturan StreamTestRule v2 LegacyTestRuleStreaming chronicle.googleapis.com/legacies.legacyTestRuleStreaming
Aturan CreateRule v1 CreateRule chronicle.googleapis.com/rules.create
Aturan GetRule v1 GetRule chronicle.googleapis.com/rules.get
Aturan UpdateRule v1 UpdateRule chronicle.googleapis.com/rules.update
Aturan DeleteRule v1 DeleteRule chronicle.googleapis.com/rules.delete
Aturan EnableLiveRule v1 UpdateRuleDeployment chronicle.googleapis.com/ruleDeployments.update
Aturan ListResults v1 LegacySearchRuleResults chronicle.googleapis.com/legacies.legacySearchRuleResults
Aturan ListRules v1 ListRules chronicle.googleapis.com/rules.list
Aturan RunRule v1 CreateRetrohunt chronicle.googleapis.com/retrohunts.create
Notifikasi StreamDetections v1 StreamDetectionAlerts chronicle.googleapis.com/legacies.streamDetectionAlerts
Notifikasi StreamRuleNotifications v1 StreamDetectionAlerts chronicle.googleapis.com/legacies.streamDetectionAlerts
Telusuri FetchUdmSearchView v1 LegacyFetchUdmSearchView chronicle.googleapis.com/legacies.legacyFetchUdmSearchView
Telusuri GetEvent v1 GetEvent chronicle.googleapis.com/events.get
Log GetLog v1 GetLog chronicle.googleapis.com/logs.get
Telusuri ListArtifactAssets v1 FindRelatedEntities chronicle.googleapis.com/entities.findRelated
IOC ListArtifactIoCDetails v1 LegacySearchArtifactIoCDetails chronicle.googleapis.com/legacies.legacySearchArtifactIoCDetails
Telusuri ListEvents v1 LegacySearchAssetEvents chronicle.googleapis.com/legacies.legacySearchAssetEvents
IOC ListIoCs v1 ListIocMatches chronicle.googleapis.com/iocMatches.list
Telusuri SearchRawLogs v1 SearchRawLogs chronicle.googleapis.com/rawLogs.search
Telusuri UdmSearch v1 UdmSearch chronicle.googleapis.com/events.udmSearch
Telusuri ListAliases v1 SummarizeEntity chronicle.googleapis.com/entities.summarize
Telusuri ListAssetAliases v1 SummarizeEntity chronicle.googleapis.com/entities.summarize
Telusuri ListUserAliases v1 SummarizeEntity chronicle.googleapis.com/entities.summarize
Peringatan Huruf Besar GetUppercaseAlert v1 LegacySearchFindings chronicle.googleapis.com/legacies.legacySearchFindings. Catatan: Penerapan endpoint dihapus dari Backstory pada pertengahan tahun 2023.
Peringatan Huruf Besar ListUppercaseAlerts v1 LegacySearchFindings chronicle.googleapis.com/legacies.legacySearchFindings. Catatan: Penerapan endpoint dihapus dari Backstory pada pertengahan tahun 2023.
Ingestion API BatchCreateEntities v2 ImportEntities chronicle.googleapis.com/entities.import
Ingestion API BatchCreateEvents v2 ImportStatsEvents chronicle.googleapis.com/forwarders.importStatsEvents
Ingestion API BatchCreateLogs v2 ImportLogs chronicle.googleapis.com/logs.import
Ingestion API BatchCreateUDMEvents v2 ImportEvents chronicle.googleapis.com/events.import
Ingestion API BatchCreateUnstructuredLogEntries v2 ImportLogs chronicle.googleapis.com/logs.import
Ingestion API CreateEntities v1 ImportEntities chronicle.googleapis.com/entities.import
Ingestion API CreateUDMEvents v1 ImportEvents chronicle.googleapis.com/events.import
Ingestion API CreateUnstructuredLogEntries v1 ImportLogs chronicle.googleapis.com/logs.import
Ingestion API ListLogTypes v1 ListLogTypes chronicle.googleapis.com/logTypes.list
Ingestion API ListSupportedLogTypes v2 ListLogTypeSettings chronicle.googleapis.com/logTypeSettings.list
Ingestion API PutLog v1 UpdateLogType chronicle.googleapis.com/logTypes.update

Untuk mengetahui informasi selengkapnya tentang cara bermigrasi dari Ingestion API ke Chronicle API, lihat Metode penyerapan Chronicle API.

Endpoint yang tidak dipetakan dan dihapus

Tabel berikut mencantumkan endpoint API lama yang tidak dipetakan ke Chronicle API modern dan dijadwalkan untuk dihapus, beserta alasan bisnisnya:

Area fitur Metode API lama Versi API lama Justifikasi
RBAC Lama CreateSubject v1 Tidak digunakan lagi; kontrol akses kini diatur oleh peran IAM Google Cloud terperinci.
RBAC Lama DeleteSubject v1 Tidak digunakan lagi; kontrol akses kini diatur oleh peran IAM Google Cloud terperinci.
RBAC Lama GetSubject v1 Tidak digunakan lagi; kontrol akses kini diatur oleh peran IAM Google Cloud terperinci.
RBAC Lama ListRoles v1 Tidak digunakan lagi; kontrol akses kini diatur oleh peran IAM Google Cloud terperinci.
RBAC Lama ListSubjects v1 Tidak digunakan lagi; kontrol akses kini diatur oleh peran IAM Google Cloud terperinci.
RBAC Lama UpdateRole v1 Tidak digunakan lagi; kontrol akses kini diatur oleh peran IAM Google Cloud terperinci.
RBAC Lama UpdateSubject v1 Tidak digunakan lagi; kontrol akses kini diatur oleh peran IAM Google Cloud terperinci.
Parser ListCbnParserErrors v1 Tidak lagi diperlukan atau tersedia dalam alur kerja pengelolaan parser modern.
Partner EnableIAM v1 Fitur sudah tidak digunakan lagi dan ditangani menggunakan mekanisme Google Cloud standar.
Partner GenerateIamMigrationCommands v1 Fitur sudah tidak digunakan lagi dan tidak diperlukan dalam arsitektur modern.
Partner GenerateIdPMetadata v1 Redundan dalam arsitektur terintegrasi Google Cloudmodern.
Partner GetIngestionFilter v1 Redundan dalam arsitektur terintegrasi Google Cloudmodern.
Partner SetGCPProjectLink v1 Redundan dalam arsitektur terintegrasi Google Cloudmodern.
Peringatan Huruf Besar CreateCorrespondence v1 Fitur sudah tidak digunakan lagi.

Perlu bantuan lain? Dapatkan jawaban dari anggota Komunitas dan profesional Google SecOps.