@pulumi/sumologic
Version:
A Pulumi package for creating and managing sumologic cloud resources.
214 lines (213 loc) • 7.65 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
* Provides a Sumologic CSE Log Mapping.
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as sumologic from "@pulumi/sumologic";
*
* const logMapping = new sumologic.CseLogMapping("log_mapping", {
* name: "New Log Mapping",
* productGuid: "003d35b3-3ba8-4e93-8776-e5810b4e243e",
* recordType: "Audit",
* enabled: true,
* relatesEntities: true,
* skippedValues: ["skipped"],
* fields: [{
* name: "action",
* value: "action",
* valueType: "constant",
* skippedValues: ["-"],
* defaultValue: "",
* format: "JSON",
* caseInsensitive: false,
* alternateValues: ["altValue"],
* timeZone: "UTC",
* splitDelimiter: ",",
* splitIndex: "0",
* fieldJoins: ["and"],
* joinDelimiter: "",
* formatParameters: ["param"],
* lookups: [{
* key: "tunnel-up",
* value: "true",
* }],
* }],
* structuredInputs: [{
* eventIdPattern: "vpn",
* logFormat: "JSON",
* product: "fortinate",
* vendor: "fortinate",
* }],
* });
* ```
*
* ## Import
*
* Log Mapping can be imported using the field id, e.g.:
*
* hcl
*
* ```sh
* $ pulumi import sumologic:index/cseLogMapping:CseLogMapping log_mapping id
* ```
*/
export declare class CseLogMapping extends pulumi.CustomResource {
/**
* Get an existing CseLogMapping resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CseLogMappingState, opts?: pulumi.CustomResourceOptions): CseLogMapping;
/**
* Returns true if the given object is an instance of CseLogMapping. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is CseLogMapping;
/**
* Enabled flag.
*/
readonly enabled: pulumi.Output<boolean>;
/**
* List of fields for the new log mapping. See fieldSchema for details.
*/
readonly fields: pulumi.Output<outputs.CseLogMappingField[]>;
/**
* The name of the log mapping.
*/
readonly name: pulumi.Output<string>;
/**
* The id of the parent log mapping.
*/
readonly parentId: pulumi.Output<string | undefined>;
/**
* Product GUID.
*/
readonly productGuid: pulumi.Output<string>;
/**
* The record type to be created. (possible values: Audit, AuditChange, AuditFile, AuditResourceAccess, Authentication, AuthenticationPrivilegeEscalation, Canary, Email, Endpoint, EndpointModuleLoad, EndpointProcess, Network, NetworkDHCP, NetworkDNS, NetworkFlow, NetworkHTTP, NetworkProxy, Notification, NotificationVulnerability)
*/
readonly recordType: pulumi.Output<string>;
/**
* Set to true to relate entities.
*/
readonly relatesEntities: pulumi.Output<boolean | undefined>;
/**
* List of skipped values.
*/
readonly skippedValues: pulumi.Output<string[] | undefined>;
/**
* List of structured inputs for the new log mapping. See structuredInputSchema for details.
*/
readonly structuredInputs: pulumi.Output<outputs.CseLogMappingStructuredInput[] | undefined>;
/**
* Unstructured fields for the new log mapping. See unstructuredFieldSchema for details.
*/
readonly unstructuredFields: pulumi.Output<outputs.CseLogMappingUnstructuredFields | undefined>;
/**
* Create a CseLogMapping resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: CseLogMappingArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering CseLogMapping resources.
*/
export interface CseLogMappingState {
/**
* Enabled flag.
*/
enabled?: pulumi.Input<boolean>;
/**
* List of fields for the new log mapping. See fieldSchema for details.
*/
fields?: pulumi.Input<pulumi.Input<inputs.CseLogMappingField>[]>;
/**
* The name of the log mapping.
*/
name?: pulumi.Input<string>;
/**
* The id of the parent log mapping.
*/
parentId?: pulumi.Input<string>;
/**
* Product GUID.
*/
productGuid?: pulumi.Input<string>;
/**
* The record type to be created. (possible values: Audit, AuditChange, AuditFile, AuditResourceAccess, Authentication, AuthenticationPrivilegeEscalation, Canary, Email, Endpoint, EndpointModuleLoad, EndpointProcess, Network, NetworkDHCP, NetworkDNS, NetworkFlow, NetworkHTTP, NetworkProxy, Notification, NotificationVulnerability)
*/
recordType?: pulumi.Input<string>;
/**
* Set to true to relate entities.
*/
relatesEntities?: pulumi.Input<boolean>;
/**
* List of skipped values.
*/
skippedValues?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of structured inputs for the new log mapping. See structuredInputSchema for details.
*/
structuredInputs?: pulumi.Input<pulumi.Input<inputs.CseLogMappingStructuredInput>[]>;
/**
* Unstructured fields for the new log mapping. See unstructuredFieldSchema for details.
*/
unstructuredFields?: pulumi.Input<inputs.CseLogMappingUnstructuredFields>;
}
/**
* The set of arguments for constructing a CseLogMapping resource.
*/
export interface CseLogMappingArgs {
/**
* Enabled flag.
*/
enabled: pulumi.Input<boolean>;
/**
* List of fields for the new log mapping. See fieldSchema for details.
*/
fields: pulumi.Input<pulumi.Input<inputs.CseLogMappingField>[]>;
/**
* The name of the log mapping.
*/
name?: pulumi.Input<string>;
/**
* The id of the parent log mapping.
*/
parentId?: pulumi.Input<string>;
/**
* Product GUID.
*/
productGuid: pulumi.Input<string>;
/**
* The record type to be created. (possible values: Audit, AuditChange, AuditFile, AuditResourceAccess, Authentication, AuthenticationPrivilegeEscalation, Canary, Email, Endpoint, EndpointModuleLoad, EndpointProcess, Network, NetworkDHCP, NetworkDNS, NetworkFlow, NetworkHTTP, NetworkProxy, Notification, NotificationVulnerability)
*/
recordType: pulumi.Input<string>;
/**
* Set to true to relate entities.
*/
relatesEntities?: pulumi.Input<boolean>;
/**
* List of skipped values.
*/
skippedValues?: pulumi.Input<pulumi.Input<string>[]>;
/**
* List of structured inputs for the new log mapping. See structuredInputSchema for details.
*/
structuredInputs?: pulumi.Input<pulumi.Input<inputs.CseLogMappingStructuredInput>[]>;
/**
* Unstructured fields for the new log mapping. See unstructuredFieldSchema for details.
*/
unstructuredFields?: pulumi.Input<inputs.CseLogMappingUnstructuredFields>;
}