文档首页/ 安全云脑 SecMaster/ 用户指南/ 云审计服务支持的关键操作/ 云审计服务支持的SecMaster操作列表
更新时间:2025-11-20 GMT+08:00
分享

云审计服务支持的SecMaster操作列表

云审计服务(Cloud Trace Service,CTS)记录了安全云脑相关的操作事件,方便用户日后的查询、审计和回溯,具体请参见《云审计服务用户指南》。

云审计服务支持的SecMaster操作列表如表 云审计服务支持的SecMaster操作列表所示。

表1 云审计服务支持的SecMaster操作列表

操作名称

资源类型

事件名称

method

uri

修改检查项配置

baseline

UpdateCheckItemConfig

POST

/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/checkitems/{checkitem_id}/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/checkitems/config

更新检查项检查结果

baseline

UpdateCheckItemsResults

POST

/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/checkpoints/statistics/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/checkpoints/checkitems

创建检查计划

baseline

CreatePlan

POST

/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/plans/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/plans

更新检查计划

baseline

UpdatePlan

PUT

/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/plans/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/plans/{plan_id}

删除检查计划

baseline

DeletePlan

DELETE

/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/plans/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/plans/{plan_id}

执行检查任务

baseline

RunTasks

POST

/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/tasks/run/v1/{project_id}/workspaces/{workspace_id}/baseline-inspection/tasks/run

创建检查项

baseline

CreateCheckitem

POST

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/checkitems/

删除检查项

baseline

DeleteCheckitem

DELETE

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/checkitems/

导出基线检查结果

baseline

ExportBaseline

POST

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/export

下载基线检查导入模版

baseline

DownloadBaselineImportTemplate

GET

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/template/download

导入基线检查结果

baseline

ImportBaseline

POST

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/import

创建基线检查遵从包

baseline

CreatePackages

POST

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/compliance-packages

删除基线检查遵从包

baseline

DeletePackages

DELETE

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/compliance-packages

查询基线检查遵从包列表

baseline

ListPackages

POST

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/compliance-packages/search

更新基线检查遵从包

baseline

UpdatePackages

PUT

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/compliance-packages/{compliance_packages_id}

查询遵从包详情

baseline

ShowPackageDetail

GET

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/compliance-packages/{compliance_packages_id}

下载遵从包导入模版

baseline

DownloadPackageTemplate

GET

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/compliance-packages/template/download

导入遵从包

baseline

ImportPackages

POST

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/compliance-packages/import

导出遵从包

baseline

ExportPackages

POST

/v2/{project_id}/workspaces/{workspace_id}/sa/baseline/compliance-packages/export

创建报告

report

CreateReport

POST

/v1/{project_id}/workspaces/{workspace_id}/sa/reports

更新报告

report

UpdateReport

PUT

/v1/{project_id}/workspaces/{workspace_id}/sa/reports/{report_id}

删除报告

report

DeleteReport

DELETE

/v1/{project_id}/workspaces/{workspace_id}/sa/reports/{report_id}

发送报告

report

SendReport

POST

/v1/{project_id}/workspaces/{workspace_id}/sa/reports/{report_id}/send

更新资产

resource

UpdateResources

PUT

/v1/{project_id}/workspaces/{workspace_id}/sa/resources/{id}

更新资产

resource

UpdateResources

PUT

/v1/{project_id}/workspaces/{workspace_id}/sa/resources/

删除资产

resource

DeleteResource

DELETE

/v1/{project_id}/workspaces/{workspace_id}/sa/resources/

导入资产

resource

ImportResource

POST

/v1/{project_id}/workspaces/{workspace_id}/sa/resources/import

导出资产

resource

ExportResource

POST

/v1/{project_id}/workspaces/{workspace_id}/sa/resources/export

修改紧急漏洞状态

emergencyVulnerability

SetEmergencyVulnerabilityReadStatus

POST

/v1/{project_id}/workspaces/{workspace_id}/sa/vulnerability/read-status/v1/{project_id}/workspaces/{workspace_id}/sa/vulnerability/read-status

导出紧急漏洞

emergencyVulnerability

ExportEmergencyVulnerability

GET

/v1/{project_id}/workspaces/{workspace_id}/sa/vulnerability/read-status/v1/{project_id}/workspaces/{workspace_id}/sa/vulnerability/export

