aws-sdk-cloudwatchlogs 1.133.0 → 1.135.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -116,6 +116,31 @@ module Aws::CloudWatchLogs
116
116
  include Aws::Structure
117
117
  end
118
118
 
119
+ # Contains an aggregate summary of log groups grouped by data source
120
+ # characteristics, including the count of log groups and their grouping
121
+ # identifiers.
122
+ #
123
+ # @!attribute [rw] log_group_count
124
+ # The number of log groups in this aggregate summary group.
125
+ # @return [Integer]
126
+ #
127
+ # @!attribute [rw] grouping_identifiers
128
+ # An array of key-value pairs that identify the data source
129
+ # characteristics used to group the log groups.
130
+ #
131
+ # The size and content of this array depends on the `groupBy`
132
+ # parameter specified in the request.
133
+ # @return [Array<Types::GroupingIdentifier>]
134
+ #
135
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/AggregateLogGroupSummary AWS API Documentation
136
+ #
137
+ class AggregateLogGroupSummary < Struct.new(
138
+ :log_group_count,
139
+ :grouping_identifiers)
140
+ SENSITIVE = []
141
+ include Aws::Structure
142
+ end
143
+
119
144
  # This structure represents one anomaly that has been found by a logs
120
145
  # anomaly detector.
121
146
  #
@@ -390,6 +415,38 @@ module Aws::CloudWatchLogs
390
415
  include Aws::Structure
391
416
  end
392
417
 
418
+ # @!attribute [rw] integration_arn
419
+ # The Amazon Resource Name (ARN) of the S3 Table Integration to
420
+ # associate the data source with.
421
+ # @return [String]
422
+ #
423
+ # @!attribute [rw] data_source
424
+ # The data source to associate with the S3 Table Integration. Contains
425
+ # the name and type of the data source.
426
+ # @return [Types::DataSource]
427
+ #
428
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/AssociateSourceToS3TableIntegrationRequest AWS API Documentation
429
+ #
430
+ class AssociateSourceToS3TableIntegrationRequest < Struct.new(
431
+ :integration_arn,
432
+ :data_source)
433
+ SENSITIVE = []
434
+ include Aws::Structure
435
+ end
436
+
437
+ # @!attribute [rw] identifier
438
+ # The unique identifier for the association between the data source
439
+ # and S3 Table Integration.
440
+ # @return [String]
441
+ #
442
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/AssociateSourceToS3TableIntegrationResponse AWS API Documentation
443
+ #
444
+ class AssociateSourceToS3TableIntegrationResponse < Struct.new(
445
+ :identifier)
446
+ SENSITIVE = []
447
+ include Aws::Structure
448
+ end
449
+
393
450
  # The `CSV` processor parses comma-separated values (CSV) from the log
394
451
  # events into columns.
395
452
  #
@@ -449,6 +506,52 @@ module Aws::CloudWatchLogs
449
506
  include Aws::Structure
450
507
  end
451
508
 
509
+ # @!attribute [rw] import_id
510
+ # The ID of the import task to cancel.
511
+ # @return [String]
512
+ #
513
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CancelImportTaskRequest AWS API Documentation
514
+ #
515
+ class CancelImportTaskRequest < Struct.new(
516
+ :import_id)
517
+ SENSITIVE = []
518
+ include Aws::Structure
519
+ end
520
+
521
+ # @!attribute [rw] import_id
522
+ # The ID of the cancelled import task.
523
+ # @return [String]
524
+ #
525
+ # @!attribute [rw] import_statistics
526
+ # Statistics about the import progress at the time of cancellation.
527
+ # @return [Types::ImportStatistics]
528
+ #
529
+ # @!attribute [rw] import_status
530
+ # The final status of the import task. This will be set to CANCELLED.
531
+ # @return [String]
532
+ #
533
+ # @!attribute [rw] creation_time
534
+ # The timestamp when the import task was created, expressed as the
535
+ # number of milliseconds after Jan 1, 1970 00:00:00 UTC.
536
+ # @return [Integer]
537
+ #
538
+ # @!attribute [rw] last_updated_time
539
+ # The timestamp when the import task was cancelled, expressed as the
540
+ # number of milliseconds after Jan 1, 1970 00:00:00 UTC.
541
+ # @return [Integer]
542
+ #
543
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CancelImportTaskResponse AWS API Documentation
544
+ #
545
+ class CancelImportTaskResponse < Struct.new(
546
+ :import_id,
547
+ :import_statistics,
548
+ :import_status,
549
+ :creation_time,
550
+ :last_updated_time)
551
+ SENSITIVE = []
552
+ include Aws::Structure
553
+ end
554
+
452
555
  # A structure containing information about the deafult settings and
453
556
  # available settings that you can use to configure a [delivery][1] or a
454
557
  # [delivery destination][2].
@@ -780,6 +883,56 @@ module Aws::CloudWatchLogs
780
883
  include Aws::Structure
781
884
  end
782
885
 
886
+ # @!attribute [rw] import_source_arn
887
+ # The ARN of the source to import from.
888
+ # @return [String]
889
+ #
890
+ # @!attribute [rw] import_role_arn
891
+ # The ARN of the IAM role that grants CloudWatch Logs permission to
892
+ # import from the CloudTrail Lake Event Data Store.
893
+ # @return [String]
894
+ #
895
+ # @!attribute [rw] import_filter
896
+ # Optional filters to constrain the import by CloudTrail event time.
897
+ # Times are specified in Unix timestamp milliseconds. The range of
898
+ # data being imported must be within the specified source's retention
899
+ # period.
900
+ # @return [Types::ImportFilter]
901
+ #
902
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CreateImportTaskRequest AWS API Documentation
903
+ #
904
+ class CreateImportTaskRequest < Struct.new(
905
+ :import_source_arn,
906
+ :import_role_arn,
907
+ :import_filter)
908
+ SENSITIVE = []
909
+ include Aws::Structure
910
+ end
911
+
912
+ # @!attribute [rw] import_id
913
+ # A unique identifier for the import task.
914
+ # @return [String]
915
+ #
916
+ # @!attribute [rw] import_destination_arn
917
+ # The ARN of the CloudWatch Logs log group created as the destination
918
+ # for the imported events.
919
+ # @return [String]
920
+ #
921
+ # @!attribute [rw] creation_time
922
+ # The timestamp when the import task was created, expressed as the
923
+ # number of milliseconds after Jan 1, 1970 00:00:00 UTC.
924
+ # @return [Integer]
925
+ #
926
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CreateImportTaskResponse AWS API Documentation
927
+ #
928
+ class CreateImportTaskResponse < Struct.new(
929
+ :import_id,
930
+ :import_destination_arn,
931
+ :creation_time)
932
+ SENSITIVE = []
933
+ include Aws::Structure
934
+ end
935
+
783
936
  # @!attribute [rw] log_group_arn_list
784
937
  # An array containing the ARN of the log group that this anomaly
785
938
  # detector will watch. You can specify only one log group ARN.
@@ -967,92 +1120,81 @@ module Aws::CloudWatchLogs
967
1120
  end
968
1121
 
