Updates a normalization schema.
Operation description
The request parameters use a complex JSON structure. A supporting tool class is provided to help you build the configuration. For an example, see the Demo.
Try it now
Test
RAM authorization
Request parameters
|
Parameter |
Type |
Required |
Description |
Example |
| RegionId |
string |
No |
The region where the Data Management center for threat analysis is located. Select a region based on the location of your assets. Valid values:
|
cn-hangzhou |
| Lang |
string |
No |
The language of the response messages. Valid values:
|
zh |
| RoleFor |
integer |
No |
The user ID of the member. This parameter is used by an administrator to assume the permissions of a member. |
113091674488**** |
| NormalizationSchemaType |
string |
Yes |
The type of the normalization schema:
|
log |
| NormalizationSchemaId |
string |
Yes |
The ID of the normalization schema. |
WAF_ALERT_ACTIVITY |
| NormalizationSchemaName |
string |
Yes |
The name of the normalization schema. |
ProcessQuery |
| NormalizationSchemaDescription |
string |
No |
The description of the normalization schema. |
ProcessQuery |
| NormalizationFields |
array<object> |
No |
The normalization fields. |
|
|
array<object> |
No |
The normalization fields. |
||
| NormalizationFieldName |
string |
Yes |
The name of the normalization field. |
cloud_user |
| NormalizationFieldType |
string |
Yes |
The type of the normalization field. Supported types are `text`, `long`, `double`, and `json`. |
varchar |
| NormalizationFieldRequired |
boolean |
No |
Indicates whether the normalization field is required. |
|
| NormalizationFieldDescription |
string |
No |
The description of the normalization field. |
cloud_user |
| NormalizationFieldExample |
string |
No |
An example of the normalization field. |
173326******* |
| NormalizationFieldFrom |
string |
No |
The source of the key for a `json` type normalization field. |
preset |
| NormalizationFieldTokenize |
boolean |
No |
Indicates whether to tokenize the normalization field. |
|
| NormalizationFieldJsonIndexAll |
boolean |
No |
For a `json` type field, indicates whether to create an index for all its keys. |
|
| NormalizationFieldJsonKeys |
array<object> |
No |
The list of keys for a `json` type field. |
|
|
object |
No |
A key for the `json` type field. |
||
| NormalizationFieldName |
string |
Yes |
The name of the key. |
alert_name |
| NormalizationFieldType |
string |
Yes |
The type of the key. Supported types are `text`, `long`, `double`, and `json`. |
text |
| NormalizationFieldRequired |
boolean |
No |
Indicates whether the key is required. |
|
| NormalizationFieldDescription |
string |
No |
The description of the key. |
告警等级 |
| NormalizationFieldExample |
string |
No |
An example of the key. |
枚举值:1、2、3、4、5 |
| NormalizationFieldFrom |
string |
No |
The source of the key. |
preset |
| NormalizationFieldTokenize |
boolean |
No |
Indicates whether to tokenize the key. |
true |
Response elements
|
Element |
Type |
Description |
Example |
|
object |
Schema of Response |
||
| RequestId |
string |
The request ID. |
6276D891-*****-55B2-87B9-74D413F7**** |
Examples
Success response
JSON format
{
"RequestId": "6276D891-*****-55B2-87B9-74D413F7****"
}
Error codes
See Error Codes for a complete list.
Release notes
See Release Notes for a complete list.