Skip to content

feat(secops): add get_stats aggregation tool with unit tests - #339

Merged
dandye merged 3 commits into
google:mainfrom
jllangley:secops__add-stats-aggregation-tool
Nov 10, 2026
Merged

dandye merged 3 commits into
google:mainfrom
jllangley:secops__add-stats-aggregation-tool

Conversation

@jllangley

@jllangley jllangley commented Nov 7, 2026 •

Copy link
Copy Markdown
Contributor

Supersedes and references #246.

Closes #336

@jllangley
jllangley requested a review from a team November 7, 2026 13:43
@jllangley
jllangley force-pushed the secops__add-stats-aggregation-tool branch from 363976d to d4f509b Compare November 10, 2026 00:33
jllangley and others added 2 commits November 9, 2026 18:33
Address review feedback for Optional annotations, lazy logging, legacy param removal, YARA-L test queries, and docs that match Chronicle column naming.

@dandye dandye left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for addressing all of the review items and re-signing the commits, @jllangley. Pushed a small maintainer merge commit (1179eb1) to resolve the conflict with main in server/secops/tests/test_secops_tools_unit.py, update the metadata.event_type test filter to EVENTTYPE_UNSPECIFIED for YARA-L 2.0 enum validation, and align the docstring Example 2 and time-bucket notes.

@dandye
dandye merged commit 407635a into google:main Nov 10, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[secops-mcp] Add get_stats tool for Chronicle YARA-L 2.0 UDM stats and aggregation queries

2 participants