969
1122
  # @!attribute [rw] name
970
- # A unique name for the scheduled query within the region for an AWS
971
- # account. The name can contain letters, numbers, underscores,
972
- # hyphens, forward slashes, periods, and hash symbols.
1123
+ # The name of the scheduled query. The name must be unique within your
1124
+ # account and region. Valid characters are alphanumeric characters,
1125
+ # hyphens, underscores, and periods. Length must be between 1 and 255
1126
+ # characters.
973
1127
  # @return [String]
974
1128
  #
975
1129
  # @!attribute [rw] description
976
1130
  # An optional description for the scheduled query to help identify its
977
- # purpose.
1131
+ # purpose and functionality.
978
1132
  # @return [String]
979
1133
  #
980
1134
  # @!attribute [rw] query_language
981
1135
  # The query language to use for the scheduled query. Valid values are
982
- # LogsQL (CloudWatch Logs Insights query language), PPL (OpenSearch
983
- # Service Piped Processing Language), and SQL (OpenSearch Service
984
- # Structured Query Language).
1136
+ # `LogsQL`, `PPL`, and `SQL`.
985
1137
  # @return [String]
986
1138
  #
987
1139
  # @!attribute [rw] query_string
988
- # The CloudWatch Logs Insights query string to execute. This is the
989
- # actual query that will be run against your log data on the specified
990
- # schedule.
1140
+ # The query string to execute. This is the same query syntax used in
1141
+ # CloudWatch Logs Insights. Maximum length is 10,000 characters.
991
1142
  # @return [String]
992
1143
  #
993
1144
  # @!attribute [rw] log_group_identifiers
994
- # The log group identifiers to query. You can specify log group names
995
- # or log group ARNs. If querying log groups in a source account from a
996
- # monitoring account, you must specify the ARN of the log group.
1145
+ # An array of log group names or ARNs to query. You can specify
1146
+ # between 1 and 50 log groups. Log groups can be identified by name or
1147
+ # full ARN.
997
1148
  # @return [Array<String>]
998
1149
  #
999
1150
  # @!attribute [rw] schedule_expression
1000
1151
  # A cron expression that defines when the scheduled query runs. The
1001
- # format is cron(fields) where fields consist of six space-separated
1002
- # values: minutes, hours, day\_of\_month, month, day\_of\_week, year.
1152
+ # expression uses standard cron syntax and supports minute-level
1153
+ # precision. Maximum length is 256 characters.
1003
1154
  # @return [String]
1004
1155
  #
1005
1156
  # @!attribute [rw] timezone
1006
- # The timezone in which the schedule expression is evaluated. If not
1007
- # provided, defaults to UTC.
1157
+ # The timezone for evaluating the schedule expression. This determines
1158
+ # when the scheduled query executes relative to the specified
1159
+ # timezone.
1008
1160
  # @return [String]
1009
1161
  #
1010
1162
  # @!attribute [rw] start_time_offset
1011
- # Time offset in seconds from the execution time for the start of the
1012
- # query time range. This defines the lookback period for the query
1013
- # (for example, 3600 for the last hour).
1163
+ # The time offset in seconds that defines the lookback period for the
1164
+ # query. This determines how far back in time the query searches from
1165
+ # the execution time.
1014
1166
  # @return [Integer]
1015
1167
  #
1016
1168
  # @!attribute [rw] destination_configuration
1017
- # Configuration for destinations where the query results will be
1018
- # delivered after successful execution. You can configure delivery to
1019
- # S3 buckets or EventBridge event buses.
1169
+ # Configuration for where to deliver query results. Currently supports
1170
+ # Amazon S3 destinations for storing query output.
1020
1171
  # @return [Types::DestinationConfiguration]
1021
1172
  #
1022
1173
  # @!attribute [rw] schedule_start_time
1023
- # The start time for the query schedule in Unix epoch time (seconds
1024
- # since January 1, 1970, 00:00:00 UTC). If not specified, the schedule
1025
- # starts immediately.
1174
+ # The start time for the scheduled query in Unix epoch format. The
1175
+ # query will not execute before this time.
1026
1176
  # @return [Integer]
1027
1177
  #
1028
1178
  # @!attribute [rw] schedule_end_time
1029
- # The end time for the query schedule in Unix epoch time (seconds
1030
- # since January 1, 1970, 00:00:00 UTC). If not specified, the schedule
1031
- # runs indefinitely.
1179
+ # The end time for the scheduled query in Unix epoch format. The query
1180
+ # will stop executing after this time.
1032
1181
  # @return [Integer]
1033
1182
  #
1034
1183
  # @!attribute [rw] execution_role_arn
1035
- # The Amazon Resource Name (ARN) of the IAM role that CloudWatch Logs
1036
- # will assume to execute the scheduled query and deliver results to
1037
- # the specified destinations.
1184
+ # The ARN of the IAM role that grants permissions to execute the query
1185
+ # and deliver results to the specified destination. The role must have
1186
+ # permissions to read from the specified log groups and write to the
1187
+ # destination.
1038
1188
  # @return [String]
1039
1189
  #
1040
1190
  # @!attribute [rw] state
1041
- # The initial state of the scheduled query. Valid values are ENABLED
1042
- # (the query will run according to its schedule) and DISABLED (the
1043
- # query is paused and will not run). If not provided, defaults to
1044
- # ENABLED.
1191
+ # The initial state of the scheduled query. Valid values are `ENABLED`
1192
+ # and `DISABLED`. Default is `ENABLED`.
1045
1193
  # @return [String]
1046
1194
  #
1047
1195
  # @!attribute [rw] tags
1048
- # An optional list of key-value pairs to associate with the resource.
1049
- #
1050
- # For more information about tagging, see [Tagging Amazon Web Services
1051
- # resources][1]
1052
- #
1053
- #
1054
- #
1055
- # [1]: https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html
1196
+ # Key-value pairs to associate with the scheduled query for resource
1197
+ # management and cost allocation.
1056
1198
  # @return [Hash<String,String>]
1057
1199
  #
1058
1200
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CreateScheduledQueryRequest AWS API Documentation
@@ -1077,11 +1219,11 @@ module Aws::CloudWatchLogs
1077
1219
  end
1078
1220
 
1079
1221
  # @!attribute [rw] scheduled_query_arn
1080
- # The Amazon Resource Name (ARN) of the created scheduled query.
1222
+ # The ARN of the created scheduled query.
1081
1223
  # @return [String]
1082
1224
  #
1083
1225
  # @!attribute [rw] state
1084
- # The current state of the scheduled query (ENABLED or DISABLED).
1226
+ # The current state of the scheduled query.
1085
1227
  # @return [String]
1086
1228
  #
1087
1229
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CreateScheduledQueryResponse AWS API Documentation
@@ -1110,6 +1252,47 @@ module Aws::CloudWatchLogs
1110
1252
  include Aws::Structure
1111
1253
  end
1112
1254
 
1255
+ # Represents a data source that categorizes logs by originating service
1256
+ # and log type, providing service-based organization complementing
1257
+ # traditional log groups.
1258
+ #
1259
+ # @!attribute [rw] name
1260
+ # The name of the data source.
1261
+ # @return [String]
1262
+ #
1263
+ # @!attribute [rw] type
1264
+ # The type of the data source.
1265
+ # @return [String]
1266
+ #
1267
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DataSource AWS API Documentation
1268
+ #
1269
+ class DataSource < Struct.new(
1270
+ :name,
1271
+ :type)
1272
+ SENSITIVE = []
1273
+ include Aws::Structure
1274
+ end
1275
+
1276
+ # Filter criteria for data sources, used to specify which data sources
1277
+ # to include in operations based on name and type.
1278
+ #
1279
+ # @!attribute [rw] name
1280
+ # The name pattern to filter data sources by.
1281
+ # @return [String]
1282
+ #
1283
+ # @!attribute [rw] type
1284
+ # The type pattern to filter data sources by.
1285
+ # @return [String]
1286
+ #
1287
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DataSourceFilter AWS API Documentation
1288
+ #
1289
+ class DataSourceFilter < Struct.new(
1290
+ :name,
1291
+ :type)
1292
+ SENSITIVE = []
1293
+ include Aws::Structure
1294
+ end
1295
+
1113
1296
  # This processor converts a datetime string into a format that you
1114
1297
  # specify.
1115
1298
  #
@@ -1472,7 +1655,7 @@ module Aws::CloudWatchLogs
1472
1655
  end
1473
1656
 
1474
1657
  # @!attribute [rw] identifier
1475
- # The name or ARN of the scheduled query to delete.
1658
+ # The ARN or name of the scheduled query to delete.
1476
1659
  # @return [String]
1477
1660
  #
1478
1661
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DeleteScheduledQueryRequest AWS API Documentation
@@ -2134,6 +2317,116 @@ module Aws::CloudWatchLogs
2134
2317
  include Aws::Structure
2135
2318
  end
2136
2319
 
