import {z} from 'zod' export type SecurityAgentInvestigationCountField = 'verdict' | 'rule_type' | 'signal_source' | 'entity'; export type GetApiApiV2SecurityMonitoringSecurityAgentInvestigationsCountArgs = {field: SecurityAgentInvestigationCountField, 'filter[title]'?: string | undefined, 'filter[from]'?: string | undefined, 'filter[to]'?: string | undefined, 'filter[verdict]'?: string | undefined, 'filter[rule_id]'?: string | undefined, 'filter[rule_type]'?: string | undefined, 'filter[signal_severity]'?: string | undefined, 'filter[signal_source]'?: string | undefined, 'filter[tags]'?: string | undefined, 'filter[entity]'?: string | undefined}; export type GetApiApiV2SecurityMonitoringSecurityAgentInvestigationsCountOptions = {baseUrl?: string | undefined, apiKeyAuth?: string | undefined, appKeyAuth?: string | undefined, fetch?: typeof fetch | undefined}; export const securityAgentInvestigationCount = z.object({count: z.number().int(), value: z.string()}); export const securityAgentInvestigationCountsAttributes = z.object({counts: z.array(securityAgentInvestigationCount)}); export const securityAgentInvestigationCountsType = z.literal("investigation_counts"); export const securityAgentInvestigationCountsData = z.object({attributes: securityAgentInvestigationCountsAttributes, id: z.string(), type: securityAgentInvestigationCountsType}); export const securityAgentInvestigationCountsResponse = z.object({data: securityAgentInvestigationCountsData}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * Count Bits Security Analyst investigations * * GET /api/v2/security_monitoring/security_agent/investigations/count * * Also accepts auth: AuthZ */ export const getApiApiV2SecurityMonitoringSecurityAgentInvestigationsCount = async (args: GetApiApiV2SecurityMonitoringSecurityAgentInvestigationsCountArgs, options?: GetApiApiV2SecurityMonitoringSecurityAgentInvestigationsCountOptions) => { const {baseUrl = "https://api.datadoghq.com", fetch: fetchFn = fetch, apiKeyAuth, appKeyAuth} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('accept', "application/json") if (args.field != null) query.append("field", String(args.field)) if (args['filter[title]'] != null) query.append("filter[title]", String(args['filter[title]'])) if (args['filter[from]'] != null) query.append("filter[from]", String(args['filter[from]'])) if (args['filter[to]'] != null) query.append("filter[to]", String(args['filter[to]'])) if (args['filter[verdict]'] != null) query.append("filter[verdict]", String(args['filter[verdict]'])) if (args['filter[rule_id]'] != null) query.append("filter[rule_id]", String(args['filter[rule_id]'])) if (args['filter[rule_type]'] != null) query.append("filter[rule_type]", String(args['filter[rule_type]'])) if (args['filter[signal_severity]'] != null) query.append("filter[signal_severity]", String(args['filter[signal_severity]'])) if (args['filter[signal_source]'] != null) query.append("filter[signal_source]", String(args['filter[signal_source]'])) if (args['filter[tags]'] != null) query.append("filter[tags]", String(args['filter[tags]'])) if (args['filter[entity]'] != null) query.append("filter[entity]", String(args['filter[entity]'])) if (apiKeyAuth !== undefined) headers.set("DD-API-KEY", apiKeyAuth) if (appKeyAuth !== undefined) headers.set("DD-APPLICATION-KEY", appKeyAuth) const url = `${baseUrl.replace(/\/+$/, '')}/api/v2/security_monitoring/security_agent/investigations/count${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "GET", headers}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(securityAgentInvestigationCountsResponse, await res.json()) };