monitoring_signal_entities

Creates, updates, deletes, gets or lists a monitoring_signal_entities resource.

Overview

Name	monitoring_signal_entities
Type	Resource
Id	datadog.security.monitoring_signal_entities

Fields

The following fields are returned by SELECT queries:

get_signal_entities

Name	Datatype	Description
id	string	The signal ID the entities are associated with. (example: AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA)
attributes	object	Attributes containing the entities related to the signal.
type	string	The type of the resource. The value should always be entities. (entities) (default: entities, example: entities)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_signal_entities	select	signal_id	limit	Get the list of entities related to a security signal, captured at the signal's timestamp.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
signal_id	string	The ID of the signal.
site	string	The Datadog site (region) for your organization, for example datadoghq.com, us3.datadoghq.com, us5.datadoghq.com, ap1.datadoghq.com, ap2.datadoghq.com, datadoghq.eu, ddog-gov.com. Resolved from the DD_SITE environment variable when set. Optional: defaults to datadoghq.com, or the value of the DD_SITE environment variable when set; a WHERE value overrides both.
limit	integer (int32)	The maximum number of entities to return.

SELECT examples

get_signal_entities

Get the list of entities related to a security signal, captured at the signal's timestamp.

SELECT
id,
attributes,
type
FROM datadog.security.monitoring_signal_entities
WHERE signal_id = '{{ signal_id }}' -- required
AND limit = '{{ limit }}'
;