创建告警

alert

CreateAlert

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/

更新告警

alert

ChangeAlert

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/{alert_id}

批量更新告警

alert

ChangeAlert

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/batch-update

删除告警

alert

DeleteAlert

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/

删除告警

alert

DeleteAlert

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/batch-delete

导入告警

alert

ImportAlert

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/import

导出告警

alert

ExportAlert

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/export

告警转事件

alert

CreateBatchOrderAlerts

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/batch-order

绑定告警数据类类型布局

dataclass

BindDataclassTypeLayout

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/types/layout

删除流程插件

workflow

DeleteWorkflowComponent

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/components/{aop_component_id}

创建流程插件

workflow

CreateWorkflowComponent

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/components

更新流程插件

workflow

UpdateWorkflowComponent

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/components/{aop_component_id}

删除流程

workflow

DeleteWorkflow

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/{workflow_id}

创建流程

workflow

CreateWorkflow

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows

更新流程

workflow

UpdateWorkflow

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/{workflow_id}

操作流程实例

workflow

OperateWorkflowInstance

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/{workflow_id}/instances

评论待办

task

CommentTask

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/instances/tasks/{task_id}/comments

删除待办评论

task

DeleteTaskComment

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/instances/tasks/{task_id}/comments/{comment_id}

提交待办

task

CommitTask

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/instances/

导出流程

workflow

ExportWorkflow

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/export

导入流程

workflow

ImportWorkflow

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/import

删除流程版本

workflow

DeleteWorkflowVersion

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/versions/{version_id}

创建流程版本

workflow

CreateWorkflowVersion

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/{workflow_id}/versions

更新流程版本

workflow

UpdateWorkflowVersion

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/versions/{version_id}

审核流程版本

workflow

ApproveWorkflowVersion

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/versions/{version_id}/approval

调试流程版本

workflow

SimulateWorkflow

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/workflows/versions/{version_id}/debug/result

创建资产连接

asset

CreateConnection

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/assetcredentials/

更新资产连接

asset

UpdateConnection

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/assetcredentials/{asset_id}

删除资产连接

asset

DeleteConnection

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/assetcredentials/{asset_id}

绑定自定义数据类类型布局

dataclass

BindDataClassTypeWithLayout

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}/types/layout

创建分类配置器

mapping

CreateMappingClassifier

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/classifiers

更新分类配置器

mapping

UpdateMappingClassifier

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/classifiers/{classifier_id}

删除分类配置器

mapping

DeleteMappingClassifier

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/classifiers/{classifier_id}

修改分类映射

mapping

UpdateMappingStatus

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/{mapping_id}/status

删除分类映射

mapping

DeleteMapping

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/{mapping_id}

复制分类映射

mapping

CloneMapping

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/{mapping_id}/clone

创建映射配置器

mapping

CreateFilterRules

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/mappers

更新映射配置器

mapping

UpdateMappingMapper

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/mappers/{mapper_id}

删除映射配置器

mapping

DeleteMappingMapper

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/mappings/mappers/{mapper_id}

创建事件

incident

CreateIncident

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/

更新事件

incident

ChangeIncident

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/{incident_id}

批量更新事件

incident

ChangeIncident

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/batch-update

删除事件

incident

DeleteIncident

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/

删除事件

incident

DeleteIncident

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/batch-delete

导入事件

incident

ImportIncident

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/import

导出事件

incident

ExportIncident

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/export

绑定事件数据类类型布局

dataclass

BindIncidentDataclassTypeLayout

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/types/layout

创建威胁情报

indicator

CreateIndicator

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/

更新威胁情报

indicator

UpdateIndicator

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/{indicator_id}

删除威胁情报

indicator

DeleteIndicator

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/

导入威胁情报

indicator

ImportIndicator

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/import

导出威胁情报

indicator

ExportIndicator

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/export

创建剧本

playbook

CreatePlaybook

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks

更新剧本

playbook

UpdatePlaybook

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/{playbook_id}

删除剧本

playbook

DeletePlaybook

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/{playbook_id}

操作剧本实例

playbook

ChangePlaybookInstance

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/instances/

导出剧本实例

playbook

ExportPlaybookInstance

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/instances/

导出剧本

playbook

ExportPlaybook

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/export

导入剧本

playbook

ImportPlaybook

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/import

创建剧本版本

playbook

CreatePlaybookVersion

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/{playbook_id}/versions

更新剧本版本

playbook

UpdatePlaybookVersion

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/versions/{version_id}

删除剧本版本

playbook

DeletePlaybookVersion

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/versions/{version_id}

复制剧本版本

playbook

CopyPlaybookVersion

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/playbooks/versions/{version_id}/clone

