Add evaluation_window and keep_alive for Security monitoring rule (#2422)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-02-21 18:16:35.117146",
-            "spec_repo_commit": "5de91bd6"
+            "regenerated": "2025-02-21 19:13:50.245363",
+            "spec_repo_commit": "47fc5add"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-02-21 18:16:35.131972",
-            "spec_repo_commit": "5de91bd6"
+            "regenerated": "2025-02-21 19:13:50.259900",
+            "spec_repo_commit": "47fc5add"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -25121,6 +25121,10 @@ components:
       - 1800
       - 3600
       - 7200
+      - 10800
+      - 21600
+      - 43200
+      - 86400
       format: int32
       type: integer
       x-enum-varnames:
@@ -25132,6 +25136,10 @@ components:
       - THIRTY_MINUTES
       - ONE_HOUR
       - TWO_HOURS
+      - THREE_HOURS
+      - SIX_HOURS
+      - TWELVE_HOURS
+      - ONE_DAY
     SecurityMonitoringRuleHardcodedEvaluatorType:
       description: Hardcoded evaluator type.
       enum:
@@ -25168,6 +25176,8 @@ components:
       - 7200
       - 10800
       - 21600
+      - 43200
+      - 86400
       format: int32
       type: integer
       x-enum-varnames:
@@ -25181,6 +25191,8 @@ components:
       - TWO_HOURS
       - THREE_HOURS
       - SIX_HOURS
+      - TWELVE_HOURS
+      - ONE_DAY
     SecurityMonitoringRuleMaxSignalDuration:
       description: "A signal will \u201Cclose\u201D regardless of the query being
         matched once the time exceeds the maximum duration.\nThis time is calculated

src/datadog_api_client/v2/model/security_monitoring_rule_evaluation_window.py

@@ -17,7 +17,7 @@ class SecurityMonitoringRuleEvaluationWindow(ModelSimple):
     A time window is specified to match when at least one of the cases matches true. This is a sliding window
         and evaluates in real time. For third party detection method, this field is not used.
 
-    :param value: Must be one of [0, 60, 300, 600, 900, 1800, 3600, 7200].
+    :param value: Must be one of [0, 60, 300, 600, 900, 1800, 3600, 7200, 10800, 21600, 43200, 86400].
     :type value: int
     """
 
@@ -30,6 +30,10 @@ class SecurityMonitoringRuleEvaluationWindow(ModelSimple):
         1800,
         3600,
         7200,
+        10800,
+        21600,
+        43200,
+        86400,
     }
     ZERO_MINUTES: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
     ONE_MINUTE: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
@@ -39,6 +43,10 @@ class SecurityMonitoringRuleEvaluationWindow(ModelSimple):
     THIRTY_MINUTES: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
     ONE_HOUR: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
     TWO_HOURS: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
+    THREE_HOURS: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
+    SIX_HOURS: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
+    TWELVE_HOURS: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
+    ONE_DAY: ClassVar["SecurityMonitoringRuleEvaluationWindow"]
 
     @cached_property
     def openapi_types(_):
@@ -55,3 +63,7 @@ def openapi_types(_):
 SecurityMonitoringRuleEvaluationWindow.THIRTY_MINUTES = SecurityMonitoringRuleEvaluationWindow(1800)
 SecurityMonitoringRuleEvaluationWindow.ONE_HOUR = SecurityMonitoringRuleEvaluationWindow(3600)
 SecurityMonitoringRuleEvaluationWindow.TWO_HOURS = SecurityMonitoringRuleEvaluationWindow(7200)
+SecurityMonitoringRuleEvaluationWindow.THREE_HOURS = SecurityMonitoringRuleEvaluationWindow(10800)
+SecurityMonitoringRuleEvaluationWindow.SIX_HOURS = SecurityMonitoringRuleEvaluationWindow(21600)
+SecurityMonitoringRuleEvaluationWindow.TWELVE_HOURS = SecurityMonitoringRuleEvaluationWindow(43200)
+SecurityMonitoringRuleEvaluationWindow.ONE_DAY = SecurityMonitoringRuleEvaluationWindow(86400)

src/datadog_api_client/v2/model/security_monitoring_rule_keep_alive.py

@@ -17,7 +17,7 @@ class SecurityMonitoringRuleKeepAlive(ModelSimple):
     Once a signal is generated, the signal will remain “open” if a case is matched at least once within
         this keep alive window. For third party detection method, this field is not used.
 
-    :param value: Must be one of [0, 60, 300, 600, 900, 1800, 3600, 7200, 10800, 21600].
+    :param value: Must be one of [0, 60, 300, 600, 900, 1800, 3600, 7200, 10800, 21600, 43200, 86400].
     :type value: int
     """
 
@@ -32,6 +32,8 @@ class SecurityMonitoringRuleKeepAlive(ModelSimple):
         7200,
         10800,
         21600,
+        43200,
+        86400,
     }
     ZERO_MINUTES: ClassVar["SecurityMonitoringRuleKeepAlive"]
     ONE_MINUTE: ClassVar["SecurityMonitoringRuleKeepAlive"]
@@ -43,6 +45,8 @@ class SecurityMonitoringRuleKeepAlive(ModelSimple):
     TWO_HOURS: ClassVar["SecurityMonitoringRuleKeepAlive"]
     THREE_HOURS: ClassVar["SecurityMonitoringRuleKeepAlive"]
     SIX_HOURS: ClassVar["SecurityMonitoringRuleKeepAlive"]
+    TWELVE_HOURS: ClassVar["SecurityMonitoringRuleKeepAlive"]
+    ONE_DAY: ClassVar["SecurityMonitoringRuleKeepAlive"]
 
     @cached_property
     def openapi_types(_):
@@ -61,3 +65,5 @@ def openapi_types(_):
 SecurityMonitoringRuleKeepAlive.TWO_HOURS = SecurityMonitoringRuleKeepAlive(7200)
 SecurityMonitoringRuleKeepAlive.THREE_HOURS = SecurityMonitoringRuleKeepAlive(10800)
 SecurityMonitoringRuleKeepAlive.SIX_HOURS = SecurityMonitoringRuleKeepAlive(21600)
+SecurityMonitoringRuleKeepAlive.TWELVE_HOURS = SecurityMonitoringRuleKeepAlive(43200)
+SecurityMonitoringRuleKeepAlive.ONE_DAY = SecurityMonitoringRuleKeepAlive(86400)