cribl-control-plane 0.0.13__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of cribl-control-plane might be problematic. Click here for more details.
- cribl_control_plane/__init__.py +17 -0
- cribl_control_plane/_hooks/__init__.py +5 -0
- cribl_control_plane/_hooks/clientcredentials.py +211 -0
- cribl_control_plane/_hooks/registration.py +13 -0
- cribl_control_plane/_hooks/sdkhooks.py +81 -0
- cribl_control_plane/_hooks/types.py +112 -0
- cribl_control_plane/_version.py +15 -0
- cribl_control_plane/auth_sdk.py +184 -0
- cribl_control_plane/basesdk.py +358 -0
- cribl_control_plane/errors/__init__.py +60 -0
- cribl_control_plane/errors/apierror.py +38 -0
- cribl_control_plane/errors/criblcontrolplaneerror.py +26 -0
- cribl_control_plane/errors/error.py +24 -0
- cribl_control_plane/errors/healthstatus_error.py +38 -0
- cribl_control_plane/errors/no_response_error.py +13 -0
- cribl_control_plane/errors/responsevalidationerror.py +25 -0
- cribl_control_plane/health.py +166 -0
- cribl_control_plane/httpclient.py +126 -0
- cribl_control_plane/models/__init__.py +7305 -0
- cribl_control_plane/models/addhectokenrequest.py +34 -0
- cribl_control_plane/models/authtoken.py +13 -0
- cribl_control_plane/models/createinputhectokenbyidop.py +45 -0
- cribl_control_plane/models/createinputop.py +24 -0
- cribl_control_plane/models/createoutputop.py +24 -0
- cribl_control_plane/models/createoutputtestbyidop.py +46 -0
- cribl_control_plane/models/criblevent.py +14 -0
- cribl_control_plane/models/deleteinputbyidop.py +37 -0
- cribl_control_plane/models/deleteoutputbyidop.py +37 -0
- cribl_control_plane/models/deleteoutputpqbyidop.py +36 -0
- cribl_control_plane/models/getinputbyidop.py +37 -0
- cribl_control_plane/models/getoutputbyidop.py +37 -0
- cribl_control_plane/models/getoutputpqbyidop.py +36 -0
- cribl_control_plane/models/getoutputsamplesbyidop.py +37 -0
- cribl_control_plane/models/healthstatus.py +36 -0
- cribl_control_plane/models/input.py +199 -0
- cribl_control_plane/models/inputappscope.py +448 -0
- cribl_control_plane/models/inputazureblob.py +308 -0
- cribl_control_plane/models/inputcollection.py +208 -0
- cribl_control_plane/models/inputconfluentcloud.py +585 -0
- cribl_control_plane/models/inputcribl.py +165 -0
- cribl_control_plane/models/inputcriblhttp.py +341 -0
- cribl_control_plane/models/inputcribllakehttp.py +342 -0
- cribl_control_plane/models/inputcriblmetrics.py +175 -0
- cribl_control_plane/models/inputcribltcp.py +299 -0
- cribl_control_plane/models/inputcrowdstrike.py +410 -0
- cribl_control_plane/models/inputdatadogagent.py +364 -0
- cribl_control_plane/models/inputdatagen.py +180 -0
- cribl_control_plane/models/inputedgeprometheus.py +551 -0
- cribl_control_plane/models/inputelastic.py +494 -0
- cribl_control_plane/models/inputeventhub.py +360 -0
- cribl_control_plane/models/inputexec.py +213 -0
- cribl_control_plane/models/inputfile.py +259 -0
- cribl_control_plane/models/inputfirehose.py +341 -0
- cribl_control_plane/models/inputgooglepubsub.py +247 -0
- cribl_control_plane/models/inputgrafana_union.py +1247 -0
- cribl_control_plane/models/inputhttp.py +403 -0
- cribl_control_plane/models/inputhttpraw.py +407 -0
- cribl_control_plane/models/inputjournalfiles.py +208 -0
- cribl_control_plane/models/inputkafka.py +581 -0
- cribl_control_plane/models/inputkinesis.py +363 -0
- cribl_control_plane/models/inputkubeevents.py +182 -0
- cribl_control_plane/models/inputkubelogs.py +256 -0
- cribl_control_plane/models/inputkubemetrics.py +233 -0
- cribl_control_plane/models/inputloki.py +468 -0
- cribl_control_plane/models/inputmetrics.py +290 -0
