@pulumi/datadog 5.8.0-alpha.1783234616 → 5.8.0

package/types/output.d.ts

@@ -63725,6 +63725,7 @@ export interface GetRumRetentionFiltersRetentionFilter {
     sampleRate: number;
 }
 export interface GetSecurityMonitoringCriticalAssetsCriticalAsset {
+    description: string;
     enabled: boolean;
     id: string;
     query: string;
@@ -64550,9 +64551,13 @@ export interface LogsArchiveGcsArchive {
 }
 export interface LogsArchiveS3Archive {
     /**
-     * Your AWS account id.
+     * Your AWS access key id, used as an alternative to `accountId`/`roleName`.
      */
-    accountId: string;
+    accessKeyId?: string;
+    /**
+     * Your AWS account id. Required with `roleName`; mutually exclusive with `accessKeyId`.
+     */
+    accountId?: string;
     /**
      * Name of your s3 bucket.
      */
@@ -64570,9 +64575,9 @@ export interface LogsArchiveS3Archive {
      */
     path?: string;
     /**
-     * Your AWS role name
+     * Your AWS role name. Required with `accountId`; mutually exclusive with `accessKeyId`.
      */
-    roleName: string;
+    roleName?: string;
     /**
      * The AWS S3 storage class used to upload the logs. Valid values are `STANDARD`, `STANDARD_IA`, `ONEZONE_IA`, `INTELLIGENT_TIERING`, `GLACIER_IR`. Defaults to `"STANDARD"`.
      */
@@ -67391,6 +67396,10 @@ export interface ObservabilityPipelineConfigDestination {
      * The `azureStorage` destination forwards logs to an Azure Blob Storage container.
      */
     azureStorages?: outputs.ObservabilityPipelineConfigDestinationAzureStorage[];
+    /**
+     * The `clickhouse` destination forwards logs to a ClickHouse server via HTTP.
+     */
+    clickhouse?: outputs.ObservabilityPipelineConfigDestinationClickhouse;
     /**
      * The `cloudPrem` destination sends logs to Datadog CloudPrem.
      */
@@ -67881,6 +67890,152 @@ export interface ObservabilityPipelineConfigDestinationAzureStorageBufferMemory
      */
     whenFull: string;
 }
+export interface ObservabilityPipelineConfigDestinationClickhouse {
+    /**
+     * Authentication strategy for ClickHouse HTTP requests. Only `basic` strategy is supported.
+     */
+    auth?: outputs.ObservabilityPipelineConfigDestinationClickhouseAuth;
+    /**
+     * Batching configuration for ClickHouse inserts.
+     */
+    batch?: outputs.ObservabilityPipelineConfigDestinationClickhouseBatch;
+    /**
+     * Batch encoding configuration. Required when `format` is `arrowStream`.
+     */
+    batchEncoding?: outputs.ObservabilityPipelineConfigDestinationClickhouseBatchEncoding;
+    /**
+     * Configuration for buffer settings on destination components. Exactly one of `disk` or `memory` must be specified.
+     */
+    buffer?: outputs.ObservabilityPipelineConfigDestinationClickhouseBuffer;
+    /**
+     * Compression for outbound HTTP requests. Use `algorithm = "gzip"` or `algorithm = "none"`.
+     */
+    compression?: outputs.ObservabilityPipelineConfigDestinationClickhouseCompression;
+    /**
+     * Optional name of the ClickHouse database to write to. When omitted, the user's default database is used.
+     */
+    database?: string;
+    /**
+     * If `true`, enables flexible DateTime parsing on the server side.
+     */
+    dateTimeBestEffort?: boolean;
+    /**
+     * Name of the environment variable or secret that holds the ClickHouse HTTP endpoint URL. Defaults to `DESTINATION_CLICKHOUSE_ENDPOINT_URL`.
+     */
+    endpointUrlKey?: string;
+    /**
+     * Insert format for events. `jsonEachRow` maps event fields to columns by name. `jsonAsObject` and `jsonAsString` insert each event into a single JSON or String column. `arrowStream` batches events with Apache Arrow IPC streaming and requires `batchEncoding`. Valid values are `jsonEachRow`, `jsonAsObject`, `jsonAsString`, `arrowStream`.
+     */
+    format?: string;
+    /**
+     * If `true`, fields not present in the target table schema are dropped instead of causing insert errors. When unset, the ClickHouse server's own `inputFormatSkipUnknownFields` setting applies.
