Google Cloud Chronicle

aid: google-cloud-chronicle
name: Google Cloud Chronicle
description: >-
  Google Cloud Chronicle is a cloud-native security information and event management (SIEM) platform that enables
  enterprises to store, search, and analyze massive volumes of security telemetry data. Built on Google infrastructure,
  Chronicle provides sub-second search across petabytes of security data, threat detection using rules and intelligence,
  and investigation tools for security operations teams.
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
url: https://raw.githubusercontent.com/api-evangelist/google-cloud-chronicle/refs/heads/main/apis.yml
created: '2026-03-13'
modified: '2026-05-19'
specificationVersion: '0.19'
type: Index
tags:
  - Incident Response
  - Log Management
  - Security Analytics
  - Security Operations
  - SIEM
  - Threat Detection
apis:
  - name: Chronicle API
    description: >-
      The Chronicle API provides programmatic access to Chronicle's security analytics platform. Developers can use the
      API to ingest security telemetry, search across normalized security data using UDM (Unified Data Model), manage
      detection rules, investigate alerts, and retrieve threat intelligence. The API supports creating and managing
      detection rules, running retrohunts, and accessing curated threat detections.
    image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
    humanURL: https://cloud.google.com/chronicle/docs
    baseURL: https://chronicle.googleapis.com
    tags:
      - Detection Rules
      - Security Events
      - Threat Intelligence
      - UDM Search
    properties:
      - type: Documentation
        url: https://cloud.google.com/chronicle/docs/reference/rest
      - type: OpenAPI
        url: openapi/chronicle-api-openapi.yml
      - type: Authentication
        url: https://cloud.google.com/chronicle/docs/reference/rest#authentication
      - type: JSONSchema
        url: json-schema/google-cloud-chronicle-event-schema.json
common:
  - type: GitHubOrganization
    url: https://github.com/chronicle
  - type: LinkedIn
    url: https://www.linkedin.com/company/chroniclesec
  - type: Portal
    url: https://cloud.google.com/chronicle
  - type: GettingStarted
    url: https://cloud.google.com/chronicle/docs/get-started
  - type: Documentation
    url: https://cloud.google.com/chronicle/docs
  - type: Authentication
    url: https://cloud.google.com/chronicle/docs/reference/rest#authentication
  - type: Pricing
    url: https://cloud.google.com/chronicle/pricing
  - type: TermsOfService
    url: https://cloud.google.com/terms
  - type: PrivacyPolicy
    url: https://policies.google.com/privacy
  - type: StatusPage
    url: https://status.cloud.google.com
  - type: Support
    url: https://cloud.google.com/chronicle/docs/support
  - type: JSONLD
    url: json-ld/google-cloud-chronicle-context.jsonld
  - type: Integrations
    url: https://cloud.google.com/marketplace
integrations:
  - name: Become a Partner
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com