@pulumi/datadog 4.56.0-alpha.1758001892 → 4.56.0-alpha.1758166292

package/types/output.d.ts

@@ -9134,6 +9134,16 @@ export interface GetHostsHostListMetrics {
     iowait: number;
     load: number;
 }
+export interface GetIncidentNotificationRuleCondition {
+    /**
+     * The incident field to evaluate. Common values include: state, severity, services, teams. Custom fields are also supported.
+     */
+    field: string;
+    /**
+     * The value(s) to compare against.
+     */
+    values: string[];
+}
 export interface GetLogsIndexesLogsIndex {
     /**
      * The number of log events you can send in this index per day before you are rate-limited.
@@ -9410,6 +9420,10 @@ export interface GetSecurityMonitoringFiltersFilterExclusionFilter {
     query: string;
 }
 export interface GetSecurityMonitoringRulesRule {
+    /**
+     * One or more calculated fields. Available only for scheduled rules (in other words, when `schedulingOptions` is defined).
+     */
+    calculatedFields?: outputs.GetSecurityMonitoringRulesRuleCalculatedField[];
     /**
      * Cases for generating signals.
      */
@@ -9450,6 +9464,10 @@ export interface GetSecurityMonitoringRulesRule {
      * Reference tables for filtering query results.
      */
     referenceTables?: outputs.GetSecurityMonitoringRulesRuleReferenceTable[];
+    /**
+     * Options for scheduled rules. When this field is present, the rule runs based on the schedule. When absent, it runs in real time on ingested logs.
+     */
+    schedulingOptions?: outputs.GetSecurityMonitoringRulesRuleSchedulingOptions;
     /**
      * Queries for selecting logs which are part of the rule.
      */
@@ -9467,6 +9485,16 @@ export interface GetSecurityMonitoringRulesRule {
      */
     type?: string;
 }
+export interface GetSecurityMonitoringRulesRuleCalculatedField {
+    /**
+     * Expression.
+     */
+    expression: string;
+    /**
+     * Field name.
+     */
+    name: string;
+}
 export interface GetSecurityMonitoringRulesRuleCase {
     /**
      * Action to perform when the case trigger
@@ -9624,6 +9652,14 @@ export interface GetSecurityMonitoringRulesRuleQuery {
      * Fields to group by.
      */
     groupByFields?: string[];
+    /**
+     * When false, events without a group-by value are ignored by the rule. When true, events with missing group-by fields are processed with `N/A`, replacing the missing values.
+     */
+    hasOptionalGroupByFields?: boolean;
+    /**
+     * List of indexes to run the query on when the data source is `logs`. Supports only one element. Used only for scheduled rules (in other words, when `schedulingOptions` is defined).
+     */
+    indexes?: string[];
     /**
      * The target field to aggregate over when using the `sum`, `max`, or `geoData` aggregations.
      *
@@ -9675,6 +9711,20 @@ export interface GetSecurityMonitoringRulesRuleReferenceTable {
      */
     tableName: string;
 }
+export interface GetSecurityMonitoringRulesRuleSchedulingOptions {
+    /**
+     * Schedule for the rule queries, written in RRULE syntax. See [RFC](https://icalendar.org/iCalendar-RFC-5545/3-8-5-3-recurrence-rule.html) for syntax reference.
+     */
+    rrule: string;
+    /**
+     * Start date for the schedule, in ISO 8601 format without timezone.
+     */
+    start: string;
+    /**
+     * Time zone of the start date, in the [tz database](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones) format.
+     */
+    timezone: string;
+}
 export interface GetSecurityMonitoringRulesRuleSignalQuery {
     /**
      * The aggregation type. For Signal Correlation rules, it must be event_count.
@@ -9814,6 +9864,16 @@ export interface GetUsersUser {
     title: string;
     verified: boolean;
 }
+export interface IncidentNotificationRuleCondition {
+    /**
+     * The incident field to evaluate. Common values include: state, severity, services, teams. Custom fields are also supported.
