Add support for Datadog Events as a data source for rules (#2421)

Co-authored-by: ci.datadog-api-spec <[email protected]>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-05-26 12:46:05.777827",
-            "spec_repo_commit": "a6954c1c"
+            "regenerated": "2025-05-27 10:37:41.709330",
+            "spec_repo_commit": "c75940cb"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-05-26 12:46:05.795920",
-            "spec_repo_commit": "a6954c1c"
+            "regenerated": "2025-05-27 10:37:41.725491",
+            "spec_repo_commit": "c75940cb"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -33669,14 +33669,15 @@ components:
       - TIMESTAMP_DESCENDING
     SecurityMonitoringStandardDataSource:
       default: logs
-      description: Source of events, either logs or audit trail.
+      description: Source of events, either logs, audit trail, or Datadog events.
       enum:
       - logs
       - audit
       - app_sec_spans
       - spans
       - security_runtime
       - network
+      - events
       example: logs
       type: string
       x-enum-varnames:
@@ -33686,6 +33687,7 @@ components:
       - SPANS
       - SECURITY_RUNTIME
       - NETWORK
+      - EVENTS
     SecurityMonitoringStandardRuleCreatePayload:
       description: Create a new rule.
       properties:

lib/datadog_api_client/v2/models/historical_job_query.rb

@@ -24,7 +24,7 @@ class HistoricalJobQuery
     # The aggregation type.
     attr_accessor :aggregation
 
-    # Source of events, either logs or audit trail.
+    # Source of events, either logs, audit trail, or Datadog events.
     attr_accessor :data_source
 
     # Field for which the cardinality is measured. Sent as an array.

lib/datadog_api_client/v2/models/security_monitoring_standard_data_source.rb

@@ -17,7 +17,7 @@
 require 'time'
 
 module DatadogAPIClient::V2
-  # Source of events, either logs or audit trail.
+  # Source of events, either logs, audit trail, or Datadog events.
   class SecurityMonitoringStandardDataSource
     include BaseEnumModel
 
@@ -27,5 +27,6 @@ class SecurityMonitoringStandardDataSource
     SPANS = "spans".freeze
     SECURITY_RUNTIME = "security_runtime".freeze
     NETWORK = "network".freeze
+    EVENTS = "events".freeze
   end
 end

lib/datadog_api_client/v2/models/security_monitoring_standard_rule_query.rb

@@ -24,7 +24,7 @@ class SecurityMonitoringStandardRuleQuery
     # The aggregation type.
     attr_accessor :aggregation
 
-    # Source of events, either logs or audit trail.
+    # Source of events, either logs, audit trail, or Datadog events.
     attr_accessor :data_source
 
     # Field for which the cardinality is measured. Sent as an array.