创建策略

policy

CreatePolicy

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/policys

更新策略

policy

UpdatePolicy

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/policys

删除策略

policy

DeletePolicy

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/policys

批量删除策略

policy

BatchDeletePolicy

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/policys/batch-delete

批量策略阻断

policy

UpdatePolicy

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/policys/{policy_id}/batch-block

创建待办

task

CreateTask

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/tasks/

更新待办

task

UpdateTask

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/tasks/

导出漏洞组列表

vulnerability

ExportVulnerabilitiesGroups

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/vulnerability/export

下载漏洞模板

vulnerability

DownloadVulnerabilityTemplate

GET

/v1/{project_id}/workspaces/{workspace_id}/soc/vulnerability/template/download

绑定漏洞数据类类型布局

vulnerability

BindVulnerabilityDataclassTypeAndLayout

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/vulnerability/import

创建评论

note

CreateNote

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/notes/

删除评论

note

DeleteNote

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/notes/

创建左菜单

boa

CreateCatalogue

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/catalogues/

删除左菜单

boa

DeleteCatalogue

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/catalogues/

更新左菜单

boa

UpdateCatalogue

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/catalogues/{catalogue_id}

创建布局

boa

CreateLayout

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/layouts/

删除布局

boa

DeleteLayouts

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/layouts/

更新布局

boa

UpdateLayout

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/layouts/

保存为模板

boa

CreateTemplate

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/layouts/

创建页面

boa

CreateLayoutWizard

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/layouts/

删除页面

boa

DeleteLayoutWizard

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/layouts/

更新页面

boa

UpdateLayoutWizards

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/layouts/

创建偏好

boa

CreatePreference

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/prefers/

删除偏好

boa

DeletePreference

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/prefers/

更新偏好

boa

UpdatePreference

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/prefers/

创建数据类

dataclass

CreateDataclass

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses

更新数据类

dataclass

UpdateDataclass

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}

删除数据类

dataclass

DeleteDataclass

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}

创建数据类字段

dataclass

CreateDataclassField

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}/fields/

更新数据类字段

dataclass

UpdateDataclassField

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}/fields/{field_id}

删除数据类字段

dataclass

DeleteDataclassField

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}/fields/

创建告警类型

dataclass

CreateAlertType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/types/

更新告警类型

dataclass

UpdateAlertType

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/types/{dataclass_type_id}

删除告警类型

dataclass

DeleteAlertType

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/types/

启用告警类型

dataclass

EnableAlertType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/alerts/types/enable

创建数据类型

dataclass

CreateDataclassType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}/types

更新数据类型

dataclass

UpdateDataclassType

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}/types/{dataclass_type_id}

删除数据类型

dataclass

DeleteDataclassType

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}/types

启用数据类型

dataclass

EnableDataclassType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/dataclasses/{dataclass_id}/types/enable

创建事件类型

dataclass

CreateIncidentType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/types/

更新事件类型

dataclass

UpdateIncidentType

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/types/{dataclass_type_id}

删除事件类型

dataclass

DeleteIncidentType

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/types/

启用事件类型

dataclass

EnableIncidentType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/incidents/types/enable

创建指标类型

dataclass

CreateIndicatorType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/types/

更新指标类型

dataclass

UpdateIndicatorType

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/types/{dataclass_type_id}

删除指标类型

dataclass

DeleteIndicatorType

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/types/

启用指标类型

dataclass

EnableIndicatorType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/indicators/types/enable

创建漏洞类型

dataclass

CreateVulnerabilityType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/vulnerabilities/types/

更新漏洞类型

dataclass

UpdateVulnerabilityType

PUT

/v1/{project_id}/workspaces/{workspace_id}/soc/vulnerabilities/types/{dataclass_type_id}

