gsuitelogs

type Actor struct {
	Email      pantherlog.String `` /* 152-byte string literal not displayed */
	ProfileID  pantherlog.String `json:"profileId" description:"The unique G Suite profile ID of the actor. May be absent if the actor is not a G Suite user."`
	CallerType pantherlog.String `json:"callerType" description:"The type of actor."`
	Key        pantherlog.String `` /* 166-byte string literal not displayed */
}

type Event struct {
	Type       pantherlog.String `` /* 317-byte string literal not displayed */
	Name       pantherlog.String `` /* 224-byte string literal not displayed */
	Parameters []Parameter       `` /* 207-byte string literal not displayed */
}

type ID struct {
	ApplicationName pantherlog.String `json:"applicationName" description:"Application name to which the event belongs."`
	CustomerID      pantherlog.String `json:"customerId" description:"The unique identifier for a G suite account."`
	Time            pantherlog.Time   `json:"time" event_time:"true" tcodec:"rfc3339" description:"Time of occurrence of the activity."`
	UniqueQualifier pantherlog.String `json:"uniqueQualifier" description:"Unique qualifier if multiple events have the same time."`
}

type Parameter struct {
	Name              pantherlog.String       `json:"name" description:"The name of the parameter."`
	Value             pantherlog.String       `json:"value" description:"String value of the parameter."`
	IntValue          pantherlog.Int64        `json:"intValue" description:"Integer value of the parameter."`
	BoolValue         pantherlog.Bool         `json:"boolValue" description:"Boolean value of the parameter."`
	MultiValue        []string                `json:"multiValue" description:"String values of the parameter."`
	MultiIntValue     []pantherlog.Int64      `json:"multiIntValue" description:"Integer values of the parameter."`
	MessageValue      pantherlog.RawMessage   `` /* 270-byte string literal not displayed */
	MultiMessageValue []pantherlog.RawMessage `json:"multiMessageValue" description:"List of messageValue objects."`
}

type Reports struct {
	ID          *ID               `json:"id" validate:"required" description:"Unique identifier for each activity record."`
	Actor       *Actor            `json:"actor" description:"User doing the action."`
	Kind        pantherlog.String `` /* 145-byte string literal not displayed */
	OwnerDomain pantherlog.String `` /* 187-byte string literal not displayed */
	IPAddress   pantherlog.String `` /* 369-byte string literal not displayed */
	Events      []Event           `json:"events" description:"Activity events in the report."`
}