DAdatadog
Security Monitoring

List batch migration resources

List the resources of a batch migration, including the input of each source rule and, once translated, the proposed Cloud SIEM detection rule in output.

get/api/v2/security_monitoring/batch-migrations/{batch_id}/resources

Request

Path parameters

batch_idstring uuid required
Example:7cdb3a75-64fb-46ce-9445-41969e78fe8e

The UUID of the batch migration.

Query parameters

page[size]integer
Example:50

Size for a given page. The maximum allowed value is 500.

page[number]integer
Example:1

Specific page number to return, starting at 1.

filter[query]string
Example:status:completed inputType:spl

A search query in Datadog search syntax to filter resources, such as status:completed. Filterable attributes are id, name, description, inputType, status, input, createdBy, and lastUpdatedBy. Free text matches the resource name.

Response

OK

Example response

{
  "data": [
    {
      "attributes": {
        "batchId": "7cdb3a75-64fb-46ce-9445-41969e78fe8e",
        "createdAt": "2026-09-21T12:00:00Z",
        "createdBy": "3653d3c6-0c75-11ea-ad28-fb5701eabc7d",
        "description": "Detects repeated failed Windows authentication attempts.",
        "input": "index=wineventlog EventCode=4625",
        "inputType": "spl",
        "lastUpdatedAt": "2026-09-21T12:02:00Z",
        "lastUpdatedBy": "3653d3c6-0c75-11ea-ad28-fb5701eabc7d",
        "name": "Repeated Windows login failures",
        "output": {
          "name": "Repeated Windows login failures",
          "type": "log_detection"
        },
        "outputType": "siem_rule",
        "ruleId": "abc-def-ghi",
        "status": "completed"
      },
      "id": "c968cf83-56c2-4d54-a993-6c86dfb83527",
      "type": "batchMigrationResource"
    }
  ],
  "meta": {
    "totalCount": 1
  }
}

Changes

Changes to this operation have not been checked yet.