---
title: 샘플 로그 생성 구독 가져오기
description: 조직에 대한 샘플 로그 생성 구독을 가져옵니다. 샘플 로그 생성은 특정 Cloud SIEM 콘텐츠 팩에 대한 대표적인 예시 로그를 Logs 플랫폼에 주입하며, 이러한 로그를 사용하여 기본 통합을 먼저 온보딩하지 않아도 탐지 규칙을 테스트할 수 있습니다.
breadcrumbs: 문서 > API > 샘플 로그 생성 구독 가져오기
---

> For the complete documentation index, see [llms.txt](https://dnd37xeb23o8n.cloudfront.net/stefon.simmons/docs-astro-web-10435/llms.txt).

# 샘플 로그 생성 구독 가져오기

## v2 (latest)

{% alert level="warning" %}
**Note**: This endpoint is in preview and is subject to change.
If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help.md).
{% /alert %}

| Datadog site      | API endpoint                                                                                     |
| ----------------- | ------------------------------------------------------------------------------------------------ |
| app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions     |
| us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions |
| us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions |
| app.datadoghq.eu  | GET https://api.datadoghq.eu/api/v2/security_monitoring/sample_log_generation/subscriptions      |
| ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions |
| ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions |
| uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions |
| app.ddog-gov.com  | GET https://api.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions      |
| us2.ddog-gov.com  | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions  |

### Overview

조직에 대한 샘플 로그 생성 구독을 가져옵니다.
샘플 로그 생성은 특정 Cloud SIEM 콘텐츠 팩에 대한 대표적인 예시 로그를 Logs 플랫폼에 주입하며,
이러한 로그를 사용하여 기본 통합을 먼저 온보딩하지 않아도 탐지 규칙을 테스트할 수 있습니다.

**가용성**: 이 엔드포인트는 적격한 요금제 모델을 사용하는 Cloud SIEM 체험 조직으로
제한됩니다. 다른 조직은 `403 Forbidden`(체험판 조직이 아닌 경우) 또는 `400 Bad Request`
(기능 비활성화)를 받으며, 레거시 요금제 계층은 `status: not_available인 응답을 받습니다.

This endpoint requires any of the following permissions:

- `security_monitoring_filters_read`
- `logs_read_index_data`

OAuth apps require the `security_monitoring_filters_read`, `logs_read_index_data` authorization [scope](https://dnd37xeb23o8n.cloudfront.net/stefon.simmons/docs-astro-web-10435/ko/api/latest/scopes.md#security-monitoring) to access this endpoint.

### Arguments

#### Query Strings

| Field           | Type   | Description                                                                                                                                                                                                                                                                              |
| --------------- | ------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| status          | enum   | Filter the subscriptions by status. Use `active` to return only currently active subscriptions, or `all` to return every subscription including expired ones. Ignored when `start_timestamp` is provided. Defaults to `active`. Allowed enum values: `active`, `all`. Default: `active`. |
| start_timestamp | string | The start of the time range, as an RFC3339 timestamp. When provided, the response includes every subscription that was active at any point in `[start_timestamp, end_timestamp]`, and the `status` filter is ignored.                                                                    |
| end_timestamp   | string | The end of the time range, as an RFC3339 timestamp. Ignored unless `start_timestamp` is set. Defaults to the current time when `start_timestamp` is provided.                                                                                                                            |

### Response

{% tabs %}
{% tab label="200" %}
OK

{% tabs %}
{% tab label="Model" %}
Response containing a list of sample log generation subscriptions.

| Parent field | Field                            | Type      | Description                                                                                                                                                   |
| ------------ | -------------------------------- | --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|              | data [*required*]                | [object]  | The list of sample log generation subscriptions.                                                                                                              |
| data         | attributes [*required*]          | object    | The attributes describing a sample log generation subscription.                                                                                               |
| attributes   | content_pack_id [*required*]     | string    | The identifier of the Cloud SIEM content pack the subscription targets.                                                                                       |
| attributes   | created_at [*required*]          | date-time | The time at which the subscription was created.                                                                                                               |
| attributes   | expires_at [*required*]          | date-time | The time at which the subscription expires and stops generating logs.                                                                                         |
| attributes   | is_active [*required*]           | boolean   | Whether the subscription is currently active and generating logs.                                                                                             |
| attributes   | status [*required*]              | enum      | The status of the subscription. Allowed enum values: `subscribed`, `renewed`, `unsubscribed`, `no_active_subscription`, `not_available`, `active`, `expired`. |
| data         | id [*required*]                  | string    | The unique identifier of the subscription.                                                                                                                    |
| data         | type [*required*]                | enum      | The type of the resource. The value should always be `subscriptions`. Allowed enum values: `subscriptions`. Default: `subscriptions`.                         |
|              | meta [*required*]                | object    | Metadata returned alongside a list of sample log generation subscriptions.                                                                                    |
| meta         | total_subscriptions [*required*] | int32     | The total number of subscriptions matching the request, irrespective of pagination.                                                                           |
{% /tab %}