+     */
+    skipUnknownFields?: boolean;
+    /**
+     * Target ClickHouse table name.
+     */
+    table: string;
+    /**
+     * Configuration for enabling TLS encryption between the pipeline component and external services.
+     */
+    tls?: outputs.ObservabilityPipelineConfigDestinationClickhouseTls;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseAuth {
+    /**
+     * Name of the environment variable or secret that holds the ClickHouse password. Defaults to `DESTINATION_CLICKHOUSE_PASSWORD`.
+     */
+    passwordKey?: string;
+    /**
+     * Authentication strategy. Must be `basic`. Valid values are `basic`.
+     */
+    strategy: string;
+    /**
+     * Name of the environment variable or secret that holds the ClickHouse username. Defaults to `DESTINATION_CLICKHOUSE_USERNAME`.
+     */
+    usernameKey?: string;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBatch {
+    /**
+     * Maximum number of events per batch. Value must be at least 1.
+     */
+    maxEvents?: number;
+    /**
+     * Maximum time in seconds before a partial batch is flushed. Value must be between 1 and 65535.
+     */
+    timeoutSecs?: number;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBatchEncoding {
+    /**
+     * If `true`, allows null values for non-nullable fields in the ClickHouse schema. Defaults to `false`.
+     */
+    allowNullableFields?: boolean;
+    /**
+     * Batch encoding codec. Must be `arrowStream`. Valid values are `arrowStream`.
+     */
+    codec: string;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBuffer {
+    /**
+     * Options for configuring a disk buffer. Cannot be used with `memory`.
+     */
+    disk?: outputs.ObservabilityPipelineConfigDestinationClickhouseBufferDisk;
+    /**
+     * Options for configuring a memory buffer. Cannot be used with `disk`.
+     */
+    memory?: outputs.ObservabilityPipelineConfigDestinationClickhouseBufferMemory;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBufferDisk {
+    /**
+     * Maximum size of the disk buffer (in bytes).
+     */
+    maxSize?: number;
+    /**
+     * Behavior when the buffer is full. Valid values are `block` or `dropNewest`. Defaults to `"block"`.
+     */
+    whenFull: string;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBufferMemory {
+    /**
+     * Maximum events for the memory buffer.
+     */
+    maxEvents?: number;
+    /**
+     * Maximum size of the memory buffer (in bytes).
+     */
+    maxSize?: number;
+    /**
+     * Behavior when the buffer is full. Valid values are `block` or `dropNewest`. Defaults to `"block"`.
+     */
+    whenFull: string;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseCompression {
+    /**
+     * Compression algorithm. Valid values are `gzip` and `none`. Valid values are `gzip`, `none`.
+     */
+    algorithm: string;
+    /**
+     * Compression level (1–9). Only valid when `algorithm` is `gzip`. Value must be between 1 and 9.
+     */
+    level?: number;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseTls {
+    /**
+     * Path to the Certificate Authority (CA) file used to validate the server's TLS certificate.
+     */
+    caFile?: string;
+    /**
+     * Path to the TLS client certificate file used to authenticate the pipeline component with upstream or downstream services.
+     */
+    crtFile: string;
+    /**
+     * Path to the private key file associated with the TLS client certificate. Used for mutual TLS authentication.
+     */
+    keyFile?: string;
+    /**
+     * Name of the environment variable or secret that holds the passphrase for the private key file.
+     */
+    keyPassKey?: string;
+}
 export interface ObservabilityPipelineConfigDestinationCloudPrem {
     /**
      * Configuration for buffer settings on destination components. Exactly one of `disk` or `memory` must be specified.
@@ -70052,17 +70207,59 @@ export interface ObservabilityPipelineConfigProcessorGroupProcessorOcsfMapperMap
 }
 export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrok {
     /**
-     * If set to `true`, disables the default Grok rules provided by Datadog.
+     * If set to `true`, disables the default Grok rules provided by Datadog. Defaults to `false`.
      */
-    disableLibraryRules?: boolean;
+    disableLibraryRules: boolean;
+    /**
+     * The log field to parse with the Grok rules. Defaults to `"message"`.
+     */
+    field: string;
+    /**
+     * A Grok parsing rule that targets logs matching a Datadog search query.
+     */
+    includeRules?: outputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRule[];
     /**
      * The list of Grok parsing rules. If multiple parsing rules are provided, they are evaluated in order. The first successful match is applied.