删除漏洞类型

dataclass

DeleteVulnerabilityType

DELETE

/v1/{project_id}/workspaces/{workspace_id}/soc/vulnerabilities/types/

启用漏洞类型

dataclass

EnableVulnerabilityType

POST

/v1/{project_id}/workspaces/{workspace_id}/soc/vulnerabilities/types/enable

获取云脑资源实例详情

SecMasterSubscription

CbcGetSecMasterResource

POST

/v1/subscriptions/resources

更新云脑资源元数据

SecMasterSubscription

CbcUpdateSecMasterMeta

PUT

/v1/subscriptions/metadata

资源加锁

SecMasterSubscription

CbcLockSecMasterResource

POST

/v1/subscriptions/{resourcetypename}/lock

资源解锁

SecMasterSubscription

CbcUnlockSecMasterResource

POST

/v1/subscriptions/{resourcetypename}/unlock

资源解锁

SecMasterSubscription

CbcUnlockSecMasterResource

POST

/v1/{project_id}/subscriptions/order/sync

创建委托

SecMasterSubscription

CreateAgency

POST

/v1/{project_id}/subscriptions/agency/v1/{project_id}/subscriptions/agency

创建包周期订单

SecMasterSubscription

CreatePrePaidOrder

POST

/v1/{project_id}/subscriptions/orders/{order_id}

创建云脑包周期资源

SecMasterSubscription

CbcCallbackSecMasterOrder

POST

/v1/{project_id}/subscriptions/callback

开通按需资源

SecMasterSubscription

CreatePostOrder

POST

/v1/{project_id}/subscriptions/orders

取消按需资源

SecMasterSubscription

DeletePostOrder

DELETE

/v1/{project_id}/subscriptions/orders

创建等级云订单

SecMasterSubscription

CreateGradeOrder

POST

/v1/{project_id}/quad-cloud/orders

创建标签

workspace

CreateTags

POST

/v1/{project_id}/{resource_type}/{resource_id}/tags/create

删除标签

workspace

DeleteTags

POST

/v1/{project_id}/{resource_type}/{resource_id}/tags/delete

删除标签

workspace

DeleteTags

DELETE

/v1/{project_id}/{resource_type}/{resource_id}/tags/delete

更新标签

workspace

UpdateTagValue

PUT

/v1/{project_id}/{resource_type}/{resource_id}/{key}/tags/update

创建工作空间

workspace

CreateWorkspace

POST

/v1/workspaces/v1/{project_id}/workspaces

查询工作空间详情

workspace

ShowWorkspace

GET

/v1/workspaces/v1/{project_id}/workspaces/{workspace_id}

删除工作空间

workspace

DeleteWorkspace

DELETE

/v1/workspaces/v1/{project_id}/workspaces/{workspace_id}

更新工作空间

workspace

UpdateWorkspace

PUT

/v1/workspaces/v1/{project_id}/workspaces/{workspace_id}

创建模型

alertRule

CreateAlertRule

POST

/v1/{project_id}/workspaces/{workspace_id}/siem/alert-rules

更新模型

alertRule

UpdateAlertRule

PUT

/v1/{project_id}/workspaces/{workspace_id}/siem/alert-rules/{rule_id}

删除模型

alertRule

DeleteAlertRule

DELETE

/v1/{project_id}/workspaces/{workspace_id}/siem/alert-rules

开启模型

alertRule

EnableAlertRule

POST

/v1/{project_id}/workspaces/{workspace_id}/siem/alert-rules/enable

禁用模型

alertRule

DisableAlertRule

POST

/v1/{project_id}/workspaces/{workspace_id}/siem/alert-rules/disable

仿制模型

alertRule

SimulateAlertRule

POST

/v1/{project_id}/workspaces/{workspace_id}/siem/alert-rules/simulation

导出模型

alertRule

ExportAlertRule

POST

/v1/{project_id}/workspaces/{workspace_id}/siem/alert-rules/export

导入模型

alertRule

ImportAlertRule

POST

/v1/{project_id}/workspaces/{workspace_id}/siem/alert-rules/import

adhoc查询

adhocQuery

CreateAdhocQuery

POST

/v2/{project_id}/workspaces/{workspace_id}/siem/ad-hoc-queries

创建adhoc执行器

adhocQuery

CreateSqlRender

POST

/v2/{project_id}/workspaces/{workspace_id}/siem/ad-hoc-queries/sql-render

adhoc日志查询

adhocQuery

CreateHistogram

POST

/v2/{project_id}/workspaces/{workspace_id}/siem/ad-hoc-queries/histograms

adhoc日志查询

adhocQuery