- cribl_control_plane/models/inputmodeldriventelemetry.py +274 -0
- cribl_control_plane/models/inputmsk.py +654 -0
- cribl_control_plane/models/inputnetflow.py +224 -0
- cribl_control_plane/models/inputoffice365mgmt.py +384 -0
- cribl_control_plane/models/inputoffice365msgtrace.py +449 -0
- cribl_control_plane/models/inputoffice365service.py +377 -0
- cribl_control_plane/models/inputopentelemetry.py +516 -0
- cribl_control_plane/models/inputprometheus.py +464 -0
- cribl_control_plane/models/inputprometheusrw.py +470 -0
- cribl_control_plane/models/inputrawudp.py +207 -0
- cribl_control_plane/models/inputs3.py +416 -0
- cribl_control_plane/models/inputs3inventory.py +440 -0
- cribl_control_plane/models/inputsecuritylake.py +425 -0
- cribl_control_plane/models/inputsnmp.py +274 -0
- cribl_control_plane/models/inputsplunk.py +387 -0
- cribl_control_plane/models/inputsplunkhec.py +478 -0
- cribl_control_plane/models/inputsplunksearch.py +537 -0
- cribl_control_plane/models/inputsqs.py +320 -0
- cribl_control_plane/models/inputsyslog_union.py +759 -0
- cribl_control_plane/models/inputsystemmetrics.py +533 -0
- cribl_control_plane/models/inputsystemstate.py +417 -0
- cribl_control_plane/models/inputtcp.py +359 -0
- cribl_control_plane/models/inputtcpjson.py +334 -0
- cribl_control_plane/models/inputwef.py +498 -0
- cribl_control_plane/models/inputwindowsmetrics.py +457 -0
- cribl_control_plane/models/inputwineventlogs.py +222 -0
- cribl_control_plane/models/inputwiz.py +334 -0
- cribl_control_plane/models/inputzscalerhec.py +439 -0
- cribl_control_plane/models/listinputop.py +24 -0
- cribl_control_plane/models/listoutputop.py +24 -0
- cribl_control_plane/models/logininfo.py +16 -0
- cribl_control_plane/models/output.py +229 -0
- cribl_control_plane/models/outputazureblob.py +471 -0
- cribl_control_plane/models/outputazuredataexplorer.py +660 -0
- cribl_control_plane/models/outputazureeventhub.py +321 -0
- cribl_control_plane/models/outputazurelogs.py +386 -0
- cribl_control_plane/models/outputclickhouse.py +650 -0
- cribl_control_plane/models/outputcloudwatch.py +273 -0
- cribl_control_plane/models/outputconfluentcloud.py +591 -0
- cribl_control_plane/models/outputcriblhttp.py +494 -0
- cribl_control_plane/models/outputcribllake.py +396 -0
- cribl_control_plane/models/outputcribltcp.py +387 -0
- cribl_control_plane/models/outputcrowdstrikenextgensiem.py +410 -0
- cribl_control_plane/models/outputdatadog.py +472 -0
- cribl_control_plane/models/outputdataset.py +437 -0
- cribl_control_plane/models/outputdefault.py +55 -0
- cribl_control_plane/models/outputdevnull.py +50 -0
- cribl_control_plane/models/outputdiskspool.py +89 -0
- cribl_control_plane/models/outputdls3.py +560 -0
- cribl_control_plane/models/outputdynatracehttp.py +454 -0
- cribl_control_plane/models/outputdynatraceotlp.py +486 -0
- cribl_control_plane/models/outputelastic.py +494 -0
- cribl_control_plane/models/outputelasticcloud.py +407 -0
- cribl_control_plane/models/outputexabeam.py +297 -0
- cribl_control_plane/models/outputfilesystem.py +357 -0
- cribl_control_plane/models/outputgooglechronicle.py +486 -0
- cribl_control_plane/models/outputgooglecloudlogging.py +557 -0
- cribl_control_plane/models/outputgooglecloudstorage.py +499 -0
- cribl_control_plane/models/outputgooglepubsub.py +274 -0
- cribl_control_plane/models/outputgrafanacloud_union.py +1024 -0
- cribl_control_plane/models/outputgraphite.py +225 -0
- cribl_control_plane/models/outputhoneycomb.py +369 -0
- cribl_control_plane/models/outputhumiohec.py +389 -0
- cribl_control_plane/models/outputinfluxdb.py +523 -0
