For AI agents: A markdown version of this page is available at https://dnd37xeb23o8n.cloudfront.net/stefon.simmons/docs-astro-web-10435/ja/api/latest/security-monitoring/bulk-subscribe-to-sample-log-generation.md. A documentation index is available at /llms.txt.
Language
Datadog site

Bulk subscribe to sample log generation

警告Note: This endpoint is in preview and is subject to change. If you have any feedback, contact Datadog support.
POSThttps://api.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulkhttps://api.us3.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulkhttps://api.us5.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulkhttps://api.datadoghq.eu/api/v2/security_monitoring/sample_log_generation/subscriptions/bulkhttps://api.ap1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulkhttps://api.ap2.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulkhttps://api.uk1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulkhttps://api.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulkhttps://api.us2.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk

概要

Subscribe to sample log generation for multiple Cloud SIEM content packs in a single call. Each requested content pack is processed independently; the response includes a per-item status so partial successes can be inspected.

Availability: this endpoint is restricted to Cloud SIEM trial organizations on an eligible pricing model. Non-trial orgs receive 403 Forbidden, the feature flag may also reject requests with 400 Bad Request, and legacy pricing tiers receive per-item responses with status: not_available.

This endpoint requires any of the following permissions:

  • security_monitoring_filters_write
  • logs_modify_indexes

OAuth apps require the security_monitoring_filters_write, logs_modify_indexes authorization scope to access this endpoint.

リクエスト

Body Data (required)

The content packs to subscribe to and the desired duration of the subscriptions.

フィールド
タイプ
説明
data [required]
object

The bulk subscription request body.

応答

OK

Response containing the per-content-pack results of a bulk subscription request.

フィールド
タイプ
説明
data [required]
[object]

The list of bulk subscription results, one per requested content pack.

コード例

Bulk subscribe to sample log generation
# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X POST "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "content_pack_ids": [
        "aws-cloudtrail"
      ],
      "duration": "3d"
    },
    "type": "bulk_subscription_requests"
  }
}
EOF