      */
-    rules: outputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokRule[];
+    rules?: outputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokRule[];
+}
+export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRule {
+    /**
+     * A Datadog search query used to determine which logs this Grok rule targets.
+     */
+    include: string;
+    /**
+     * A list of Grok parsing rules that define how to extract fields. Each rule must contain a name and a valid Grok pattern.
+     */
+    matchRules: outputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRuleMatchRule[];
+    /**
+     * A list of helper Grok rules that can be referenced by the parsing rules.
+     */
+    supportRules?: outputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRuleSupportRule[];
+}
+export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRuleMatchRule {
+    /**
+     * The name of the rule.
+     */
+    name: string;
+    /**
+     * The definition of the Grok rule.
+     */
+    rule: string;
+}
+export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRuleSupportRule {
+    /**
+     * The name of the helper Grok rule.
+     */
+    name: string;
+    /**
+     * The definition of the helper Grok rule.
+     */
+    rule: string;
 }
 export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrokRule {
     /**
-     * A list of Grok parsing rules that define how to extract fields from the source field. Each rule must contain a name and a valid Grok pattern.
+     * A list of Grok parsing rules that define how to extract fields. Each rule must contain a name and a valid Grok pattern.
      */
     matchRules: outputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokRuleMatchRule[];
     /**
@@ -70561,6 +70758,10 @@ export interface ObservabilityPipelineConfigSource {
      * The `syslogNg` source listens for logs over TCP or UDP from a `syslog-ng` server using the syslog protocol.
      */
     syslogNgs?: outputs.ObservabilityPipelineConfigSourceSyslogNg[];
+    /**
+     * The `websocket` source establishes a persistent WebSocket connection to a remote endpoint and ingests log events as they are pushed by the server.
+     */
+    websocket?: outputs.ObservabilityPipelineConfigSourceWebsocket;
 }
 export interface ObservabilityPipelineConfigSourceAmazonDataFirehose {
     /**
@@ -71316,6 +71517,62 @@ export interface ObservabilityPipelineConfigSourceSyslogNgTls {
      */
     verifyCertificate?: boolean;
 }
+export interface ObservabilityPipelineConfigSourceWebsocket {
+    /**
+     * The authentication strategy used when connecting to the WebSocket server. Valid values are `none`, `basic`, `bearer`, `custom`.
+     */
+    authStrategy: string;
+    /**
+     * Name of the environment variable or secret that holds a custom header value. Used when `authStrategy` is `custom`.
+     */
+    customKey?: string;
+    /**
+     * The decoding format used to interpret incoming log events. Valid values are `bytes`, `gelf`, `json`, `syslog`.
+     */
+    decoding: string;
+    /**
+     * Name of the environment variable or secret that holds the password. Used when `authStrategy` is `basic`.
+     */
+    passwordKey?: string;
+    /**
+     * TLS configuration for the WebSocket connection. Set `mode` to `enabled` for server-certificate validation only, or `withClientCert` to additionally present a client certificate.
+     */
+    tls?: outputs.ObservabilityPipelineConfigSourceWebsocketTls;
+    /**
+     * Name of the environment variable or secret that holds the bearer token. Used when `authStrategy` is `bearer`.
+     */
+    tokenKey?: string;
+    /**
+     * Name of the environment variable or secret that holds the WebSocket URI to connect to.
+     */
+    uriKey?: string;
+    /**
+     * Name of the environment variable or secret that holds the username. Used when `authStrategy` is `basic`.
+     */
+    usernameKey?: string;
+}
+export interface ObservabilityPipelineConfigSourceWebsocketTls {
+    /**
+     * Path to the Certificate Authority (CA) file used to validate the server's TLS certificate.
+     */
+    caFile?: string;
+    /**
+     * Path to the client certificate file. Required when `mode` is `withClientCert`.
+     */
+    crtFile?: string;
+    /**
+     * Path to the private key file associated with the client certificate.
+     */
+    keyFile?: string;
+    /**
+     * Name of the environment variable or secret that holds the passphrase for the private key file.
+     */
+    keyPassKey?: string;
+    /**
+     * The TLS mode. Use `enabled` for server-only TLS, or `withClientCert` for mutual TLS with a client certificate. Valid values are `enabled`, `withClientCert`.
+     */
+    mode: string;
+}
 export interface OnCallEscalationPolicyStep {
     /**
      * Specifies how this escalation step will assign targets. Can be `default` (page all targets at once) or `round-robin`. Valid values are `default`, `round-robin`. Defaults to `"default"`.