DescribeSuspEventsRequest.Builder (alibabacloud-sas20181203 9.0.1 API)

java.lang.Object
- com.aliyun.sdk.service.sas20181203.models.DescribeSuspEventsRequest.Builder

所有已实现的接口:

darabonba.core.RequestModel.Builder<DescribeSuspEventsRequest,DescribeSuspEventsRequest.Builder>

封闭类:

DescribeSuspEventsRequest
```
public static final class DescribeSuspEventsRequest.Builder
extends Object
```

方法概要

所有方法实例方法具体方法
限定符和类型	方法和说明
`DescribeSuspEventsRequest.Builder`	`alarmUniqueInfo(String alarmUniqueInfo)` The ID of the alert event.
`DescribeSuspEventsRequest.Builder`	`assetsTypeList(List<String> assetsTypeList)` The types of the assets.
`DescribeSuspEventsRequest`	`build()`
`DescribeSuspEventsRequest.Builder`	`clusterId(String clusterId)` The ID of the cluster of whose alert events you want to query.
`DescribeSuspEventsRequest.Builder`	`containerFieldName(String containerFieldName)` The key of the condition that is used to query alert events on containers.
`DescribeSuspEventsRequest.Builder`	`containerFieldValue(String containerFieldValue)` The value of the condition that is used to query alert events on containers.
`DescribeSuspEventsRequest.Builder`	`currentPage(String currentPage)` The number of the page to return.
`DescribeSuspEventsRequest.Builder`	`dealed(String dealed)` Specifies whether the alert event is handled.
`DescribeSuspEventsRequest.Builder`	`detectSource(String detectSource)` DetectSource.
`DescribeSuspEventsRequest.Builder`	`eventNames(String eventNames)` The subtype of the alert event.
`DescribeSuspEventsRequest.Builder`	`from(String from)` The data source of the alert event.
`DescribeSuspEventsRequest.Builder`	`groupId(Long groupId)` The ID of the asset group to which the affected asset belongs.
`DescribeSuspEventsRequest.Builder`	`id(Long id)` The ID of the alert event.
`DescribeSuspEventsRequest.Builder`	`lang(String lang)` The language of the content within the request and response.
`DescribeSuspEventsRequest.Builder`	`levels(String levels)` The severity of the alert event.
`DescribeSuspEventsRequest.Builder`	`multiAccountActionType(Integer multiAccountActionType)` The type of the accounts that you want to query.
`DescribeSuspEventsRequest.Builder`	`name(String name)` The name of the asset that is affected by the alert event.
`DescribeSuspEventsRequest.Builder`	`operateErrorCodeList(List<String> operateErrorCodeList)` An array that consists of the handling result codes of alert events.
`DescribeSuspEventsRequest.Builder`	`operateTimeEnd(String operateTimeEnd)` The timestamp when the handling operation ends.
`DescribeSuspEventsRequest.Builder`	`operateTimeStart(String operateTimeStart)` The timestamp when the handling operation starts.
`DescribeSuspEventsRequest.Builder`	`pageSize(String pageSize)` The number of entries per page.
`DescribeSuspEventsRequest.Builder`	`parentEventTypes(String parentEventTypes)` The alert type of the alert event.
`DescribeSuspEventsRequest.Builder`	`remark(String remark)` The name of the alert or the information about the asset.
`DescribeSuspEventsRequest.Builder`	`resourceDirectoryAccountId(Long resourceDirectoryAccountId)` The Alibaba Cloud account ID of the member in the resource directory.
`DescribeSuspEventsRequest.Builder`	`sortColumn(String sortColumn)` The custom sorting field.
`DescribeSuspEventsRequest.Builder`	`sortType(String sortType)` The custom sorting order.
`DescribeSuspEventsRequest.Builder`	`source(String source)` The source of the alert.
`DescribeSuspEventsRequest.Builder`	`sourceAliUids(List<Long> sourceAliUids)` The IDs of the Alibaba Cloud accounts within which alerts are generated.
`DescribeSuspEventsRequest.Builder`	`sourceIp(String sourceIp)` The source IP address of the request.
`DescribeSuspEventsRequest.Builder`	`status(String status)` The status of the alert event.
`DescribeSuspEventsRequest.Builder`	`strictMode(String strictMode)` Specifies whether to enable the strict alerting mode.
`DescribeSuspEventsRequest.Builder`	`supportOperateCodeList(List<String> supportOperateCodeList)` 告警支持的操作类型列表。
`DescribeSuspEventsRequest.Builder`	`tacticId(String tacticId)` The tactic ID of ATT&CK.
`DescribeSuspEventsRequest.Builder`	`targetType(String targetType)` The item that is used to search for the container.
`DescribeSuspEventsRequest.Builder`	`timeEnd(String timeEnd)` The end time when the alert event was last detected.
`DescribeSuspEventsRequest.Builder`	`timeStart(String timeStart)` The start time when the alert event was last detected.
`DescribeSuspEventsRequest.Builder`	`uniqueInfo(String uniqueInfo)` The unique key of the alert.
`DescribeSuspEventsRequest.Builder`	`uuids(String uuids)` The UUID of the server on which the alert is detected.

