Skip to main content

Hey Team,

I tried using listing the parsing error using this endpoint: https://xx-chronicle.googleapis.com/v1alpha/projects/{Project_Number}/locations/xx/instances/{Customer_ID}/parsingErrors. I'm using the SOAR action "Execute HTTP Request" in the integration "GoogleCloudApi" to list the errors.

But I’m getting a 404 error. I wanted to check if there something wrong with the URL format given above or am I doing something wrong here?

Link: https://cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instances.logTypes.parsers.validationReports.parsingErrors/list

Thanks!

You are missing some required path parameters. The path structure should look like this:

projects/*/locations/*/instances/*/logTypes/*/parsers/*/validationReports/*/parsingErrors


Hi @cbryant 

Thank you for the revert.

https://xx-chronicle.googleapis.com/v1alpha/projects/{Project_Number}/locations/xx/instances/{Customer_ID}/logTypes/WINDOWS_DNS/parsers/*/validationReports/*/parsingErrors

Could you please let me know of what all are the possible values on the *s? or do you have any documentation to refer this to?


Hi @cbryant 

Thank you for the revert.

https://xx-chronicle.googleapis.com/v1alpha/projects/{Project_Number}/locations/xx/instances/{Customer_ID}/logTypes/WINDOWS_DNS/parsers/*/validationReports/*/parsingErrors

Could you please let me know of what all are the possible values on the *s? or do you have any documentation to refer this to?


That refers to the parser ID and the validation report ID, which you can obtain by using the list parser and get validation report API's

https://cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instances.logTypes.parsers/list

https://cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instances.logTypes.parsers.validationReports/get 


That refers to the parser ID and the validation report ID, which you can obtain by using the list parser and get validation report API's

https://cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instances.logTypes.parsers/list

https://cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instances.logTypes.parsers.validationReports/get 


Thank You!


That refers to the parser ID and the validation report ID, which you can obtain by using the list parser and get validation report API's

https://cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instances.logTypes.parsers/list

https://cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instances.logTypes.parsers.validationReports/get 


Thanks so much I got this @cbryant,
I also wanted to ask will this api call give real time data. For eg: I had submitted the parser 2 days back it validated successfully and after that may be today I get a parsing error on the source will I get this via the API call?


Reply