2320
+ # @!attribute [rw] import_id
2321
+ # The ID of the import task to get batch information for.
2322
+ # @return [String]
2323
+ #
2324
+ # @!attribute [rw] batch_import_status
2325
+ # Optional filter to list import batches by their status. Accepts
2326
+ # multiple status values: IN\_PROGRESS, CANCELLED, COMPLETED and
2327
+ # FAILED.
2328
+ # @return [Array<String>]
2329
+ #
2330
+ # @!attribute [rw] limit
2331
+ # The maximum number of import batches to return in the response.
2332
+ # Default: 10
2333
+ # @return [Integer]
2334
+ #
2335
+ # @!attribute [rw] next_token
2336
+ # The pagination token for the next set of results.
2337
+ # @return [String]
2338
+ #
2339
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DescribeImportTaskBatchesRequest AWS API Documentation
2340
+ #
2341
+ class DescribeImportTaskBatchesRequest < Struct.new(
2342
+ :import_id,
2343
+ :batch_import_status,
2344
+ :limit,
2345
+ :next_token)
2346
+ SENSITIVE = []
2347
+ include Aws::Structure
2348
+ end
2349
+
2350
+ # @!attribute [rw] import_source_arn
2351
+ # The ARN of the source being imported from.
2352
+ # @return [String]
2353
+ #
2354
+ # @!attribute [rw] import_id
2355
+ # The ID of the import task.
2356
+ # @return [String]
2357
+ #
2358
+ # @!attribute [rw] import_batches
2359
+ # The list of import batches that match the request filters.
2360
+ # @return [Array<Types::ImportBatch>]
2361
+ #
2362
+ # @!attribute [rw] next_token
2363
+ # The token to use when requesting the next set of results. Not
2364
+ # present if there are no additional results to retrieve.
2365
+ # @return [String]
2366
+ #
2367
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DescribeImportTaskBatchesResponse AWS API Documentation
2368
+ #
2369
+ class DescribeImportTaskBatchesResponse < Struct.new(
2370
+ :import_source_arn,
2371
+ :import_id,
2372
+ :import_batches,
2373
+ :next_token)
2374
+ SENSITIVE = []
2375
+ include Aws::Structure
2376
+ end
2377
+
2378
+ # @!attribute [rw] import_id
2379
+ # Optional filter to describe a specific import task by its ID.
2380
+ # @return [String]
2381
+ #
2382
+ # @!attribute [rw] import_status
2383
+ # Optional filter to list imports by their status. Valid values are
2384
+ # IN\_PROGRESS, CANCELLED, COMPLETED and FAILED.
2385
+ # @return [String]
2386
+ #
2387
+ # @!attribute [rw] import_source_arn
2388
+ # Optional filter to list imports from a specific source
2389
+ # @return [String]
2390
+ #
2391
+ # @!attribute [rw] limit
2392
+ # The maximum number of import tasks to return in the response.
2393
+ # Default: 50
2394
+ # @return [Integer]
2395
+ #
2396
+ # @!attribute [rw] next_token
2397
+ # The pagination token for the next set of results.
2398
+ # @return [String]
2399
+ #
2400
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DescribeImportTasksRequest AWS API Documentation
2401
+ #
2402
+ class DescribeImportTasksRequest < Struct.new(
2403
+ :import_id,
2404
+ :import_status,
2405
+ :import_source_arn,
2406
+ :limit,
2407
+ :next_token)
2408
+ SENSITIVE = []
2409
+ include Aws::Structure
2410
+ end
2411
+
2412
+ # @!attribute [rw] imports
2413
+ # The list of import tasks that match the request filters.
2414
+ # @return [Array<Types::Import>]
2415
+ #
2416
+ # @!attribute [rw] next_token
2417
+ # The token to use when requesting the next set of results. Not
2418
+ # present if there are no additional results to retrieve.
2419
+ # @return [String]
2420
+ #
2421
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DescribeImportTasksResponse AWS API Documentation
2422
+ #
2423
+ class DescribeImportTasksResponse < Struct.new(
2424
+ :imports,
2425
+ :next_token)
2426
+ SENSITIVE = []
2427
+ include Aws::Structure
2428
+ end
2429
+
2137
2430
  # @!attribute [rw] log_group_identifiers
2138
2431
  # An array containing the name or ARN of the log group that you want
2139
2432
  # to retrieve field index policies for.
@@ -2703,11 +2996,11 @@ module Aws::CloudWatchLogs
2703
2996
  include Aws::Structure
2704
2997
  end
2705
2998
 
2706
- # Configuration for destinations where scheduled query results are
2707
- # delivered, such as S3 buckets or EventBridge event buses.
2999
+ # Configuration for where to deliver scheduled query results. Specifies
3000
+ # the destination type and associated settings for result delivery.
2708
3001
  #
2709
3002
  # @!attribute [rw] s3_configuration
2710
- # Configuration for delivering query results to an Amazon S3 bucket.
3003
+ # Configuration for delivering query results to Amazon S3.
2711
3004
  # @return [Types::S3Configuration]
2712
3005
  #
2713
3006
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DestinationConfiguration AWS API Documentation
@@ -2764,6 +3057,31 @@ module Aws::CloudWatchLogs
2764
3057
  include Aws::Structure
2765
3058
  end
2766
3059
 
3060
+ # @!attribute [rw] identifier
3061
+ # The unique identifier of the association to remove between the data
3062
+ # source and S3 Table Integration.
3063
+ # @return [String]
3064
+ #
3065
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DisassociateSourceFromS3TableIntegrationRequest AWS API Documentation
3066
+ #
3067
+ class DisassociateSourceFromS3TableIntegrationRequest < Struct.new(
3068
+ :identifier)
3069
+ SENSITIVE = []
3070
+ include Aws::Structure
3071
+ end
3072
+
3073
+ # @!attribute [rw] identifier
3074
+ # The unique identifier of the association that was removed.
3075
+ # @return [String]
3076
+ #
3077
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DisassociateSourceFromS3TableIntegrationResponse AWS API Documentation
3078
+ #
3079
+ class DisassociateSourceFromS3TableIntegrationResponse < Struct.new(
3080
+ :identifier)
3081
+ SENSITIVE = []
3082
+ include Aws::Structure
3083
+ end
3084
+
2767
3085
  # The entity associated with the log events in a `PutLogEvents` call.
2768
3086
  #
2769
3087
  # @!attribute [rw] key_attributes
@@ -2930,6 +3248,12 @@ module Aws::CloudWatchLogs
2930
3248
  # field index.
2931
3249
  # @return [Integer]
2932
3250
  #
3251
+ # @!attribute [rw] type
3252
+ # The type of index. Specify `FACET` for facet-based indexing or
3253
+ # `FIELD_INDEX` for field-based indexing. This determines how the
3254
+ # field is indexed and can be queried.
3255
+ # @return [String]
3256
+ #
2933
3257
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/FieldIndex AWS API Documentation
2934
3258
  #
2935
3259
  class FieldIndex < Struct.new(
@@ -2937,7 +3261,8 @@ module Aws::CloudWatchLogs
2937
3261
  :field_index_name,
2938
3262
  :last_scan_time,
2939
3263
  :first_event_time,
2940
- :last_event_time)
3264
+ :last_event_time,
3265
+ :type)
2941
3266
  SENSITIVE = []
2942
3267
  include Aws::Structure
2943
3268
  end
@@ -3511,6 +3836,36 @@ module Aws::CloudWatchLogs
3511
3836
  include Aws::Structure
3512
3837
  end
3513
3838
 
3839
+ # @!attribute [rw] data_source_name
3840
+ # The name of the data source to retrieve log fields for.
3841
+ # @return [String]
3842
+ #
3843
+ # @!attribute [rw] data_source_type
3844
+ # The type of the data source to retrieve log fields for.
3845
+ # @return [String]
3846
+ #
3847
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GetLogFieldsRequest AWS API Documentation
3848
+ #
3849
+ class GetLogFieldsRequest < Struct.new(
3850
+ :data_source_name,
3851
+ :data_source_type)
3852
+ SENSITIVE = []
3853
+ include Aws::Structure
3854
+ end
3855
+
3856
+ # @!attribute [rw] log_fields
3857
+ # The list of log fields for the specified data source, including
3858
+ # field names and their data types.
3859
+ # @return [Array<Types::LogFieldsListItem>]
3860
+ #
3861
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GetLogFieldsResponse AWS API Documentation
3862
+ #
3863
+ class GetLogFieldsResponse < Struct.new(
3864
+ :log_fields)
3865
+ SENSITIVE = []
3866
+ include Aws::Structure
3867
+ end
3868
+
3514
3869
  # @!attribute [rw] log_group_name
3515
3870
  # The name of the log group to search.
3516
3871
  #
@@ -3714,24 +4069,25 @@ module Aws::CloudWatchLogs
3714
4069
  end
3715
4070
 
3716
4071
  # @!attribute [rw] identifier
3717
- # The name or ARN of the scheduled query to retrieve history for.
4072
+ # The ARN or name of the scheduled query to retrieve history for.
3718
4073
  # @return [String]
3719
4074
  #
3720
4075
  # @!attribute [rw] start_time
3721
- # The start time for the history retrieval window in Unix epoch time.
4076
+ # The start time for the history query in Unix epoch format.
3722
4077
  # @return [Integer]
3723
4078
  #
3724
4079
  # @!attribute [rw] end_time
3725
- # The end time for the history retrieval window in Unix epoch time.
4080
+ # The end time for the history query in Unix epoch format.
3726
4081
  # @return [Integer]
3727
4082
  #
3728
4083
  # @!attribute [rw] execution_statuses
3729
- # Filter results by execution status (Running, Complete, Failed,
3730
- # Timeout, or InvalidQuery).
4084
+ # An array of execution statuses to filter the history results. Only
4085
+ # executions with the specified statuses are returned.
3731
4086
  # @return [Array<String>]
3732
4087
  #
3733
4088
  # @!attribute [rw] max_results
3734
- # The maximum number of history records to return in a single call.
4089
+ # The maximum number of history records to return. Valid range is 1 to
4090
+ # 1000.
3735
4091
  # @return [Integer]
3736
4092
  #
3737
4093
  # @!attribute [rw] next_token
@@ -3761,7 +4117,7 @@ module Aws::CloudWatchLogs
3761
4117
  # @return [String]
3762
4118
  #
3763
4119
  # @!attribute [rw] trigger_history
3764
- # The list of execution history records for the scheduled query.
4120
+ # An array of execution history records for the scheduled query.
3765
4121
  # @return [Array<Types::TriggerHistoryRecord>]
3766
4122
  #
3767
4123
  # @!attribute [rw] next_token
@@ -3781,7 +4137,7 @@ module Aws::CloudWatchLogs
3781
4137
  end
3782
4138
 
