Class PolicyIdsEventFlowData.Builder

    • Constructor Detail

      • Builder

        public Builder()
        Constructor with parameters for the required properties of PolicyIdsEventFlowData.
    • Method Detail

      • setActionType

        public PolicyIdsEventFlowData.Builder setActionType​(java.lang.String actionType)
        Possible values are: The action pertaining to the detected intrusion. Possible values are ALERT, DROP, REJECT, and INVALID. ALERT - If there is a signature match on the packet, it is allowed to pass but a notification is sent to the user notifying an intrusion was detected. DROP - On a signature match, the packet is silently dropped. An alert is sent to the user that an intrusion was detected. REJECT - On a signature match, the packet is dropped and TCP RST or ICMP error messages (for non-TCP pkts) are sent to the endpoints. An alert is sent to the user that an intrusion was detected. INVALID - If the action doesn't belong to any of the above mentioned categories, it is marked as INVALID. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        actionType - New value for the property.
      • setBytesToclient

        public PolicyIdsEventFlowData.Builder setBytesToclient​(java.lang.Long bytesToclient)
        Bytes sent to client. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        bytesToclient - New value for the property.
      • setBytesToserver

        public PolicyIdsEventFlowData.Builder setBytesToserver​(java.lang.Long bytesToserver)
        Bytes sent to server. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        bytesToserver - New value for the property.
      • setClientIp

        public PolicyIdsEventFlowData.Builder setClientIp​(java.lang.String clientIp)
        IP address of the VM that initiated the communication. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        clientIp - New value for the property.
      • setDestinationIp

        public PolicyIdsEventFlowData.Builder setDestinationIp​(java.lang.String destinationIp)
        IP address of the destination VM on the intrusion flow. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        destinationIp - New value for the property.
      • setDestinationPort

        public PolicyIdsEventFlowData.Builder setDestinationPort​(java.lang.Long destinationPort)
        Port on the destination VM where the traffic was sent to. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        destinationPort - New value for the property.
      • setGateway

        public PolicyIdsEventFlowData.Builder setGateway​(java.lang.String gateway)
        Name of the gateway on which this intrusion was detected. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        gateway - New value for the property.
      • setGatewayTags

        public PolicyIdsEventFlowData.Builder setGatewayTags​(java.util.List<Tag> gatewayTags)
        Tags associated with the gateway on which this intrusion was detected. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        gatewayTags - New value for the property.
      • setHost

        public PolicyIdsEventFlowData.Builder setHost​(java.lang.String host)
        Name of the host on which this intrusion was detected. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        host - New value for the property.
      • setLocalVmIp

        public PolicyIdsEventFlowData.Builder setLocalVmIp​(java.lang.String localVmIp)
        IP address of VM on the host where IDS engine is running. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        localVmIp - New value for the property.
      • setProfileId

        public PolicyIdsEventFlowData.Builder setProfileId​(java.lang.String profileId)
        The IDS profile id that is associated with the IDS rule pertaining to the intrusion event detected. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        profileId - New value for the property.
      • setProtocol

        public PolicyIdsEventFlowData.Builder setProtocol​(java.lang.String protocol)
        Traffic protocol pertaining to the detected intrusion, could be TCP/UDP etc. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        protocol - New value for the property.
      • setRuleId

        public PolicyIdsEventFlowData.Builder setRuleId​(java.lang.Long ruleId)
        The IDS Rule id pertaining to the detected intrusion. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        ruleId - New value for the property.
      • setSourceIp

        public PolicyIdsEventFlowData.Builder setSourceIp​(java.lang.String sourceIp)
        IP address of the source VM on the intrusion flow. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        sourceIp - New value for the property.
      • setSourcePort

        public PolicyIdsEventFlowData.Builder setSourcePort​(java.lang.Long sourcePort)
        Source port through which traffic was initiated that caused the intrusion to be detected. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
        Parameters:
        sourcePort - New value for the property.