从类继承的方法 java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

- 方法详细资料
  - alarmUniqueInfo
```
public DescribeSuspEventsRequest.Builder alarmUniqueInfo(String alarmUniqueInfo)
```
    The ID of the alert event.
    
    To query the details of an alert event, you must specify the ID of the alert event. You can call the DescribeSuspEvents operation to query the IDs of alert events.
    
    example:
    8df914418f4211fb****
  - assetsTypeList
```
public DescribeSuspEventsRequest.Builder assetsTypeList(List<String> assetsTypeList)
```
    The types of the assets.
  - clusterId
```
public DescribeSuspEventsRequest.Builder clusterId(String clusterId)
```
    The ID of the cluster of whose alert events you want to query.
    example:
    c4af4fdf38a98496a9b63c2be5dae****
  - containerFieldName
```
public DescribeSuspEventsRequest.Builder containerFieldName(String containerFieldName)
```
    The key of the condition that is used to query alert events on containers. Valid values:
    - instanceId: the ID of the asset
    - appName: the name of the application
    - clusterId: the ID of the cluster
    - regionId: the ID of the region
    - nodeName: the name of the node
    - namespace: the namespace
    - clusterName: the name of the cluster
    - image: the name of the image
    - imageRepoName: the name of the image repository
    - imageRepoNamespace: the namespace to which the image repository belongs
    - imageRepoTag: the tag that is added to the image
    - imageDigest: the digest of the image
    example:
    instanceId
  - containerFieldValue
```
public DescribeSuspEventsRequest.Builder containerFieldValue(String containerFieldValue)
```
    The value of the condition that is used to query alert events on containers.
    example:
    ccf9769c22b844ff9b8d57417683b****
  - currentPage
```
public DescribeSuspEventsRequest.Builder currentPage(String currentPage)
```
    The number of the page to return. Default value: 1.
    example:
    1
  - dealed
```
public DescribeSuspEventsRequest.Builder dealed(String dealed)
```
    Specifies whether the alert event is handled. Valid values:
    - N: unhandled
    - Y: handled
    example:
    N
  - detectSource
```
public DescribeSuspEventsRequest.Builder detectSource(String detectSource)
```
    DetectSource.
  - eventNames
```
public DescribeSuspEventsRequest.Builder eventNames(String eventNames)
```
    The subtype of the alert event. Separate multiple subtypes with commas (,).
    example:
    WEBSHELL
  - from
```
public DescribeSuspEventsRequest.Builder from(String from)
```
    The data source of the alert event. Set the value to sas.
    example:
    sas
  - groupId
```
public DescribeSuspEventsRequest.Builder groupId(Long groupId)
```
    The ID of the asset group to which the affected asset belongs.
    example:
    18768
  - id
```
public DescribeSuspEventsRequest.Builder id(Long id)
```
    The ID of the alert event.
    example:
    123
  - lang
```
public DescribeSuspEventsRequest.Builder lang(String lang)
```
    The language of the content within the request and response. Default value: zh. Valid values:
    - zh: Chinese
    - en: English
    example:
    zh
  - levels
```
public DescribeSuspEventsRequest.Builder levels(String levels)
```
    The severity of the alert event. Separate multiple severities with commas (,). Valid values:
    - serious
    - suspicious
    - remind
    example:
    serious
  - multiAccountActionType
```
public DescribeSuspEventsRequest.Builder multiAccountActionType(Integer multiAccountActionType)
```
    The type of the accounts that you want to query. Default value: 0. Valid values:
    - 0: the current account.
    - 1: all accounts.
    example:
    0
  - name
```
public DescribeSuspEventsRequest.Builder name(String name)
```
    The name of the asset that is affected by the alert event.
    example:
    ecs-xxx
  - operateErrorCodeList
```
public DescribeSuspEventsRequest.Builder operateErrorCodeList(List<String> operateErrorCodeList)
```
    An array that consists of the handling result codes of alert events.
  - operateTimeEnd
```
public DescribeSuspEventsRequest.Builder operateTimeEnd(String operateTimeEnd)
```
    The timestamp when the handling operation ends.
    example:
    2022-07-06 13:50:38
  - operateTimeStart
```
public DescribeSuspEventsRequest.Builder operateTimeStart(String operateTimeStart)
```
    The timestamp when the handling operation starts.
    example:
    2022-07-05 13:50:38
  - pageSize
```
public DescribeSuspEventsRequest.Builder pageSize(String pageSize)
```
    The number of entries per page. Default value: 20. Maximum value: 100.
    example:
    20
  - parentEventTypes
```
public DescribeSuspEventsRequest.Builder parentEventTypes(String parentEventTypes)
```
    The alert type of the alert event. Valid values:
    - Suspicious process
    - Webshell
    - Unusual logon
    - Exception
    - Sensitive file tampering
    - Malicious process (cloud threat detection)
    - Suspicious network connection
    - Suspicious account
    - Application intrusion event
    - Cloud threat detection
    - Precise defense
    - Application whitelist
    - Persistent webshell
    - Web application threat detection
    - Malicious script
    - Threat intelligence
    - Malicious network activity
    - Cluster exception
    - Webshell (on-premises threat detection)
    - Vulnerability exploitation
    - Malicious process (on-premises threat detection)
    - Trusted exception
    - Others
    example:
    Webshell
  - remark
```
public DescribeSuspEventsRequest.Builder remark(String remark)
```
    The name of the alert or the information about the asset.
    