3783
4139
  # @!attribute [rw] identifier
3784
- # The name or ARN of the scheduled query to retrieve.
4140
+ # The ARN or name of the scheduled query to retrieve.
3785
4141
  # @return [String]
3786
4142
  #
3787
4143
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GetScheduledQueryRequest AWS API Documentation
@@ -3793,7 +4149,7 @@ module Aws::CloudWatchLogs
3793
4149
  end
3794
4150
 
3795
4151
  # @!attribute [rw] scheduled_query_arn
3796
- # The Amazon Resource Name (ARN) of the scheduled query.
4152
+ # The ARN of the scheduled query.
3797
4153
  # @return [String]
3798
4154
  #
3799
4155
  # @!attribute [rw] name
@@ -3805,16 +4161,15 @@ module Aws::CloudWatchLogs
3805
4161
  # @return [String]
3806
4162
  #
3807
4163
  # @!attribute [rw] query_language
3808
- # The query language used by the scheduled query (LogsQL, PPL, or
3809
- # SQL).
4164
+ # The query language used by the scheduled query.
3810
4165
  # @return [String]
3811
4166
  #
3812
4167
  # @!attribute [rw] query_string
3813
- # The CloudWatch Logs Insights query string being executed.
4168
+ # The query string executed by the scheduled query.
3814
4169
  # @return [String]
3815
4170
  #
3816
4171
  # @!attribute [rw] log_group_identifiers
3817
- # The log group identifiers being queried by the scheduled query.
4172
+ # The log groups queried by the scheduled query.
3818
4173
  # @return [Array<String>]
3819
4174
  #
3820
4175
  # @!attribute [rw] schedule_expression
@@ -3822,52 +4177,49 @@ module Aws::CloudWatchLogs
3822
4177
  # @return [String]
3823
4178
  #
3824
4179
  # @!attribute [rw] timezone
3825
- # The timezone in which the schedule expression is evaluated.
4180
+ # The timezone used for evaluating the schedule expression.
3826
4181
  # @return [String]
3827
4182
  #
3828
4183
  # @!attribute [rw] start_time_offset
3829
- # Time offset in seconds from the execution time for the start of the
3830
- # query time range.
4184
+ # The time offset in seconds that defines the lookback period for the
4185
+ # query.
3831
4186
  # @return [Integer]
3832
4187
  #
3833
4188
  # @!attribute [rw] destination_configuration
3834
- # Configuration for destinations where the query results are
3835
- # delivered.
4189
+ # Configuration for where query results are delivered.
3836
4190
  # @return [Types::DestinationConfiguration]
3837
4191
  #
3838
4192
  # @!attribute [rw] state
3839
- # The current state of the scheduled query (ENABLED or DISABLED).
4193
+ # The current state of the scheduled query.
3840
4194
  # @return [String]
3841
4195
  #
3842
4196
  # @!attribute [rw] last_triggered_time
3843
- # The time when the scheduled query was last executed, in Unix epoch
3844
- # time.
4197
+ # The timestamp when the scheduled query was last executed.
3845
4198
  # @return [Integer]
3846
4199
  #
3847
4200
  # @!attribute [rw] last_execution_status
3848
- # The status of the last executed query (Running, Complete, Failed,
3849
- # Timeout, or InvalidQuery).
4201
+ # The status of the most recent execution of the scheduled query.
3850
4202
  # @return [String]
3851
4203
  #
3852
4204
  # @!attribute [rw] schedule_start_time
3853
- # The start time for the query schedule in Unix epoch time.
4205
+ # The start time for the scheduled query in Unix epoch format.
3854
4206
  # @return [Integer]
3855
4207
  #
3856
4208
  # @!attribute [rw] schedule_end_time
3857
- # The end time for the query schedule in Unix epoch time.
4209
+ # The end time for the scheduled query in Unix epoch format.
3858
4210
  # @return [Integer]
3859
4211
  #
3860
4212
  # @!attribute [rw] execution_role_arn
3861
- # The ARN of the IAM role used to execute the scheduled query.
4213
+ # The ARN of the IAM role used to execute the query and deliver
4214
+ # results.
3862
4215
  # @return [String]
3863
4216
  #
3864
4217
  # @!attribute [rw] creation_time
3865
- # The time when the scheduled query was created, in Unix epoch time.
4218
+ # The timestamp when the scheduled query was created.
3866
4219
  # @return [Integer]
3867
4220
  #
3868
4221
  # @!attribute [rw] last_updated_time
3869
- # The time when the scheduled query was last updated, in Unix epoch
3870
- # time.
4222
+ # The timestamp when the scheduled query was last updated.
3871
4223
  # @return [Integer]
3872
4224
  #
3873
4225
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GetScheduledQueryResponse AWS API Documentation
@@ -3975,6 +4327,150 @@ module Aws::CloudWatchLogs
3975
4327
  include Aws::Structure
3976
4328
  end
3977
4329
 
4330
+ # A key-value pair that identifies how log groups are grouped in
4331
+ # aggregate summaries.
4332
+ #
4333
+ # @!attribute [rw] key
4334
+ # The key that identifies the grouping characteristic. The format of
4335
+ # the key uses dot notation. Examples are, `dataSource.Name`,
4336
+ # `dataSource.Type`, and `dataSource.Format`.
4337
+ # @return [String]
4338
+ #
4339
+ # @!attribute [rw] value
4340
+ # The value associated with the grouping characteristic. Examples are
4341
+ # `amazon_vpc`, `flow`, and `OCSF`.
4342
+ # @return [String]
4343
+ #
4344
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GroupingIdentifier AWS API Documentation
4345
+ #
4346
+ class GroupingIdentifier < Struct.new(
4347
+ :key,
4348
+ :value)
4349
+ SENSITIVE = []
4350
+ include Aws::Structure
4351
+ end
4352
+
4353
+ # An import job to move data from CloudTrail Event Data Store to
4354
+ # CloudWatch.
4355
+ #
4356
+ # @!attribute [rw] import_id
4357
+ # The unique identifier of the import task.
4358
+ # @return [String]
4359
+ #
4360
+ # @!attribute [rw] import_source_arn
4361
+ # The ARN of the CloudTrail Lake Event Data Store being imported from.
4362
+ # @return [String]
4363
+ #
4364
+ # @!attribute [rw] import_status
4365
+ # The current status of the import task. Valid values are
4366
+ # IN\_PROGRESS, CANCELLED, COMPLETED and FAILED.
4367
+ # @return [String]
4368
+ #
4369
+ # @!attribute [rw] import_destination_arn
4370
+ # The ARN of the managed CloudWatch Logs log group where the events
4371
+ # are being imported to.
4372
+ # @return [String]
4373
+ #
4374
+ # @!attribute [rw] import_statistics
4375
+ # Statistics about the import progress
4376
+ # @return [Types::ImportStatistics]
4377
+ #
4378
+ # @!attribute [rw] import_filter
4379
+ # The filter criteria used for this import task.
4380
+ # @return [Types::ImportFilter]
4381
+ #
4382
+ # @!attribute [rw] creation_time
4383
+ # The timestamp when the import task was created, expressed as the
4384
+ # number of milliseconds after Jan 1, 1970 00:00:00 UTC.
4385
+ # @return [Integer]
4386
+ #
4387
+ # @!attribute [rw] last_updated_time
4388
+ # The timestamp when the import task was last updated, expressed as
4389
+ # the number of milliseconds after Jan 1, 1970 00:00:00 UTC.
4390
+ # @return [Integer]
4391
+ #
4392
+ # @!attribute [rw] error_message
4393
+ # Error message related to any failed imports
4394
+ # @return [String]
4395
+ #
4396
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/Import AWS API Documentation
4397
+ #
4398
+ class Import < Struct.new(
4399
+ :import_id,
4400
+ :import_source_arn,
4401
+ :import_status,
4402
+ :import_destination_arn,
4403
+ :import_statistics,
4404
+ :import_filter,
4405
+ :creation_time,
4406
+ :last_updated_time,
4407
+ :error_message)
4408
+ SENSITIVE = []
4409
+ include Aws::Structure
4410
+ end
4411
+
4412
+ # A collection of events being imported to CloudWatch
4413
+ #
4414
+ # @!attribute [rw] batch_id
4415
+ # The unique identifier of the import batch.
4416
+ # @return [String]
4417
+ #
4418
+ # @!attribute [rw] status
4419
+ # The current status of the import batch. Valid values are
4420
+ # IN\_PROGRESS, CANCELLED, COMPLETED and FAILED.
4421
+ # @return [String]
4422
+ #
4423
+ # @!attribute [rw] error_message
4424
+ # The error message if the batch failed to import. Only present when
4425
+ # status is FAILED.
4426
+ # @return [String]
4427
+ #
4428
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ImportBatch AWS API Documentation
4429
+ #
4430
+ class ImportBatch < Struct.new(
4431
+ :batch_id,
4432
+ :status,
4433
+ :error_message)
4434
+ SENSITIVE = []
4435
+ include Aws::Structure
4436
+ end
4437
+
4438
+ # The filter criteria used for import tasks
4439
+ #
4440
+ # @!attribute [rw] start_event_time
4441
+ # The start of the time range for events to import, expressed as the
4442
+ # number of milliseconds after Jan 1, 1970 00:00:00 UTC.
4443
+ # @return [Integer]
4444
+ #
4445
+ # @!attribute [rw] end_event_time
4446
+ # The end of the time range for events to import, expressed as the
4447
+ # number of milliseconds after Jan 1, 1970 00:00:00 UTC.
4448
+ # @return [Integer]
4449
+ #
4450
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ImportFilter AWS API Documentation
4451
+ #
4452
+ class ImportFilter < Struct.new(
4453
+ :start_event_time,
4454
+ :end_event_time)
4455
+ SENSITIVE = []
4456
+ include Aws::Structure
4457
+ end
4458
+
4459
+ # Statistics about the import progress
4460
+ #
4461
+ # @!attribute [rw] bytes_imported
4462
+ # The total number of bytes that have been imported to the managed log
4463
+ # group.
4464
+ # @return [Integer]
4465
+ #
4466
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ImportStatistics AWS API Documentation
4467
+ #
4468
+ class ImportStatistics < Struct.new(
4469
+ :bytes_imported)
4470
+ SENSITIVE = []
4471
+ include Aws::Structure
4472
+ end
4473
+
3978
4474
  # This structure contains information about one field index policy in
3979
4475
  # this account.
3980
4476
  #
@@ -4097,7 +4593,8 @@ module Aws::CloudWatchLogs
4097
4593
  end
4098
4594
 