+     */
+    field: string;
+    /**
+     * The value(s) to compare against. Multiple values are ORed together.
+     */
+    values: string[];
+}
 export interface IpAllowlistEntry {
     /**
      * IP address or range of addresses. String must be a valid CIDR block or IP address.
@@ -25352,6 +25412,10 @@ export interface SecurityMonitoringDefaultRuleQuery {
      * Fields to group by.
      */
     groupByFields: string[];
+    /**
+     * When false, events without a group-by value are ignored by the rule. When true, events with missing group-by fields are processed with `N/A`, replacing the missing values.
+     */
+    hasOptionalGroupByFields: boolean;
     /**
      * The target field to aggregate over when using the `sum`, `max`, or `geoData` aggregations. **Deprecated.** Configure `metrics` instead. This attribute will be removed in the next major version of the provider.
      *
@@ -25391,6 +25455,16 @@ export interface SecurityMonitoringFilterExclusionFilter {
      */
     query: string;
 }
+export interface SecurityMonitoringRuleCalculatedField {
+    /**
+     * Expression.
+     */
+    expression: string;
+    /**
+     * Field name.
+     */
+    name: string;
+}
 export interface SecurityMonitoringRuleCase {
     /**
      * Action to perform when the case trigger
@@ -25548,6 +25622,14 @@ export interface SecurityMonitoringRuleQuery {
      * Fields to group by.
      */
     groupByFields?: string[];
+    /**
+     * When false, events without a group-by value are ignored by the rule. When true, events with missing group-by fields are processed with `N/A`, replacing the missing values. Defaults to `false`.
+     */
+    hasOptionalGroupByFields?: boolean;
+    /**
+     * List of indexes to run the query on when the data source is `logs`. Supports only one element. Used only for scheduled rules (in other words, when `schedulingOptions` is defined).
+     */
+    indexes?: string[];
     /**
      * The target field to aggregate over when using the `sum`, `max`, or `geoData` aggregations. **Deprecated.** Configure `metrics` instead. This attribute will be removed in the next major version of the provider.
      *
@@ -25599,6 +25681,20 @@ export interface SecurityMonitoringRuleReferenceTable {
      */
     tableName: string;
 }
+export interface SecurityMonitoringRuleSchedulingOptions {
+    /**
+     * Schedule for the rule queries, written in RRULE syntax. See [RFC](https://icalendar.org/iCalendar-RFC-5545/3-8-5-3-recurrence-rule.html) for syntax reference.
+     */
+    rrule: string;
+    /**
+     * Start date for the schedule, in ISO 8601 format without timezone.
+     */
+    start: string;
+    /**
+     * Time zone of the start date, in the [tz database](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones) format.
+     */
+    timezone: string;
+}
 export interface SecurityMonitoringRuleSignalQuery {
     /**
      * The aggregation type. For Signal Correlation rules, it must be event_count. Valid values are `count`, `cardinality`, `sum`, `max`, `newValue`, `geoData`, `eventCount`, `none`. Defaults to `"eventCount"`.
@@ -25897,6 +25993,10 @@ export interface SyntheticsTestApiStep {
      * Generate variables using JavaScript.
      */
     extractedValuesFromScript?: string;
+    /**
+     * ID of the step.
+     */
+    id: string;
     /**
      * Determines whether or not to consider the entire test as failed if this step fails. Can be used only if `allowFailure` is `true`.
      */
@@ -27427,10 +27527,18 @@ export declare namespace config {
     }
 }
 export declare namespace gcp {
+    interface IntegrationMonitoredResourceConfig {
+        filters: string[];
+        type: string;
+    }
     interface IntegrationStsMetricNamespaceConfig {
         disabled: boolean;
         id: string;
     }
+    interface IntegrationStsMonitoredResourceConfig {
+        filters: string[];
+        type: string;
+    }
 }
 export declare namespace slack {
     interface ChannelDisplay {