All Products
Search
Document Center

Security Center:UpdateNormalizationSchema

Last Updated:Jan 21, 2026

Updates a normalization schema.

Operation description

The request parameters use a complex JSON structure. A supporting tool class is provided to help you build the configuration. For an example, see the Demo.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

RegionId

string

No

The region where the Data Management center for threat analysis is located. Select a region based on the location of your assets. Valid values:

  • cn-hangzhou: Your assets are in the Chinese mainland.

  • ap-southeast-1: Your assets are outside China.

cn-hangzhou

Lang

string

No

The language of the response messages. Valid values:

  • zh (default): Chinese.

  • en: English.

zh

RoleFor

integer

No

The user ID of the member. This parameter is used by an administrator to assume the permissions of a member.

113091674488****

NormalizationSchemaType

string

Yes

The type of the normalization schema:

  • log: a log.

  • entity: an entity.

log

NormalizationSchemaId

string

Yes

The ID of the normalization schema.

WAF_ALERT_ACTIVITY

NormalizationSchemaName

string

Yes

The name of the normalization schema.

ProcessQuery

NormalizationSchemaDescription

string

No

The description of the normalization schema.

ProcessQuery

NormalizationFields

array<object>

No

The normalization fields.

array<object>

No

The normalization fields.

NormalizationFieldName

string

Yes

The name of the normalization field.

cloud_user

NormalizationFieldType

string

Yes

The type of the normalization field. Supported types are `text`, `long`, `double`, and `json`.

varchar

NormalizationFieldRequired

boolean

No

Indicates whether the normalization field is required.

NormalizationFieldDescription

string

No

The description of the normalization field.

cloud_user

NormalizationFieldExample

string

No

An example of the normalization field.

173326*******

NormalizationFieldFrom

string

No

The source of the key for a `json` type normalization field.

preset

NormalizationFieldTokenize

boolean

No

Indicates whether to tokenize the normalization field.

NormalizationFieldJsonIndexAll

boolean

No

For a `json` type field, indicates whether to create an index for all its keys.

NormalizationFieldJsonKeys

array<object>

No

The list of keys for a `json` type field.

object

No

A key for the `json` type field.

NormalizationFieldName

string

Yes

The name of the key.

alert_name

NormalizationFieldType

string

Yes

The type of the key. Supported types are `text`, `long`, `double`, and `json`.

text

NormalizationFieldRequired

boolean

No

Indicates whether the key is required.

NormalizationFieldDescription

string

No

The description of the key.

告警等级

NormalizationFieldExample

string

No

An example of the key.

枚举值:1、2、3、4、5

NormalizationFieldFrom

string

No

The source of the key.

preset

NormalizationFieldTokenize

boolean

No

Indicates whether to tokenize the key.

true

Response elements

Element

Type

Description

Example

object

Schema of Response

RequestId

string

The request ID.

6276D891-*****-55B2-87B9-74D413F7****

Examples

Success response

JSON format

{
  "RequestId": "6276D891-*****-55B2-87B9-74D413F7****"
}

Error codes

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.