4099
4595
  # An internal server error occurred while processing the request. This
4100
- # is typically a temporary issue and the request can be retried.
4596
+ # exception is returned when the service encounters an unexpected
4597
+ # condition that prevents it from fulfilling the request.
4101
4598
  #
4102
4599
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/InternalServerException AWS API Documentation
4103
4600
  #
@@ -4156,6 +4653,104 @@ module Aws::CloudWatchLogs
4156
4653
  #
4157
4654
  class LimitExceededException < Aws::EmptyStructure; end
4158
4655
 
4656
+ # @!attribute [rw] account_identifiers
4657
+ # When `includeLinkedAccounts` is set to `true`, use this parameter to
4658
+ # specify the list of accounts to search. You can specify as many as
4659
+ # 20 account IDs in the array.
4660
+ # @return [Array<String>]
4661
+ #
4662
+ # @!attribute [rw] include_linked_accounts
4663
+ # If you are using a monitoring account, set this to `true` to have
4664
+ # the operation return log groups in the accounts listed in
4665
+ # `accountIdentifiers`.
4666
+ #
4667
+ # If this parameter is set to `true` and `accountIdentifiers` contains
4668
+ # a null value, the operation returns all log groups in the monitoring
4669
+ # account and all log groups in all source accounts that are linked to
4670
+ # the monitoring account.
4671
+ #
4672
+ # The default for this parameter is `false`.
4673
+ # @return [Boolean]
4674
+ #
4675
+ # @!attribute [rw] log_group_class
4676
+ # Filters the results by log group class to include only log groups of
4677
+ # the specified class.
4678
+ # @return [String]
4679
+ #
4680
+ # @!attribute [rw] log_group_name_pattern
4681
+ # Use this parameter to limit the returned log groups to only those
4682
+ # with names that match the pattern that you specify. This parameter
4683
+ # is a regular expression that can match prefixes and substrings, and
4684
+ # supports wildcard matching and matching multiple patterns, as in the
4685
+ # following examples.
4686
+ #
4687
+ # * Use `^` to match log group names by prefix.
4688
+ #
4689
+ # * For a substring match, specify the string to match. All matches
4690
+ # are case sensitive
4691
+ #
4692
+ # * To match multiple patterns, separate them with a `|` as in the
4693
+ # example `^/aws/lambda|discovery`
4694
+ #
4695
+ # You can specify as many as five different regular expression
4696
+ # patterns in this field, each of which must be between 3 and 24
4697
+ # characters. You can include the `^` symbol as many as five times,
4698
+ # and include the `|` symbol as many as four times.
4699
+ # @return [String]
4700
+ #
4701
+ # @!attribute [rw] data_sources
4702
+ # Filters the results by data source characteristics to include only
4703
+ # log groups associated with the specified data sources.
4704
+ # @return [Array<Types::DataSourceFilter>]
4705
+ #
4706
+ # @!attribute [rw] group_by
4707
+ # Specifies how to group the log groups in the summary.
4708
+ # @return [String]
4709
+ #
4710
+ # @!attribute [rw] next_token
4711
+ # The token for the next set of items to return. The token expires
4712
+ # after 24 hours.
4713
+ # @return [String]
4714
+ #
4715
+ # @!attribute [rw] limit
4716
+ # The maximum number of aggregated summaries to return. If you omit
4717
+ # this parameter, the default is up to 50 aggregated summaries.
4718
+ # @return [Integer]
4719
+ #
4720
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ListAggregateLogGroupSummariesRequest AWS API Documentation
4721
+ #
4722
+ class ListAggregateLogGroupSummariesRequest < Struct.new(
4723
+ :account_identifiers,
4724
+ :include_linked_accounts,
4725
+ :log_group_class,
4726
+ :log_group_name_pattern,
4727
+ :data_sources,
4728
+ :group_by,
4729
+ :next_token,
4730
+ :limit)
4731
+ SENSITIVE = []
4732
+ include Aws::Structure
4733
+ end
4734
+
4735
+ # @!attribute [rw] aggregate_log_group_summaries
4736
+ # The list of aggregate log group summaries grouped by the specified
4737
+ # data source characteristics.
4738
+ # @return [Array<Types::AggregateLogGroupSummary>]
4739
+ #
4740
+ # @!attribute [rw] next_token
4741
+ # The token for the next set of items to return. The token expires
4742
+ # after 24 hours.
4743
+ # @return [String]
4744
+ #
4745
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ListAggregateLogGroupSummariesResponse AWS API Documentation
4746
+ #
4747
+ class ListAggregateLogGroupSummariesResponse < Struct.new(
4748
+ :aggregate_log_group_summaries,
4749
+ :next_token)
4750
+ SENSITIVE = []
4751
+ include Aws::Structure
4752
+ end
4753
+
4159
4754
  # @!attribute [rw] anomaly_detector_arn
4160
4755
  # Use this to optionally limit the results to only the anomalies found
4161
4756
  # by a certain anomaly detector.
@@ -4392,6 +4987,21 @@ module Aws::CloudWatchLogs
4392
4987
  # parameter, the default is up to 50 log groups.
4393
4988
  # @return [Integer]
4394
4989
  #
4990
+ # @!attribute [rw] data_sources
4991
+ # An array of data source filters to filter log groups by their
4992
+ # associated data sources. You can filter by data source name, type,
4993
+ # or both. Multiple filters within the same dimension are combined
4994
+ # with OR logic, while filters across different dimensions are
4995
+ # combined with AND logic.
4996
+ # @return [Array<Types::DataSourceFilter>]
4997
+ #
4998
+ # @!attribute [rw] field_index_names
4999
+ # An array of field index names to filter log groups that have
5000
+ # specific field indexes. Only log groups containing all specified
5001
+ # field indexes are returned. You can specify 1 to 20 field index
5002
+ # names, each with 1 to 512 characters.
5003
+ # @return [Array<String>]
5004
+ #
4395
5005
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ListLogGroupsRequest AWS API Documentation
4396
5006
  #
4397
5007
  class ListLogGroupsRequest < Struct.new(
@@ -4400,7 +5010,9 @@ module Aws::CloudWatchLogs
4400
5010
  :include_linked_accounts,
4401
5011
  :account_identifiers,
4402
5012
  :next_token,
4403
- :limit)
5013
+ :limit,
5014
+ :data_sources,
5015
+ :field_index_names)
4404
5016
  SENSITIVE = []
4405
5017
  include Aws::Structure
4406
5018
  end
@@ -4425,7 +5037,8 @@ module Aws::CloudWatchLogs
4425
5037
  end
4426
5038
 