{% tab label="Example" %}
```json
{
  "data": [
    {
      "attributes": {
        "content_pack_id": "aws-cloudtrail",
        "created_at": "2026-05-08T20:02:13.77481Z",
        "expires_at": "2026-05-11T20:02:13.77481Z",
        "is_active": true,
        "status": "subscribed"
      },
      "id": "789",
      "type": "subscriptions"
    }
  ],
  "meta": {
    "total_subscriptions": 1
  }
}
```
{% /tab %}
{% /tabs %}
{% /tab %}

{% tab label="400" %}
Bad Request

{% tabs %}
{% tab label="Model" %}
API error response.

| Field               | Type     | Description       |
| ------------------- | -------- | ----------------- |
| errors [*required*] | [string] | A list of errors. |
{% /tab %}

{% tab label="Example" %}
```json
{
  "errors": [
    "Bad Request"
  ]
}
```
{% /tab %}
{% /tabs %}
{% /tab %}

{% tab label="403" %}
Not Authorized

{% tabs %}
{% tab label="Model" %}
API error response.

| Field               | Type     | Description       |
| ------------------- | -------- | ----------------- |
| errors [*required*] | [string] | A list of errors. |
{% /tab %}

{% tab label="Example" %}
```json
{
  "errors": [
    "Bad Request"
  ]
}
```
{% /tab %}
{% /tabs %}
{% /tab %}

{% tab label="429" %}
Too many requests

{% tabs %}
{% tab label="Model" %}
API error response.

| Field               | Type     | Description       |
| ------------------- | -------- | ----------------- |
| errors [*required*] | [string] | A list of errors. |
{% /tab %}

{% tab label="Example" %}
```json
{
  "errors": [
    "Bad Request"
  ]
}
```
{% /tab %}
{% /tabs %}
{% /tab %}
{% /tabs %}

### Code Example

{% tabs %}
{% tab label="Curl" %}
```bash
# Set your Datadog site and credentials
export DD_SITE="datadoghq.com" # Or us3.datadoghq.com, us5.datadoghq.com, datadoghq.eu, ap1.datadoghq.com, ap2.datadoghq.com, uk1.datadoghq.com, ddog-gov.com, us2.ddog-gov.com
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security_monitoring/sample_log_generation/subscriptions" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
```
{% /tab %}

{% tab label="Go" %}
```go
// Get sample log generation subscriptions returns "OK" response

package main

import (
	"context"
	"encoding/json"
	"fmt"
	"os"

	"github.com/DataDog/datadog-api-client-go/v2/api/datadog"
	"github.com/DataDog/datadog-api-client-go/v2/api/datadogV2"
)

func main() {
	ctx := datadog.NewDefaultContext(context.Background())
	ctx = context.WithValue(ctx, datadog.ContextAccessToken, os.Getenv("DD_BEARER_TOKEN"))
	configuration := datadog.NewConfiguration()
	configuration.SetUnstableOperationEnabled("v2.ListSampleLogGenerationSubscriptions", true)
	apiClient := datadog.NewAPIClient(configuration)
	api := datadogV2.NewSecurityMonitoringApi(apiClient)
	resp, r, err := api.ListSampleLogGenerationSubscriptions(ctx, *datadogV2.NewListSampleLogGenerationSubscriptionsOptionalParameters())

	if err != nil {
		fmt.Fprintf(os.Stderr, "Error when calling `SecurityMonitoringApi.ListSampleLogGenerationSubscriptions`: %v\n", err)
		fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r)
	}

	responseContent, _ := json.MarshalIndent(resp, "", "  ")
	fmt.Fprintf(os.Stdout, "Response from `SecurityMonitoringApi.ListSampleLogGenerationSubscriptions`:\n%s\n", responseContent)
}
```

#### Instructions

First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=go) and then save the example to `main.go` and run following commands:

```bash
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"
```
{% /tab %}