DeleteOperation

DELETE

/v2/{project_id}/workspaces/{workspace_id}/siem/ad-hoc-queries/{query_id}

adhco心跳检测

adhocQuery

HeartBeat

PUT

/v2/{project_id}/workspaces/{workspace_id}/siem/ad-hoc-queries/heart-beat

开启日志订阅

createCloudLog

CreateCloudLogConfig

POST

/v2/{project_id}/collector/cloudlogs/config

开启日志订阅

cloudLogV2

CreateCloudLog

POST

/v2/{project_id}/collector/cloudlogs/config

创建采集通道

channel

CreateChannel

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/channels

删除采集通道

channel

DeleteChannel

DELETE

/v1/{project_id}/workspaces/{workspace_id}/collector/channels/{channel_id}

更新采集通道

channel

UpdateChannel

PUT

/v1/{project_id}/workspaces/{workspace_id}/collector/channels/{channel_id}

采集通道配置

operation

CreateOperation

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/channels/{channel_id}/operation

创建连接器

connection

CreateConnection

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/connections

删除连接器

connection

DeleteConnection

DELETE

/v1/{project_id}/workspaces/{workspace_id}/collector/connections/{connection_id}

修改连接器

connection

UpdateConnection

PUT

/v1/{project_id}/workspaces/{workspace_id}/collector/connections/{connection_id}

上传文件

file

CreateFile

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/files

创建分组

group

CreateGroup

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/channels/groups

更新分组

group

UpdateGroup

PUT

/v1/{project_id}/workspaces/{workspace_id}/collector/channels/groups/{group_id}

删除分组

group

DeleteGroup

DELETE

/v1/{project_id}/workspaces/{workspace_id}/collector/channels/groups/{group_id}

查询配置规则

moduleTemplate

ShowModuleTemplateRestriction

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/module-templates/restriction

创建解析器

parser

CreateParser

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/logstash/parsers

删除解析器

parser

DeleteParser

DELETE

/v1/{project_id}/workspaces/{workspace_id}/collector/logstash/parsers/{parser_id}

导出解析器

parserFile

ExportParserFile

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/logstash/parsers/export

导入解析器

parserFile

ImportParserFile

POST

/v1/{project_id}/workspaces/{workspace_id}/collector/logstash/parsers/import

更新组件

component

UpdateComponent

POST

/v1/{project_id}/workspaces/{workspace_id}/components/{component_id}/configurations

配置组件

component

CreateComponent

POST

/v1/{project_id}/workspaces/{workspace_id}/components/{component_id}/configurations/application

创建投递

shipperAuthorization

CreateShipperAuthorization

POST

/v1/{project_id}/workspaces/{workspace_id}/siem/shippers/authorizations/

投递授权配置

shipperAuthorization

HandleShipperAuthorization

POST

/v1/{project_id}/workspaces/{workspace_id}/siem/shippers/authorizations/handle

创建节点

nodeManagement

CreateNode

POST

/v1/{project_id}/workspaces/{workspace_id}/nodes

上报节点监控

nodeManagement

CreateTaskCheck

POST

/v1/{project_id}/workspaces/{workspace_id}/nodes/{node_id}/monitor

更新节点

nodeManagement

UpdateNode

PUT

/v1/{project_id}/workspaces/{workspace_id}/nodes/{node_id}

删除节点

nodeManagement

DeleteNode

DELETE

/v1/{project_id}/workspaces/{workspace_id}/nodes

更新vpcep信息

nodeManagement

UpdateVpceps

POST

/v1/{project_id}/workspaces/{workspace_id}/nodes/vpc-endpoint-services

获取节点任务

nodeManagement

UpdateTaskNodeStatus

POST

/v1/{project_id}/workspaces/{workspace_id}/nodes/{node_id}/tasks

相关文档