4427
5039
  # @!attribute [rw] max_results
4428
- # The maximum number of scheduled queries to return in a single call.
5040
+ # The maximum number of scheduled queries to return. Valid range is 1
5041
+ # to 1000.
4429
5042
  # @return [Integer]
4430
5043
  #
4431
5044
  # @!attribute [rw] next_token
@@ -4434,8 +5047,8 @@ module Aws::CloudWatchLogs
4434
5047
  # @return [String]
4435
5048
  #
4436
5049
  # @!attribute [rw] state
4437
- # Filter results by the state of scheduled queries (ENABLED or
4438
- # DISABLED).
5050
+ # Filter scheduled queries by state. Valid values are `ENABLED` and
5051
+ # `DISABLED`. If not specified, all scheduled queries are returned.
4439
5052
  # @return [String]
4440
5053
  #
4441
5054
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ListScheduledQueriesRequest AWS API Documentation
@@ -4454,7 +5067,7 @@ module Aws::CloudWatchLogs
4454
5067
  # @return [String]
4455
5068
  #
4456
5069
  # @!attribute [rw] scheduled_queries
4457
- # The list of scheduled queries with summary information.
5070
+ # An array of scheduled query summary information.
4458
5071
  # @return [Array<Types::ScheduledQuerySummary>]
4459
5072
  #
4460
5073
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ListScheduledQueriesResponse AWS API Documentation
@@ -4466,6 +5079,50 @@ module Aws::CloudWatchLogs
4466
5079
  include Aws::Structure
4467
5080
  end
4468
5081
 
5082
+ # @!attribute [rw] integration_arn
5083
+ # The Amazon Resource Name (ARN) of the S3 Table Integration to list
5084
+ # associations for.
5085
+ # @return [String]
5086
+ #
5087
+ # @!attribute [rw] max_results
5088
+ # The maximum number of associations to return in a single call. Valid
5089
+ # range is 1 to 100.
5090
+ # @return [Integer]
5091
+ #
5092
+ # @!attribute [rw] next_token
5093
+ # The token for the next set of items to return. The token expires
5094
+ # after 24 hours.
5095
+ # @return [String]
5096
+ #
5097
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ListSourcesForS3TableIntegrationRequest AWS API Documentation
5098
+ #
5099
+ class ListSourcesForS3TableIntegrationRequest < Struct.new(
5100
+ :integration_arn,
5101
+ :max_results,
5102
+ :next_token)
5103
+ SENSITIVE = []
5104
+ include Aws::Structure
5105
+ end
5106
+
5107
+ # @!attribute [rw] sources
5108
+ # The list of data source associations for the specified S3 Table
5109
+ # Integration.
5110
+ # @return [Array<Types::S3TableIntegrationSource>]
5111
+ #
5112
+ # @!attribute [rw] next_token
5113
+ # The token for the next set of items to return. The token expires
5114
+ # after 24 hours.
5115
+ # @return [String]
5116
+ #
5117
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ListSourcesForS3TableIntegrationResponse AWS API Documentation
5118
+ #
5119
+ class ListSourcesForS3TableIntegrationResponse < Struct.new(
5120
+ :sources,
5121
+ :next_token)
5122
+ SENSITIVE = []
5123
+ include Aws::Structure
5124
+ end
5125
+
4469
5126
  # @!attribute [rw] resource_arn
4470
5127
  # The ARN of the resource that you want to view tags for.
4471
5128
  #
@@ -4749,6 +5406,52 @@ module Aws::CloudWatchLogs
4749
5406
  include Aws::Structure
4750
5407
  end
4751
5408
 
5409
+ # Defines the data type structure for a log field, including the type,
5410
+ # element information, and nested fields for complex types.
5411
+ #
5412
+ # @!attribute [rw] type
5413
+ # The data type of the log field.
5414
+ # @return [String]
5415
+ #
5416
+ # @!attribute [rw] element
5417
+ # For array or collection types, specifies the element type
5418
+ # information.
5419
+ # @return [Types::LogFieldType]
5420
+ #
5421
+ # @!attribute [rw] fields
5422
+ # For complex types, contains the nested field definitions.
5423
+ # @return [Array<Types::LogFieldsListItem>]
5424
+ #
5425
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/LogFieldType AWS API Documentation
5426
+ #
5427
+ class LogFieldType < Struct.new(
5428
+ :type,
5429
+ :element,
5430
+ :fields)
5431
+ SENSITIVE = []
5432
+ include Aws::Structure
5433
+ end
5434
+
5435
+ # Represents a log field with its name and data type information for a
5436
+ # specific data source.
5437
+ #
5438
+ # @!attribute [rw] log_field_name
5439
+ # The name of the log field.
5440
+ # @return [String]
5441
+ #
5442
+ # @!attribute [rw] log_field_type
5443
+ # The data type information for the log field.
5444
+ # @return [Types::LogFieldType]
5445
+ #
5446
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/LogFieldsListItem AWS API Documentation
5447
+ #
5448
+ class LogFieldsListItem < Struct.new(
5449
+ :log_field_name,
5450
+ :log_field_type)
5451
+ SENSITIVE = []
5452
+ include Aws::Structure
5453
+ end
5454
+
4752
5455
  # Represents a log group.
4753
5456
  #
4754
5457
  # @!attribute [rw] log_group_name
@@ -5966,10 +6669,7 @@ module Aws::CloudWatchLogs
5966
6669
  # @return [String]
5967
6670
  #
5968
6671
  # @!attribute [rw] mapping_version
5969
- # Identifies the specific release of the Open Cybersecurity Schema
5970
- # Framework (OCSF) transformer being used to parse OCSF data. Defaults
5971
- # to the latest version if not specified. Does not automatically
5972
- # update.
6672
+ # The version of the OCSF mapping to use for parsing log data.
5973
6673
  # @return [String]
5974
6674
  #
5975
6675
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ParseToOCSF AWS API Documentation
@@ -6368,7 +7068,8 @@ module Aws::CloudWatchLogs
6368
7068
  end
6369
7069
 
6370
7070
  # @!attribute [rw] policy_name
6371
- # A name for the policy. This must be unique within the account.
7071
+ # A name for the policy. This must be unique within the account and
7072
+ # cannot start with `aws/`.
6372
7073
  # @return [String]
6373
7074
  #
6374
7075
  # @!attribute [rw] policy_document
@@ -6461,15 +7162,22 @@ module Aws::CloudWatchLogs
6461
7162
  #
6462
7163
  # * **Fields** The array of field indexes to create.
6463
7164
  #
6464
- # ^
7165
+ # * **FieldsV2** The object of field indexes to create along with
7166
+ # it's type.
6465
7167
  #
6466
7168
  # It must contain at least one field index.
6467
7169
  #
6468
7170
  # The following is an example of an index policy document that creates
6469
- # two indexes, `RequestId` and `TransactionId`.
7171
+ # indexes with different types.
7172
+ #
7173
+ # `"policyDocument": "{ "Fields": [ "TransactionId" ],
7174
+ # "FieldsV2": {"RequestId": {"type": "FIELD_INDEX"},
7175
+ # "APIName": {"type": "FACET"}, "StatusCode": {"type":
7176
+ # "FACET"}}}"`
6470
7177
  #
6471
- # `"policyDocument": "{ "Fields": [ "RequestId", "TransactionId"
6472
- # ] }"`
7178
+ # You can use `FieldsV2` to specify the type for each field. Supported
7179
+ # types are `FIELD_INDEX` and `FACET`. Field names within `Fields` and
7180
+ # `FieldsV2` must be mutually exclusive.
6473
7181
  #
6474
7182
  #
6475
7183
  #
@@ -6491,17 +7199,27 @@ module Aws::CloudWatchLogs
6491
7199
  #
6492
7200
  # @!attribute [rw] selection_criteria
6493
7201
  # Use this parameter to apply the new policy to a subset of log groups
6494
- # in the account.
7202
+ # in the account or a data source name and type combination.
6495
7203
  #
6496
7204
  # Specifying `selectionCriteria` is valid only when you specify
6497
7205
  # `SUBSCRIPTION_FILTER_POLICY`, `FIELD_INDEX_POLICY` or
6498
7206
  # `TRANSFORMER_POLICY`for `policyType`.
6499
7207
  #
6500
- # If `policyType` is `SUBSCRIPTION_FILTER_POLICY`, the only supported
6501
- # `selectionCriteria` filter is `LogGroupName NOT IN []`
7208
+ # * If `policyType` is `SUBSCRIPTION_FILTER_POLICY`, the only
7209
+ # supported `selectionCriteria` filter is `LogGroupName NOT IN []`
6502
7210
  #
6503
- # If `policyType` is `FIELD_INDEX_POLICY` or `TRANSFORMER_POLICY`, the
6504
- # only supported `selectionCriteria` filter is `LogGroupNamePrefix`
7211
+ # * If `policyType` is `TRANSFORMER_POLICY`, the only supported
7212
+ # `selectionCriteria` filter is `LogGroupNamePrefix`
7213
+ #
7214
+ # * If `policyType` is `FIELD_INDEX_POLICY`, the supported
7215
+ # `selectionCriteria` filters are:
7216
+ #
7217
+ # * `LogGroupNamePrefix`
7218
+ #
7219
+ # * `DataSourceName` AND `DataSourceType`
7220
+ # When you specify `selectionCriteria` for a field index policy you
7221
+ # can use either `LogGroupNamePrefix` by itself or `DataSourceName`
7222
+ # and `DataSourceType` together.
6505
7223
  #
6506
7224
  # The `selectionCriteria` string can be up to 25KB in length. The
6507
7225
  # length is determined by using its UTF-8 bytes.
@@ -6771,11 +7489,17 @@ module Aws::CloudWatchLogs
6771
7489
  #
6772
7490
  # * For IAM Identity Center, the valid value is `ERROR_LOGS`.
6773
7491
  #
7492
+ # * For Network Firewall Proxy, the valid values are `ALERT_LOGS`,
7493
+ # `ALLOW_LOGS`, and `DENY_LOGS`.
7494
+ #
6774
7495
  # * For Network Load Balancer, the valid value is `NLB_ACCESS_LOGS`.
6775
7496
  #
6776
7497
  # * For PCS, the valid values are `PCS_SCHEDULER_LOGS` and
6777
7498
  # `PCS_JOBCOMP_LOGS`.
6778
7499
  #
7500
+ # * For Quick Suite, the valid values are `CHAT_LOGS` and
7501
+ # `FEEDBACK_LOGS`.
7502
+ #
6779
7503
  # * For Amazon Web Services RTB Fabric, the valid values is
6780
7504
  # `APPLICATION_LOGS`.
6781
7505
  #
@@ -6925,10 +7649,16 @@ module Aws::CloudWatchLogs
6925
7649
  #
6926
7650
  # @!attribute [rw] policy_document
6927
7651
  # The index policy document, in JSON format. The following is an
6928
- # example of an index policy document that creates two indexes,
6929
- # `RequestId` and `TransactionId`.
7652
+ # example of an index policy document that creates indexes with
7653
+ # different types.
7654
+ #
7655
+ # `"policyDocument": "{"Fields": [ "TransactionId" ], "FieldsV2":
7656
+ # {"RequestId": {"type": "FIELD_INDEX"}, "APIName": {"type": "FACET"},
7657
+ # "StatusCode": {"type": "FACET"}}}"`
6930
7658
  #
6931
- # `"policyDocument": "{ "Fields": [ "RequestId", "TransactionId" ] }"`
7659
+ # You can use `FieldsV2` to specify the type for each field. Supported
7660
+ # types are `FIELD_INDEX` and `FACET`. Field names within `Fields` and
7661
+ # `FieldsV2` must be mutually exclusive.
6932
7662
  #
6933
7663
  # The policy document must include at least one field index. For more
6934
7664
  # information about the fields that can be included and other
@@ -7933,17 +8663,17 @@ module Aws::CloudWatchLogs
7933
8663
  include Aws::Structure
7934
8664
  end
7935
8665
 