- cribl_control_plane/models/outputkafka.py +581 -0
- cribl_control_plane/models/outputkinesis.py +312 -0
- cribl_control_plane/models/outputloki.py +425 -0
- cribl_control_plane/models/outputminio.py +512 -0
- cribl_control_plane/models/outputmsk.py +654 -0
- cribl_control_plane/models/outputnetflow.py +80 -0
- cribl_control_plane/models/outputnewrelic.py +424 -0
- cribl_control_plane/models/outputnewrelicevents.py +401 -0
- cribl_control_plane/models/outputopentelemetry.py +669 -0
- cribl_control_plane/models/outputprometheus.py +485 -0
- cribl_control_plane/models/outputring.py +121 -0
- cribl_control_plane/models/outputrouter.py +83 -0
- cribl_control_plane/models/outputs3.py +556 -0
- cribl_control_plane/models/outputsamplesresponse.py +14 -0
- cribl_control_plane/models/outputsecuritylake.py +505 -0
- cribl_control_plane/models/outputsentinel.py +488 -0
- cribl_control_plane/models/outputsentineloneaisiem.py +505 -0
- cribl_control_plane/models/outputservicenow.py +543 -0
- cribl_control_plane/models/outputsignalfx.py +369 -0
- cribl_control_plane/models/outputsnmp.py +80 -0
- cribl_control_plane/models/outputsns.py +274 -0
- cribl_control_plane/models/outputsplunk.py +383 -0
- cribl_control_plane/models/outputsplunkhec.py +434 -0
- cribl_control_plane/models/outputsplunklb.py +558 -0
- cribl_control_plane/models/outputsqs.py +328 -0
- cribl_control_plane/models/outputstatsd.py +224 -0
- cribl_control_plane/models/outputstatsdext.py +225 -0
- cribl_control_plane/models/outputsumologic.py +378 -0
- cribl_control_plane/models/outputsyslog.py +415 -0
- cribl_control_plane/models/outputtcpjson.py +413 -0
- cribl_control_plane/models/outputtestrequest.py +15 -0
- cribl_control_plane/models/outputtestresponse.py +29 -0
- cribl_control_plane/models/outputwavefront.py +369 -0
- cribl_control_plane/models/outputwebhook.py +689 -0
- cribl_control_plane/models/outputxsiam.py +415 -0
- cribl_control_plane/models/schemeclientoauth.py +24 -0
- cribl_control_plane/models/security.py +36 -0
- cribl_control_plane/models/updatehectokenrequest.py +31 -0
- cribl_control_plane/models/updateinputbyidop.py +44 -0
- cribl_control_plane/models/updateinputhectokenbyidandtokenop.py +52 -0
- cribl_control_plane/models/updateoutputbyidop.py +44 -0
- cribl_control_plane/outputs.py +1615 -0
- cribl_control_plane/py.typed +1 -0
- cribl_control_plane/sdk.py +164 -0
- cribl_control_plane/sdkconfiguration.py +36 -0
- cribl_control_plane/sources.py +1355 -0
- cribl_control_plane/types/__init__.py +21 -0
- cribl_control_plane/types/basemodel.py +39 -0
- cribl_control_plane/utils/__init__.py +187 -0
- cribl_control_plane/utils/annotations.py +55 -0
- cribl_control_plane/utils/datetimes.py +23 -0
- cribl_control_plane/utils/enums.py +74 -0
- cribl_control_plane/utils/eventstreaming.py +238 -0
- cribl_control_plane/utils/forms.py +223 -0
- cribl_control_plane/utils/headers.py +136 -0
- cribl_control_plane/utils/logger.py +27 -0
- cribl_control_plane/utils/metadata.py +118 -0
- cribl_control_plane/utils/queryparams.py +205 -0
- cribl_control_plane/utils/requestbodies.py +66 -0
- cribl_control_plane/utils/retries.py +217 -0
- cribl_control_plane/utils/security.py +207 -0
- cribl_control_plane/utils/serializers.py +249 -0
- cribl_control_plane/utils/unmarshal_json_response.py +24 -0
- cribl_control_plane/utils/url.py +155 -0
- cribl_control_plane/utils/values.py +137 -0
- cribl_control_plane-0.0.13.dist-info/METADATA +489 -0
- cribl_control_plane-0.0.13.dist-info/RECORD +197 -0
- cribl_control_plane-0.0.13.dist-info/WHEEL +4 -0
|
@@ -0,0 +1,417 @@
|
|
|