    Fuzzy search is supported. The asset information includes the name, public IP address, and private IP address of an asset.
    
    example:
    192.168.XX.XX
  - resourceDirectoryAccountId
```
public DescribeSuspEventsRequest.Builder resourceDirectoryAccountId(Long resourceDirectoryAccountId)
```
    The Alibaba Cloud account ID of the member in the resource directory.
    
    You can call the DescribeMonitorAccounts operation to query the ID.
    
    example:
    16670360956*****
  - sortColumn
```
public DescribeSuspEventsRequest.Builder sortColumn(String sortColumn)
```
    The custom sorting field. Default value: operateTime. Valid values:
    - lastTime: the latest occurrence time.
    - operateTime: the handling time.
    This parameter takes effect if you set the Dealed parameter to Y.
    
    example:
    operateTime
  - sortType
```
public DescribeSuspEventsRequest.Builder sortType(String sortType)
```
    The custom sorting order. Default value: desc. Valid values:
    - asc: the ascending order
    - desc: the descending order
    This parameter takes effect if you set the Dealed parameter to Y.
    
    example:
    desc
  - source
```
public DescribeSuspEventsRequest.Builder source(String source)
```
    The source of the alert.
    example:
    aegis_suspicious_file_v2
  - sourceAliUids
```
public DescribeSuspEventsRequest.Builder sourceAliUids(List<Long> sourceAliUids)
```
    The IDs of the Alibaba Cloud accounts within which alerts are generated.
  - sourceIp
```
public DescribeSuspEventsRequest.Builder sourceIp(String sourceIp)
```
    The source IP address of the request.
    example:
    192.168.XX.XX
  - status
```
public DescribeSuspEventsRequest.Builder status(String status)
```
    The status of the alert event. Valid values:
    - 0: all
    - 1: pending handling
    - 2: ignored
    - 4: confirmed
    - 8: marked as a false positive
    - 16: handling
    - 32: handled
    - 64: expired
    - 128: deleted
    - 512: automatically blocking
    - 513: automatically blocked
    example:
    1
  - strictMode
```
public DescribeSuspEventsRequest.Builder strictMode(String strictMode)
```
    Specifies whether to enable the strict alerting mode.
    - N: no
    - Y: Yes
    example:
    Y
  - supportOperateCodeList
```
public DescribeSuspEventsRequest.Builder supportOperateCodeList(List<String> supportOperateCodeList)
```
    告警支持的操作类型列表。
  - tacticId
```
public DescribeSuspEventsRequest.Builder tacticId(String tacticId)
```
    The tactic ID of ATT&CK.
    example:
    TA0001
  - targetType
```
public DescribeSuspEventsRequest.Builder targetType(String targetType)
```
    The item that is used to search for the container. Valid values:
    - containerId: the ID of the container
    - uuid: the UUID of the server
    - imageUuid: the UUID of the image
    example:
    containerId
  - timeEnd
```
public DescribeSuspEventsRequest.Builder timeEnd(String timeEnd)
```
    The end time when the alert event was last detected.
    example:
    2022-07-06 13:50:38
  - timeStart
```
public DescribeSuspEventsRequest.Builder timeStart(String timeStart)
```
    The start time when the alert event was last detected.
    example:
    2022-07-05 13:50:38
  - uniqueInfo
```
public DescribeSuspEventsRequest.Builder uniqueInfo(String uniqueInfo)
```
    The unique key of the alert.
    example:
    73fc06fb175a7405697e402f52864****
  - uuids
```
public DescribeSuspEventsRequest.Builder uuids(String uuids)
```
    The UUID of the server on which the alert is detected. Separate multiple UUIDs with commas (,).
    example:
    bb5d2484-f10e-450d-8917-3e79667e****,0e7c2fcd-7100-42c7-a21a-db6e4f32****
  - build
```
public DescribeSuspEventsRequest build()
```

类 DescribeSuspEventsRequest.Builder

方法概要

从类继承的方法 java.lang.Object

方法详细资料

alarmUniqueInfo

assetsTypeList

clusterId

containerFieldName

containerFieldValue

currentPage

dealed

detectSource

eventNames

from

groupId

id

lang

levels

multiAccountActionType

name

operateErrorCodeList

operateTimeEnd

operateTimeStart

pageSize

parentEventTypes

remark

resourceDirectoryAccountId

sortColumn

sortType

source

sourceAliUids

sourceIp

status

strictMode

supportOperateCodeList

tacticId

targetType

timeEnd

timeStart

uniqueInfo

uuids

build