7936
- # Configuration details for delivering scheduled query results to an
7937
- # Amazon S3 bucket.
8666
+ # Configuration for Amazon S3 destination where scheduled query results
8667
+ # are delivered.
7938
8668
  #
7939
8669
  # @!attribute [rw] destination_identifier
7940
- # The S3 URI where query results will be stored (e.g.,
7941
- # s3://bucket-name/prefix/).
8670
+ # The Amazon S3 URI where query results are delivered. Must be a valid
8671
+ # S3 URI format.
7942
8672
  # @return [String]
7943
8673
  #
7944
8674
  # @!attribute [rw] role_arn
7945
- # The ARN of the IAM role that CloudWatch Logs will assume to write
7946
- # results to the S3 bucket.
8675
+ # The ARN of the IAM role that grants permissions to write query
8676
+ # results to the specified Amazon S3 destination.
7947
8677
  # @return [String]
7948
8678
  #
7949
8679
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/S3Configuration AWS API Documentation
@@ -7985,28 +8715,63 @@ module Aws::CloudWatchLogs
7985
8715
  include Aws::Structure
7986
8716
  end
7987
8717
 
8718
+ # Represents a data source association with an S3 Table Integration,
8719
+ # including its status and metadata.
8720
+ #
8721
+ # @!attribute [rw] identifier
8722
+ # The unique identifier for this data source association.
8723
+ # @return [String]
8724
+ #
8725
+ # @!attribute [rw] data_source
8726
+ # The data source associated with the S3 Table Integration.
8727
+ # @return [Types::DataSource]
8728
+ #
8729
+ # @!attribute [rw] status
8730
+ # The current status of the data source association.
8731
+ # @return [String]
8732
+ #
8733
+ # @!attribute [rw] status_reason
8734
+ # Additional information about the status of the data source
8735
+ # association.
8736
+ # @return [String]
8737
+ #
8738
+ # @!attribute [rw] created_time_stamp
8739
+ # The timestamp when the data source association was created.
8740
+ # @return [Integer]
8741
+ #
8742
+ # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/S3TableIntegrationSource AWS API Documentation
8743
+ #
8744
+ class S3TableIntegrationSource < Struct.new(
8745
+ :identifier,
8746
+ :data_source,
8747
+ :status,
8748
+ :status_reason,
8749
+ :created_time_stamp)
8750
+ SENSITIVE = []
8751
+ include Aws::Structure
8752
+ end
8753
+
7988
8754
  # Information about a destination where scheduled query results are
7989
- # processed and delivered.
8755
+ # processed, including processing status and any error messages.
7990
8756
  #
7991
8757
  # @!attribute [rw] destination_type
7992
- # The type of destination (S3).
8758
+ # The type of destination for query results.
7993
8759
  # @return [String]
7994
8760
  #
7995
8761
  # @!attribute [rw] destination_identifier
7996
- # The destination identifier (S3 URI).
8762
+ # The identifier for the destination where results are delivered.
7997
8763
  # @return [String]
7998
8764
  #
7999
8765
  # @!attribute [rw] status
8000
- # The processing status for this destination (IN\_PROGRESS, ERROR,
8001
- # FAILED, or COMPLETE).
8766
+ # The processing status of the destination delivery.
8002
8767
  # @return [String]
8003
8768
  #
8004
8769
  # @!attribute [rw] processed_identifier
8005
- # The processed identifier returned for the destination (S3 key).
8770
+ # The identifier of the processed result at the destination.
8006
8771
  # @return [String]
8007
8772
  #
8008
8773
  # @!attribute [rw] error_message
8009
- # Error message if the destination processing failed.
8774
+ # Error message if destination processing failed.
8010
8775
  # @return [String]
8011
8776
  #
8012
8777
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ScheduledQueryDestination AWS API Documentation
@@ -8021,7 +8786,8 @@ module Aws::CloudWatchLogs
8021
8786
  include Aws::Structure
8022
8787
  end
8023
8788
 
8024
- # Summary information about a scheduled query, used in list operations.
8789
+ # Summary information about a scheduled query, including basic
8790
+ # configuration and execution status.
8025
8791
  #
8026
8792
  # @!attribute [rw] scheduled_query_arn
8027
8793
  # The ARN of the scheduled query.
@@ -8032,16 +8798,15 @@ module Aws::CloudWatchLogs
8032
8798
  # @return [String]
8033
8799
  #
8034
8800
  # @!attribute [rw] state
8035
- # The current state of the scheduled query (ENABLED or DISABLED).
8801
+ # The current state of the scheduled query.
8036
8802
  # @return [String]
8037
8803
  #
8038
8804
  # @!attribute [rw] last_triggered_time
8039
- # The time when the scheduled query was last executed.
8805
+ # The timestamp when the scheduled query was last executed.
8040
8806
  # @return [Integer]
8041
8807
  #
8042
8808
  # @!attribute [rw] last_execution_status
8043
- # The status of the last execution (Running, Complete, Failed,
8044
- # Timeout, or InvalidQuery).
8809
+ # The status of the most recent execution.
8045
8810
  # @return [String]
8046
8811
  #
8047
8812
  # @!attribute [rw] schedule_expression
@@ -8049,20 +8814,19 @@ module Aws::CloudWatchLogs
8049
8814
  # @return [String]
8050
8815
  #
8051
8816
  # @!attribute [rw] timezone
8052
- # The timezone in which the schedule expression is evaluated.
8817
+ # The timezone used for evaluating the schedule expression.
8053
8818
  # @return [String]
8054
8819
  #
8055
8820
  # @!attribute [rw] destination_configuration
8056
- # Configuration for destinations where the query results are
8057
- # delivered.
8821
+ # Configuration for where query results are delivered.
8058
8822
  # @return [Types::DestinationConfiguration]
8059
8823
  #
8060
8824
  # @!attribute [rw] creation_time
8061
- # The time when the scheduled query was created.
8825
+ # The timestamp when the scheduled query was created.
8062
8826
  # @return [Integer]
8063
8827
  #
8064
8828
  # @!attribute [rw] last_updated_time
8065
- # The time when the scheduled query was last updated.
8829
+ # The timestamp when the scheduled query was last updated.
8066
8830
  # @return [Integer]
8067
8831
  #
8068
8832
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ScheduledQuerySummary AWS API Documentation
@@ -8728,32 +9492,27 @@ module Aws::CloudWatchLogs
8728
9492
  include Aws::Structure
8729
9493
  end
8730
9494
 