1
|
+
"""Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
|
|
2
|
+
|
|
3
|
+
from __future__ import annotations
|
|
4
|
+
from cribl_control_plane import utils
|
|
5
|
+
from cribl_control_plane.types import BaseModel
|
|
6
|
+
from cribl_control_plane.utils import validate_open_enum
|
|
7
|
+
from enum import Enum
|
|
8
|
+
import pydantic
|
|
9
|
+
from pydantic.functional_validators import PlainValidator
|
|
10
|
+
from typing import List, Optional
|
|
11
|
+
from typing_extensions import Annotated, NotRequired, TypedDict
|
|
12
|
+
|
|
13
|
+
|
|
14
|
+
class InputSystemStateType(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
15
|
+
SYSTEM_STATE = "system_state"
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
class InputSystemStateConnectionTypedDict(TypedDict):
|
|
19
|
+
output: str
|
|
20
|
+
pipeline: NotRequired[str]
|
|
21
|
+
|
|
22
|
+
|
|
23
|
+
class InputSystemStateConnection(BaseModel):
|
|
24
|
+
output: str
|
|
25
|
+
|
|
26
|
+
pipeline: Optional[str] = None
|
|
27
|
+
|
|
28
|
+
|
|
29
|
+
class InputSystemStateMode(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
30
|
+
r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
|
|
31
|
+
|
|
32
|
+
SMART = "smart"
|
|
33
|
+
ALWAYS = "always"
|
|
34
|
+
|
|
35
|
+
|
|
36
|
+
class InputSystemStateCompression(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
37
|
+
r"""Codec to use to compress the persisted data"""
|
|
38
|
+
|
|
39
|
+
NONE = "none"
|
|
40
|
+
GZIP = "gzip"
|
|
41
|
+
|
|
42
|
+
|
|
43
|
+
class InputSystemStatePqTypedDict(TypedDict):
|
|
44
|
+
mode: NotRequired[InputSystemStateMode]
|
|
45
|
+
r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
|
|
46
|
+
max_buffer_size: NotRequired[float]
|
|
47
|
+
r"""The maximum number of events to hold in memory before writing the events to disk"""
|
|
48
|
+
commit_frequency: NotRequired[float]
|
|
49
|
+
r"""The number of events to send downstream before committing that Stream has read them"""
|
|
50
|
+
max_file_size: NotRequired[str]
|
|
51
|
+
r"""The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc."""
|
|
52
|
+
max_size: NotRequired[str]
|
|
53
|
+
r"""The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc."""
|
|
54
|
+
path: NotRequired[str]
|
|
55
|
+
r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>"""
|
|
56
|
+
compress: NotRequired[InputSystemStateCompression]
|
|
57
|
+
r"""Codec to use to compress the persisted data"""
|
|
58
|
+
|
|
59
|
+
|
|
60
|
+
class InputSystemStatePq(BaseModel):
|
|
61
|
+
mode: Annotated[
|
|
62
|
+
Optional[InputSystemStateMode], PlainValidator(validate_open_enum(False))
|
|
63
|
+
] = InputSystemStateMode.ALWAYS
|
|
64
|
+
r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
|
|
65
|
+
|
|
66
|
+
max_buffer_size: Annotated[
|
|
67
|
+
Optional[float], pydantic.Field(alias="maxBufferSize")
|
|
68
|
+
] = 1000
|
|
69
|
+
r"""The maximum number of events to hold in memory before writing the events to disk"""
|
|
70
|
+
|
|
71
|
+
commit_frequency: Annotated[
|
|
72
|
+
Optional[float], pydantic.Field(alias="commitFrequency")
|
|
73
|
+
] = 42
|
|
74
|
+
r"""The number of events to send downstream before committing that Stream has read them"""
|
|
75
|
+
|
|
76
|
+
max_file_size: Annotated[Optional[str], pydantic.Field(alias="maxFileSize")] = (
|
|
77
|
+
"1 MB"
|
|
78
|
+
)
|
|
79
|
+
r"""The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc."""
|
|
80
|
+
|
|
81
|
+
max_size: Annotated[Optional[str], pydantic.Field(alias="maxSize")] = "5GB"
|
|
82
|
+
r"""The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc."""
|
|
83
|
+
|
|
84
|
+
path: Optional[str] = "$CRIBL_HOME/state/queues"
|
|
85
|
+
r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>"""
|
|
86
|
+
|
|
87
|
+
compress: Annotated[
|
|
88
|
+
Optional[InputSystemStateCompression], PlainValidator(validate_open_enum(False))
|
|
89
|
+
] = InputSystemStateCompression.NONE
|
|
90
|
+
r"""Codec to use to compress the persisted data"""
|
|
91
|
+
|
|
92
|
+
|
|
93
|
+
class InputSystemStateMetadatumTypedDict(TypedDict):
|
|
94
|
+
name: str
|
|
95
|
+
value: str
|
|
96
|
+
r"""JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)"""
|
|
97
|
+
|
|
98
|
+
|
|
99
|
+
class InputSystemStateMetadatum(BaseModel):
|
|
100
|
+
name: str
|
|
101
|
+
|
|
102
|
+
value: str
|
|
103
|
+
r"""JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)"""
|
|
104
|
+
|
|
105
|
+
|
|
106
|
+
class HostsFileTypedDict(TypedDict):
|
|
107
|
+
r"""Creates events based on entries collected from the hosts file"""
|
|
108
|
+
|
|
109
|
+
enable: NotRequired[bool]
|
|
110
|
+
|
|
111
|
+
|
|
112
|
+
class HostsFile(BaseModel):
|
|
113
|
+
r"""Creates events based on entries collected from the hosts file"""
|
|
114
|
+
|
|
115
|
+
enable: Optional[bool] = True
|
|
116
|
+
|
|
117
|
+
|
|
118
|
+
class InterfacesTypedDict(TypedDict):
|
|
119
|
+
r"""Creates events for each of the host’s network interfaces"""
|
|
120
|
+
|
|
121
|
+
enable: NotRequired[bool]
|
|
122
|
+
|
|
123
|
+
|
|
124
|
+
class Interfaces(BaseModel):
|
|
125
|
+
r"""Creates events for each of the host’s network interfaces"""
|
|
126
|
+
|
|
127
|
+
enable: Optional[bool] = True
|
|
128
|
+
|
|
129
|
+
|
|
130
|
+
class DisksAndFileSystemsTypedDict(TypedDict):
|
|
131
|
+
r"""Creates events for physical disks, partitions, and file systems"""
|
|
132
|
+
|
|
133
|
+
enable: NotRequired[bool]
|
|
134
|
+
|
|
135
|
+
|
|
136
|
+
class DisksAndFileSystems(BaseModel):
|
|
137
|
+
r"""Creates events for physical disks, partitions, and file systems"""
|
|
138
|
+
|
|
139
|
+
enable: Optional[bool] = True
|
|
140
|
+
|
|
141
|
+
|
|
142
|
+
class HostInfoTypedDict(TypedDict):
|
|
143
|
+
r"""Creates events based on the host system’s current state"""
|
|
144
|
+
|
|
145
|
+
enable: NotRequired[bool]
|
|
146
|
+
|
|
147
|
+
|
|
148
|
+
class HostInfo(BaseModel):
|
|
149
|
+
r"""Creates events based on the host system’s current state"""
|
|
150
|
+
|
|
151
|
+
enable: Optional[bool] = True
|
|
152
|
+
|
|
153
|
+
|
|
154
|
+
class RoutesTypedDict(TypedDict):
|
|
155
|
+
r"""Creates events based on entries collected from the host’s network routes"""
|
|
156
|
+
|
|
157
|
+
enable: NotRequired[bool]
|
|
158
|
+
|
|
159
|
+
|
|
160
|
+
class Routes(BaseModel):
|
|
161
|
+
r"""Creates events based on entries collected from the host’s network routes"""
|
|
162
|
+
|
|
163
|
+
enable: Optional[bool] = True
|
|
164
|
+
|
|
165
|
+
|
|
166
|
+
class DNSTypedDict(TypedDict):
|
|
167
|
+
r"""Creates events for DNS resolvers and search entries"""
|
|
168
|
+
|
|
169
|
+
enable: NotRequired[bool]
|
|
170
|
+
|
|
171
|
+
|
|
172
|
+
class DNS(BaseModel):
|
|
173
|
+
r"""Creates events for DNS resolvers and search entries"""
|
|
174
|
+
|
|
175
|
+
enable: Optional[bool] = True
|
|
176
|
+
|
|
177
|
+
|
|
178
|
+
class UsersAndGroupsTypedDict(TypedDict):
|
|
179
|
+
r"""Creates events for local users and groups"""
|
|
180
|
+
|
|
181
|
+
enable: NotRequired[bool]
|
|
182
|
+
|
|
183
|
+
|
|
184
|
+
class UsersAndGroups(BaseModel):
|
|
185
|
+
r"""Creates events for local users and groups"""
|
|
186
|
+
|
|
187
|
+
enable: Optional[bool] = True
|
|
188
|
+
|
|
189
|
+
|
|
190
|
+
class FirewallTypedDict(TypedDict):
|
|
191
|
+
r"""Creates events for Firewall rules entries"""
|
|
192
|
+
|
|
193
|
+
enable: NotRequired[bool]
|
|
194
|
+
|
|
195
|
+
|
|
196
|
+
class Firewall(BaseModel):
|
|
197
|
+
r"""Creates events for Firewall rules entries"""
|
|
198
|
+
|
|
199
|
+
enable: Optional[bool] = True
|
|
200
|
+
|
|
201
|
+
|
|
202
|
+
class ServicesTypedDict(TypedDict):
|
|
203
|
+
r"""Creates events from the list of services"""
|
|
204
|
+
|
|
205
|
+
enable: NotRequired[bool]
|
|
206
|
+
|
|
207
|
+
|
|
208
|
+
class Services(BaseModel):
|
|
209
|
+
r"""Creates events from the list of services"""
|
|
210
|
+
|
|
211
|
+
enable: Optional[bool] = True
|
|
212
|
+
|
|
213
|
+
|
|
214
|
+
class ListeningPortsTypedDict(TypedDict):
|
|
215
|
+
r"""Creates events from list of listening ports"""
|
|
216
|
+
|
|
217
|
+
enable: NotRequired[bool]
|
|
218
|
+
|
|
219
|
+
|
|
220
|
+
class ListeningPorts(BaseModel):
|
|
221
|
+
r"""Creates events from list of listening ports"""
|
|
222
|
+
|
|
223
|
+
enable: Optional[bool] = True
|
|
224
|
+
|
|
225
|
+
|
|
226
|
+
class LoggedInUsersTypedDict(TypedDict):
|
|
227
|
+
r"""Creates events from list of logged-in users"""
|
|
228
|
+
|
|
229
|
+
enable: NotRequired[bool]
|
|
230
|
+
|
|
231
|
+
|
|
232
|
+
class LoggedInUsers(BaseModel):
|
|
233
|
+
r"""Creates events from list of logged-in users"""
|
|
234
|
+
|
|
235
|
+
enable: Optional[bool] = True
|
|
236
|
+
|
|
237
|
+
|
|
238
|
+
class CollectorsTypedDict(TypedDict):
|
|
239
|
+
hostsfile: NotRequired[HostsFileTypedDict]
|
|
240
|
+
r"""Creates events based on entries collected from the hosts file"""
|
|
241
|
+
interfaces: NotRequired[InterfacesTypedDict]
|
|
242
|
+
r"""Creates events for each of the host’s network interfaces"""
|
|
243
|
+
disk: NotRequired[DisksAndFileSystemsTypedDict]
|
|
244
|
+
r"""Creates events for physical disks, partitions, and file systems"""
|
|
245
|
+
metadata: NotRequired[HostInfoTypedDict]
|
|
246
|
+
r"""Creates events based on the host system’s current state"""
|
|
247
|
+
routes: NotRequired[RoutesTypedDict]
|
|
248
|
+
r"""Creates events based on entries collected from the host’s network routes"""
|
|
249
|
+
dns: NotRequired[DNSTypedDict]
|
|
250
|
+
r"""Creates events for DNS resolvers and search entries"""
|
|
251
|
+
user: NotRequired[UsersAndGroupsTypedDict]
|
|
252
|
+
r"""Creates events for local users and groups"""
|
|
253
|
+
firewall: NotRequired[FirewallTypedDict]
|
|
254
|
+
r"""Creates events for Firewall rules entries"""
|
|
255
|
+
services: NotRequired[ServicesTypedDict]
|
|
256
|
+
r"""Creates events from the list of services"""
|
|
257
|
+
ports: NotRequired[ListeningPortsTypedDict]
|
|
258
|
+
r"""Creates events from list of listening ports"""
|
|
259
|
+
login_users: NotRequired[LoggedInUsersTypedDict]
|
|
260
|
+
r"""Creates events from list of logged-in users"""
|
|
261
|
+
|
|
262
|
+
|
|
263
|
+
class Collectors(BaseModel):
|
|
264
|
+
hostsfile: Optional[HostsFile] = None
|
|
265
|
+
r"""Creates events based on entries collected from the hosts file"""
|
|
266
|
+
|
|
267
|
+
interfaces: Optional[Interfaces] = None
|
|
268
|
+
r"""Creates events for each of the host’s network interfaces"""
|
|
269
|
+
|
|
270
|
+
disk: Optional[DisksAndFileSystems] = None
|
|
271
|
+
r"""Creates events for physical disks, partitions, and file systems"""
|
|
272
|
+
|
|
273
|
+
metadata: Optional[HostInfo] = None
|
|
274
|
+
r"""Creates events based on the host system’s current state"""
|
|
275
|
+
|
|
276
|
+
routes: Optional[Routes] = None
|
|
277
|
+
r"""Creates events based on entries collected from the host’s network routes"""
|
|
278
|
+
|
|
279
|
+
dns: Optional[DNS] = None
|
|
280
|
+
r"""Creates events for DNS resolvers and search entries"""
|
|
281
|
+
|
|
282
|
+
user: Optional[UsersAndGroups] = None
|
|
283
|
+
r"""Creates events for local users and groups"""
|
|
284
|
+
|
|
285
|
+
firewall: Optional[Firewall] = None
|
|
286
|
+
r"""Creates events for Firewall rules entries"""
|
|
287
|
+
|
|
288
|
+
services: Optional[Services] = None
|
|
289
|
+
r"""Creates events from the list of services"""
|
|
290
|
+
|
|
291
|
+
ports: Optional[ListeningPorts] = None
|
|
292
|
+
r"""Creates events from list of listening ports"""
|
|
293
|
+
|
|
294
|
+
login_users: Annotated[
|
|
295
|
+
Optional[LoggedInUsers], pydantic.Field(alias="loginUsers")
|
|
296
|
+
] = None
|
|
297
|
+
r"""Creates events from list of logged-in users"""
|
|
298
|
+
|
|
299
|
+
|
|
300
|
+
class InputSystemStateDataCompressionFormat(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
301
|
+
NONE = "none"
|
|
302
|
+
GZIP = "gzip"
|
|
303
|
+
|
|
304
|
+
|
|
305
|
+
class InputSystemStatePersistenceTypedDict(TypedDict):
|
|
306
|
+
enable: NotRequired[bool]
|
|
307
|
+
r"""Spool metrics to disk for Cribl Edge and Search"""
|
|
308
|
+
time_window: NotRequired[str]
|
|
309
|
+
r"""Time span for each file bucket"""
|
|
310
|
+
max_data_size: NotRequired[str]
|
|
311
|
+
r"""Maximum disk space allowed to be consumed (examples: 420MB, 4GB). When limit is reached, older data will be deleted."""
|
|
312
|
+
max_data_time: NotRequired[str]
|
|
313
|
+
r"""Maximum amount of time to retain data (examples: 2h, 4d). When limit is reached, older data will be deleted."""
|
|
314
|
+
compress: NotRequired[InputSystemStateDataCompressionFormat]
|
|
315
|
+
dest_path: NotRequired[str]
|
|
316
|
+
r"""Path to use to write metrics. Defaults to $CRIBL_HOME/state/system_state"""
|
|
317
|
+
|
|
318
|
+
|
|
319
|
+
class InputSystemStatePersistence(BaseModel):
|
|
320
|
+
enable: Optional[bool] = False
|
|
321
|
+
r"""Spool metrics to disk for Cribl Edge and Search"""
|
|
322
|
+
|
|
323
|
+
time_window: Annotated[Optional[str], pydantic.Field(alias="timeWindow")] = "10m"
|
|
324
|
+
r"""Time span for each file bucket"""
|
|
325
|
+
|
|
326
|
+
max_data_size: Annotated[Optional[str], pydantic.Field(alias="maxDataSize")] = "1GB"
|
|
327
|
+
r"""Maximum disk space allowed to be consumed (examples: 420MB, 4GB). When limit is reached, older data will be deleted."""
|
|
328
|
+
|
|
329
|
+
max_data_time: Annotated[Optional[str], pydantic.Field(alias="maxDataTime")] = "24h"
|
|
330
|
+
r"""Maximum amount of time to retain data (examples: 2h, 4d). When limit is reached, older data will be deleted."""
|
|
331
|
+
|
|
332
|
+
compress: Annotated[
|
|
333
|
+
Optional[InputSystemStateDataCompressionFormat],
|
|
334
|
+
PlainValidator(validate_open_enum(False)),
|
|
335
|
+
] = InputSystemStateDataCompressionFormat.NONE
|
|
336
|
+
|
|
337
|
+
dest_path: Annotated[Optional[str], pydantic.Field(alias="destPath")] = (
|
|
338
|
+
"$CRIBL_HOME/state/system_state"
|
|
339
|
+
)
|
|
340
|
+
r"""Path to use to write metrics. Defaults to $CRIBL_HOME/state/system_state"""
|
|
341
|
+
|
|
342
|
+
|
|
343
|
+
class InputSystemStateTypedDict(TypedDict):
|
|
344
|
+
id: str
|
|
345
|
+
r"""Unique ID for this input"""
|
|
346
|
+
type: InputSystemStateType
|
|
347
|
+
disabled: NotRequired[bool]
|
|
348
|
+
pipeline: NotRequired[str]
|
|
349
|
+
r"""Pipeline to process data from this Source before sending it through the Routes"""
|
|
350
|
+
send_to_routes: NotRequired[bool]
|
|
351
|
+
r"""Select whether to send data to Routes, or directly to Destinations."""
|
|
352
|
+
environment: NotRequired[str]
|
|
353
|
+
r"""Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere."""
|
|
354
|
+
pq_enabled: NotRequired[bool]
|
|
355
|
+
r"""Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers)."""
|
|
356
|
+
streamtags: NotRequired[List[str]]
|
|
357
|
+
r"""Tags for filtering and grouping in @{product}"""
|
|
358
|
+
connections: NotRequired[List[InputSystemStateConnectionTypedDict]]
|
|
359
|
+
r"""Direct connections to Destinations, and optionally via a Pipeline or a Pack"""
|
|
360
|
+
pq: NotRequired[InputSystemStatePqTypedDict]
|
|
361
|
+
interval: NotRequired[float]
|
|
362
|
+
r"""Time, in seconds, between consecutive state collections. Default is 300 seconds (5 minutes)."""
|
|
363
|
+
metadata: NotRequired[List[InputSystemStateMetadatumTypedDict]]
|
|
364
|
+
r"""Fields to add to events from this input"""
|
|
365
|
+
collectors: NotRequired[CollectorsTypedDict]
|
|
366
|
+
persistence: NotRequired[InputSystemStatePersistenceTypedDict]
|
|
367
|
+
disable_native_module: NotRequired[bool]
|
|
368
|
+
r"""Enable to use built-in tools (PowerShell) to collect events instead of native API (default) [Learn more](https://docs.cribl.io/edge/sources-system-state/#advanced-tab)"""
|
|
369
|
+
description: NotRequired[str]
|
|
370
|
+
|
|
371
|
+
|
|
372
|
+
class InputSystemState(BaseModel):
|
|
373
|
+
id: str
|
|
374
|
+
r"""Unique ID for this input"""
|
|
375
|
+
|
|
376
|
+
type: Annotated[InputSystemStateType, PlainValidator(validate_open_enum(False))]
|
|
377
|
+
|
|
378
|
+
disabled: Optional[bool] = False
|
|
379
|
+
|
|
380
|
+
pipeline: Optional[str] = None
|
|
381
|
+
r"""Pipeline to process data from this Source before sending it through the Routes"""
|
|
382
|
+
|
|
383
|
+
send_to_routes: Annotated[Optional[bool], pydantic.Field(alias="sendToRoutes")] = (
|
|
384
|
+
True
|
|
385
|
+
)
|
|
386
|
+
r"""Select whether to send data to Routes, or directly to Destinations."""
|
|
387
|
+
|
|
388
|
+
environment: Optional[str] = None
|
|
389
|
+
r"""Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere."""
|
|
390
|
+
|
|
391
|
+
pq_enabled: Annotated[Optional[bool], pydantic.Field(alias="pqEnabled")] = False
|
|
392
|
+
r"""Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers)."""
|
|
393
|
+
|
|
394
|
+
streamtags: Optional[List[str]] = None
|
|
395
|
+
r"""Tags for filtering and grouping in @{product}"""
|
|
396
|
+
|
|
397
|
+
connections: Optional[List[InputSystemStateConnection]] = None
|
|
398
|
+
r"""Direct connections to Destinations, and optionally via a Pipeline or a Pack"""
|
|
399
|
+
|
|
400
|
+
pq: Optional[InputSystemStatePq] = None
|
|
401
|
+
|
|
402
|
+
interval: Optional[float] = 300
|
|
403
|
+
r"""Time, in seconds, between consecutive state collections. Default is 300 seconds (5 minutes)."""
|
|
404
|
+
|
|
405
|
+
metadata: Optional[List[InputSystemStateMetadatum]] = None
|
|
406
|
+
r"""Fields to add to events from this input"""
|
|
407
|
+
|
|
408
|
+
collectors: Optional[Collectors] = None
|
|
409
|
+
|
|
410
|
+
persistence: Optional[InputSystemStatePersistence] = None
|
|
411
|
+
|
|
412
|
+
disable_native_module: Annotated[
|
|
413
|
+
Optional[bool], pydantic.Field(alias="disableNativeModule")
|
|
414
|
+
] = False
|
|
415
|
+
r"""Enable to use built-in tools (PowerShell) to collect events instead of native API (default) [Learn more](https://docs.cribl.io/edge/sources-system-state/#advanced-tab)"""
|
|
416
|
+
|
|
417
|
+
description: Optional[str] = None
|