{% tab label="Java" %}
```java
// Get sample log generation subscriptions returns "OK" response

import com.datadog.api.client.ApiClient;
import com.datadog.api.client.ApiException;
import com.datadog.api.client.v2.api.SecurityMonitoringApi;
import com.datadog.api.client.v2.model.SampleLogGenerationSubscriptionsResponse;

public class Example {
  public static void main(String[] args) {
    ApiClient defaultClient = ApiClient.getDefaultApiClient();
    defaultClient.setAccessToken(System.getenv("DD_BEARER_TOKEN"));
    defaultClient.setUnstableOperationEnabled("v2.listSampleLogGenerationSubscriptions", true);
    SecurityMonitoringApi apiInstance = new SecurityMonitoringApi(defaultClient);

    try {
      SampleLogGenerationSubscriptionsResponse result =
          apiInstance.listSampleLogGenerationSubscriptions();
      System.out.println(result);
    } catch (ApiException e) {
      System.err.println(
          "Exception when calling SecurityMonitoringApi#listSampleLogGenerationSubscriptions");
      System.err.println("Status code: " + e.getCode());
      System.err.println("Reason: " + e.getResponseBody());
      System.err.println("Response headers: " + e.getResponseHeaders());
      e.printStackTrace();
    }
  }
}
```

#### Instructions

First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=java) and then save the example to `Example.java` and run following commands:

```bash
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"
```
{% /tab %}

{% tab label="Python" %}
```python
"""
Get sample log generation subscriptions returns "OK" response
"""

from os import environ
from datadog_api_client import ApiClient, Configuration
from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi

configuration = Configuration()
configuration.access_token = environ["DD_BEARER_TOKEN"]
configuration.unstable_operations["list_sample_log_generation_subscriptions"] = True
with ApiClient(configuration) as api_client:
    api_instance = SecurityMonitoringApi(api_client)
    response = api_instance.list_sample_log_generation_subscriptions()

    print(response)
```

#### Instructions

First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=python) and then save the example to `example.py` and run following commands:

```bash
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"
```
{% /tab %}

{% tab label="Ruby" %}
```ruby
# Get sample log generation subscriptions returns "OK" response

require "datadog_api_client"
DatadogAPIClient.configure do |config|
  config.access_token = ENV["DD_BEARER_TOKEN"]
  config.unstable_operations["v2.list_sample_log_generation_subscriptions".to_sym] = true
end
api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
p api_instance.list_sample_log_generation_subscriptions()
```

#### Instructions

First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=ruby) and then save the example to `example.rb` and run following commands:

```bash
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"
```
{% /tab %}

{% tab label="Rust" %}
```rust
// Get sample log generation subscriptions returns "OK" response
use datadog_api_client::datadog;
use datadog_api_client::datadogV2::api_security_monitoring::ListSampleLogGenerationSubscriptionsOptionalParams;
use datadog_api_client::datadogV2::api_security_monitoring::SecurityMonitoringAPI;

#[tokio::main]
async fn main() {
    let mut configuration = datadog::Configuration::new();
    configuration
        .set_unstable_operation_enabled("v2.list_sample_log_generation_subscriptions", true);
    let api = SecurityMonitoringAPI::with_config(configuration);
    let resp = api
        .list_sample_log_generation_subscriptions(
            ListSampleLogGenerationSubscriptionsOptionalParams::default(),
        )
        .await;
    if let Ok(value) = resp {
        println!("{:#?}", value);
    } else {
        println!("{:#?}", resp.unwrap_err());
    }
}
```

#### Instructions

First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=rust) and then save the example to `src/main.rs` and run following commands:

```bash
DD_SITE="datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo run
```
{% /tab %}

{% tab label="TypeScript" %}
```typescript
/**
 * Get sample log generation subscriptions returns "OK" response
 */

import { client, v2 } from "@datadog/datadog-api-client";

const configuration = client.createConfiguration({
  authMethods: {
    AuthZ: {
      accessToken: process.env.DD_BEARER_TOKEN as string,
    },
  },
});
configuration.unstableOperations["v2.listSampleLogGenerationSubscriptions"] =
  true;
const apiInstance = new v2.SecurityMonitoringApi(configuration);

apiInstance
  .listSampleLogGenerationSubscriptions()
  .then((data: v2.SampleLogGenerationSubscriptionsResponse) => {
    console.log(
      "API called successfully. Returned data: " + JSON.stringify(data)
    );
  })
  .catch((error: any) => console.error(error));
```

#### Instructions

First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=typescript) and then save the example to `example.ts` and run following commands:

```bash
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" tsc "example.ts"
```
{% /tab %}
{% /tabs %}
