Skip to content

feat(chronicle): implement search_raw_logs functionality#187

Draft
dandye wants to merge 1 commit intogoogle:mainfrom
dandye:search_raw_logs
Draft

feat(chronicle): implement search_raw_logs functionality#187
dandye wants to merge 1 commit intogoogle:mainfrom
dandye:search_raw_logs

Conversation

@dandye
Copy link
Contributor

@dandye dandye commented Feb 18, 2026

Summary of Changes

Feature: Implemented search_raw_logs functionality for Chronicle.

Key Changes:

  • New Module (src/secops/chronicle/raw_log_search.py):

    • Created search_raw_logs function to interact with the :searchRawLogs API endpoint.
    • Handles parameters including baselineQuery, baselineTimeRange, snapshotQuery, logTypes, and allowPartialResults.
  • Client Update (src/secops/chronicle/client.py):

    • Added search_raw_logs method to the ChronicleClient class, exposing the functionality to users.
  • Package Export (src/secops/chronicle/__init__.py):

    • Exported search_raw_logs to make it available via secops.chronicle.
  • Tests (tests/chronicle/test_raw_log_search.py):

    • Added unit tests to verify parameter passing and API request construction.
  • Example (examples/raw_log_search_example.py):

    • Created a script demonstrating how to use the new search functionality with time ranges and filters.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments