Create an enricher

post

https://api.us-west.exabeam.cloud/log-stream/v1/event-enrichers

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

eventEnricherName

string

required

length between 0 and 128

^[a-zA-Z0-9_-]+$

Human-readable enricher name

eventTypes

array of strings

Event types this enricher applies to

eventTypes

description

string

length between 0 and 1024

Description of the enricher

displayName

string

length between 0 and 128

Display name shown in the UI

filter

object

Optional filter to restrict which events are enriched

condition

string

required

CEL condition expression that must evaluate to true for the enricher to execute

eventEnricherState

string

enum

Initial enricher state (defaults to Draft). Use enable/disable endpoints for Enabled/Disabled.

Allowed:

order

int64

Execution priority order within the execution group (defaults to 1)

map

array of objects

List of field-to-value mappings applied when the enricher executes

map

executionGroup

string

enum

Initial Execution group. Defaults to 'Pre-Default' if the value is missing, null, or invalid.

Allowed:

Responses

403

Forbidden. The caller lacks the required permissions

Language

Credentials

OAuth2

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

201Enricher created