[SEC-19484] Add datasource to rule model (#2093)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-03-11 16:30:30.511689",
-            "spec_repo_commit": "baf04a80"
+            "regenerated": "2025-03-13 09:11:35.407776",
+            "spec_repo_commit": "a1fc1148"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-03-11 16:30:30.529573",
-            "spec_repo_commit": "baf04a80"
+            "regenerated": "2025-03-13 09:11:35.424452",
+            "spec_repo_commit": "a1fc1148"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -27642,6 +27642,17 @@ components:
       x-enum-varnames:
       - TIMESTAMP_ASCENDING
       - TIMESTAMP_DESCENDING
+    SecurityMonitoringStandardDataSource:
+      default: logs
+      description: Source of events, either logs or audit trail.
+      enum:
+      - logs
+      - audit
+      example: logs
+      type: string
+      x-enum-varnames:
+      - LOGS
+      - AUDIT
     SecurityMonitoringStandardRuleCreatePayload:
       description: Create a new rule.
       properties:
@@ -27809,6 +27820,8 @@ components:
       properties:
         aggregation:
           $ref: '#/components/schemas/SecurityMonitoringRuleQueryAggregation'
+        dataSource:
+          $ref: '#/components/schemas/SecurityMonitoringStandardDataSource'
         distinctFields:
           description: Field for which the cardinality is measured. Sent as an array.
           items:

packages/datadog-api-client-v2/index.ts

@@ -2387,6 +2387,7 @@ export { SecurityMonitoringSignalTriageAttributes } from "./models/SecurityMonit
 export { SecurityMonitoringSignalTriageUpdateData } from "./models/SecurityMonitoringSignalTriageUpdateData";
 export { SecurityMonitoringSignalTriageUpdateResponse } from "./models/SecurityMonitoringSignalTriageUpdateResponse";
 export { SecurityMonitoringSignalType } from "./models/SecurityMonitoringSignalType";
+export { SecurityMonitoringStandardDataSource } from "./models/SecurityMonitoringStandardDataSource";
 export { SecurityMonitoringStandardRuleCreatePayload } from "./models/SecurityMonitoringStandardRuleCreatePayload";
 export { SecurityMonitoringStandardRulePayload } from "./models/SecurityMonitoringStandardRulePayload";
 export { SecurityMonitoringStandardRuleQuery } from "./models/SecurityMonitoringStandardRuleQuery";

packages/datadog-api-client-v2/models/ObjectSerializer.ts

@@ -2375,6 +2375,7 @@ const enumsMap: { [key: string]: any[] } = {
   SecurityMonitoringSignalState: ["open", "archived", "under_review"],
   SecurityMonitoringSignalType: ["signal"],
   SecurityMonitoringSignalsSort: ["timestamp", "-timestamp"],
+  SecurityMonitoringStandardDataSource: ["logs", "audit"],
   SecurityMonitoringSuppressionType: ["suppressions"],
   SensitiveDataScannerConfigurationType: [
     "sensitive_data_scanner_configuration",

packages/datadog-api-client-v2/models/SecurityMonitoringStandardDataSource.ts

@@ -0,0 +1,18 @@
+/**
+ * Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ * This product includes software developed at Datadog (https://www.datadoghq.com/).
+ * Copyright 2020-Present Datadog, Inc.
+ */
+
+import { UnparsedObject } from "../../datadog-api-client-common/util";
+
+/**
+ * Source of events, either logs or audit trail.
+ */
+
+export type SecurityMonitoringStandardDataSource =
+  | typeof LOGS
+  | typeof AUDIT
+  | UnparsedObject;
+export const LOGS = "logs";
+export const AUDIT = "audit";

packages/datadog-api-client-v2/models/SecurityMonitoringStandardRuleQuery.ts

@@ -4,6 +4,7 @@
  * Copyright 2020-Present Datadog, Inc.
  */
 import { SecurityMonitoringRuleQueryAggregation } from "./SecurityMonitoringRuleQueryAggregation";
+import { SecurityMonitoringStandardDataSource } from "./SecurityMonitoringStandardDataSource";
 
 import { AttributeTypeMap } from "../../datadog-api-client-common/util";
 
@@ -15,6 +16,10 @@ export class SecurityMonitoringStandardRuleQuery {
    * The aggregation type.
    */
   "aggregation"?: SecurityMonitoringRuleQueryAggregation;
+  /**
+   * Source of events, either logs or audit trail.
+   */
+  "dataSource"?: SecurityMonitoringStandardDataSource;
   /**
    * Field for which the cardinality is measured. Sent as an array.
    */
@@ -65,6 +70,10 @@ export class SecurityMonitoringStandardRuleQuery {
       baseName: "aggregation",
       type: "SecurityMonitoringRuleQueryAggregation",
     },
+    dataSource: {
+      baseName: "dataSource",
+      type: "SecurityMonitoringStandardDataSource",
+    },
     distinctFields: {
       baseName: "distinctFields",
       type: "Array<string>",