8731
- # A record of a scheduled query execution, including its status and
8732
- # destination processing information.
9495
+ # A record of a scheduled query execution, including execution status,
9496
+ # timestamp, and destination processing results.
8733
9497
  #
8734
9498
  # @!attribute [rw] query_id
8735
- # The unique identifier for the query execution.
9499
+ # The unique identifier for this query execution.
8736
9500
  # @return [String]
8737
9501
  #
8738
9502
  # @!attribute [rw] execution_status
8739
- # The status of the query execution (Running, Complete, Failed,
8740
- # Timeout, or InvalidQuery).
9503
+ # The execution status of the scheduled query run.
8741
9504
  # @return [String]
8742
9505
  #
8743
9506
  # @!attribute [rw] triggered_timestamp
8744
- # The time when the scheduled query was triggered, in Unix epoch time.
9507
+ # The timestamp when the scheduled query execution was triggered.
8745
9508
  # @return [Integer]
8746
9509
  #
8747
9510
  # @!attribute [rw] error_message
8748
- # The error message if the scheduled query execution failed. This
8749
- # field is only populated when the execution status indicates a
8750
- # failure.
9511
+ # Error message if the query execution failed.
8751
9512
  # @return [String]
8752
9513
  #
8753
9514
  # @!attribute [rw] destinations
8754
- # The list of destinations where the scheduled query results were
8755
- # delivered for this execution. This includes S3 buckets configured
8756
- # for the scheduled query.
9515
+ # Information about destination processing for this query execution.
8757
9516
  # @return [Array<Types::ScheduledQueryDestination>]
8758
9517
  #
8759
9518
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/TriggerHistoryRecord AWS API Documentation
@@ -9034,58 +9793,58 @@ module Aws::CloudWatchLogs
9034
9793
  end
9035
9794
 
9036
9795
  # @!attribute [rw] identifier
9037
- # The name or ARN of the scheduled query to update.
9796
+ # The ARN or name of the scheduled query to update.
9038
9797
  # @return [String]
9039
9798
  #
9040
9799
  # @!attribute [rw] description
9041
- # Updated description for the scheduled query.
9800
+ # An updated description for the scheduled query.
9042
9801
  # @return [String]
9043
9802
  #
9044
9803
  # @!attribute [rw] query_language
9045
- # Updated query language to use (LogsQL, PPL, or SQL).
9804
+ # The updated query language for the scheduled query.
9046
9805
  # @return [String]
9047
9806
  #
9048
9807
  # @!attribute [rw] query_string
9049
- # Updated CloudWatch Logs Insights query string to execute.
9808
+ # The updated query string to execute.
9050
9809
  # @return [String]
9051
9810
  #
9052
9811
  # @!attribute [rw] log_group_identifiers
9053
- # Updated log group identifiers to query.
9812
+ # The updated array of log group names or ARNs to query.
9054
9813
  # @return [Array<String>]
9055
9814
  #
9056
9815
  # @!attribute [rw] schedule_expression
9057
- # Updated cron expression that defines when the scheduled query runs.
9816
+ # The updated cron expression that defines when the scheduled query
9817
+ # runs.
9058
9818
  # @return [String]
9059
9819
  #
9060
9820
  # @!attribute [rw] timezone
9061
- # Updated timezone in which the schedule expression is evaluated.
9821
+ # The updated timezone for evaluating the schedule expression.
9062
9822
  # @return [String]
9063
9823
  #
9064
9824
  # @!attribute [rw] start_time_offset
9065
- # Updated time offset in seconds from the execution time for the start
9066
- # of the query time range.
9825
+ # The updated time offset in seconds that defines the lookback period
9826
+ # for the query.
9067
9827
  # @return [Integer]
9068
9828
  #
9069
9829
  # @!attribute [rw] destination_configuration
9070
- # Updated configuration for destinations where the query results will
9071
- # be delivered.
9830
+ # The updated configuration for where to deliver query results.
9072
9831
  # @return [Types::DestinationConfiguration]
9073
9832
  #
9074
9833
  # @!attribute [rw] schedule_start_time
9075
- # Updated start time for the query schedule in Unix epoch time.
9834
+ # The updated start time for the scheduled query in Unix epoch format.
9076
9835
  # @return [Integer]
9077
9836
  #
9078
9837
  # @!attribute [rw] schedule_end_time
9079
- # Updated end time for the query schedule in Unix epoch time.
9838
+ # The updated end time for the scheduled query in Unix epoch format.
9080
9839
  # @return [Integer]
9081
9840
  #
9082
9841
  # @!attribute [rw] execution_role_arn
9083
- # Updated ARN of the IAM role that CloudWatch Logs will assume to
9084
- # execute the scheduled query.
9842
+ # The updated ARN of the IAM role that grants permissions to execute
9843
+ # the query and deliver results.
9085
9844
  # @return [String]
9086
9845
  #
9087
9846
  # @!attribute [rw] state
9088
- # Updated state of the scheduled query (ENABLED or DISABLED).
9847
+ # The updated state of the scheduled query.
9089
9848
  # @return [String]
9090
9849
  #
9091
9850
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/UpdateScheduledQueryRequest AWS API Documentation
@@ -9121,7 +9880,7 @@ module Aws::CloudWatchLogs
9121
9880
  # @return [String]
9122
9881
  #
9123
9882
  # @!attribute [rw] query_language
9124
- # The query language used by the updated scheduled query.
9883
+ # The query language of the updated scheduled query.
9125
9884
  # @return [String]
9126
9885
  #
9127
9886
  # @!attribute [rw] query_string
@@ -9129,11 +9888,11 @@ module Aws::CloudWatchLogs
9129
9888
  # @return [String]
9130
9889
  #
9131
9890
  # @!attribute [rw] log_group_identifiers
9132
- # The log group identifiers of the updated scheduled query.
9891
+ # The log groups queried by the updated scheduled query.
9133
9892
  # @return [Array<String>]
9134
9893
  #
9135
9894
  # @!attribute [rw] schedule_expression
9136
- # The schedule expression of the updated scheduled query.
9895
+ # The cron expression of the updated scheduled query.
9137
9896
  # @return [String]
9138
9897
  #
9139
9898
  # @!attribute [rw] timezone
@@ -9141,7 +9900,7 @@ module Aws::CloudWatchLogs
9141
9900
  # @return [String]
9142
9901
  #
9143
9902
  # @!attribute [rw] start_time_offset
9144
- # The start time offset of the updated scheduled query.
9903
+ # The time offset of the updated scheduled query.
9145
9904
  # @return [Integer]
9146
9905
  #
9147
9906
  # @!attribute [rw] destination_configuration
@@ -9153,20 +9912,20 @@ module Aws::CloudWatchLogs
9153
9912
  # @return [String]
9154
9913
  #
9155
9914
  # @!attribute [rw] last_triggered_time
9156
- # The time when the updated scheduled query was last executed.
9915
+ # The timestamp when the updated scheduled query was last executed.
9157
9916
  # @return [Integer]
9158
9917
  #
9159
9918
  # @!attribute [rw] last_execution_status
9160
- # The status of the last execution of the updated scheduled query
9161
- # (Running, Complete, Failed, Timeout, or InvalidQuery).
9919
+ # The status of the most recent execution of the updated scheduled
9920
+ # query.
9162
9921
  # @return [String]
9163
9922
  #
9164
9923
  # @!attribute [rw] schedule_start_time
9165
- # The schedule start time of the updated scheduled query.
9924
+ # The start time of the updated scheduled query.
9166
9925
  # @return [Integer]
9167
9926
  #
9168
9927
  # @!attribute [rw] schedule_end_time
9169
- # The schedule end time of the updated scheduled query.
9928
+ # The end time of the updated scheduled query.
9170
9929
  # @return [Integer]
9171
9930
  #
9172
9931
  # @!attribute [rw] execution_role_arn
@@ -9174,11 +9933,11 @@ module Aws::CloudWatchLogs
9174
9933
  # @return [String]
9175
9934
  #
9176
9935
  # @!attribute [rw] creation_time
9177
- # The creation time of the updated scheduled query.
9936
+ # The timestamp when the scheduled query was originally created.
9178
9937
  # @return [Integer]
9179
9938
  #
9180
9939
  # @!attribute [rw] last_updated_time
9181
- # The last updated time of the scheduled query.
9940
+ # The timestamp when the scheduled query was last updated.
9182
9941
  # @return [Integer]
9183
9942
  #
9184
9943
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/UpdateScheduledQueryResponse AWS API Documentation