cribl-control-plane 0.0.13__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of cribl-control-plane might be problematic. Click here for more details.
- cribl_control_plane/__init__.py +17 -0
- cribl_control_plane/_hooks/__init__.py +5 -0
- cribl_control_plane/_hooks/clientcredentials.py +211 -0
- cribl_control_plane/_hooks/registration.py +13 -0
- cribl_control_plane/_hooks/sdkhooks.py +81 -0
- cribl_control_plane/_hooks/types.py +112 -0
- cribl_control_plane/_version.py +15 -0
- cribl_control_plane/auth_sdk.py +184 -0
- cribl_control_plane/basesdk.py +358 -0
- cribl_control_plane/errors/__init__.py +60 -0
- cribl_control_plane/errors/apierror.py +38 -0
- cribl_control_plane/errors/criblcontrolplaneerror.py +26 -0
- cribl_control_plane/errors/error.py +24 -0
- cribl_control_plane/errors/healthstatus_error.py +38 -0
- cribl_control_plane/errors/no_response_error.py +13 -0
- cribl_control_plane/errors/responsevalidationerror.py +25 -0
- cribl_control_plane/health.py +166 -0
- cribl_control_plane/httpclient.py +126 -0
- cribl_control_plane/models/__init__.py +7305 -0
- cribl_control_plane/models/addhectokenrequest.py +34 -0
- cribl_control_plane/models/authtoken.py +13 -0
- cribl_control_plane/models/createinputhectokenbyidop.py +45 -0
- cribl_control_plane/models/createinputop.py +24 -0
- cribl_control_plane/models/createoutputop.py +24 -0
- cribl_control_plane/models/createoutputtestbyidop.py +46 -0
- cribl_control_plane/models/criblevent.py +14 -0
- cribl_control_plane/models/deleteinputbyidop.py +37 -0
- cribl_control_plane/models/deleteoutputbyidop.py +37 -0
- cribl_control_plane/models/deleteoutputpqbyidop.py +36 -0
- cribl_control_plane/models/getinputbyidop.py +37 -0
- cribl_control_plane/models/getoutputbyidop.py +37 -0
- cribl_control_plane/models/getoutputpqbyidop.py +36 -0
- cribl_control_plane/models/getoutputsamplesbyidop.py +37 -0
- cribl_control_plane/models/healthstatus.py +36 -0
- cribl_control_plane/models/input.py +199 -0
- cribl_control_plane/models/inputappscope.py +448 -0
- cribl_control_plane/models/inputazureblob.py +308 -0
- cribl_control_plane/models/inputcollection.py +208 -0
- cribl_control_plane/models/inputconfluentcloud.py +585 -0
- cribl_control_plane/models/inputcribl.py +165 -0
- cribl_control_plane/models/inputcriblhttp.py +341 -0
- cribl_control_plane/models/inputcribllakehttp.py +342 -0
- cribl_control_plane/models/inputcriblmetrics.py +175 -0
- cribl_control_plane/models/inputcribltcp.py +299 -0
- cribl_control_plane/models/inputcrowdstrike.py +410 -0
- cribl_control_plane/models/inputdatadogagent.py +364 -0
- cribl_control_plane/models/inputdatagen.py +180 -0
- cribl_control_plane/models/inputedgeprometheus.py +551 -0
- cribl_control_plane/models/inputelastic.py +494 -0
- cribl_control_plane/models/inputeventhub.py +360 -0
- cribl_control_plane/models/inputexec.py +213 -0
- cribl_control_plane/models/inputfile.py +259 -0
- cribl_control_plane/models/inputfirehose.py +341 -0
- cribl_control_plane/models/inputgooglepubsub.py +247 -0
- cribl_control_plane/models/inputgrafana_union.py +1247 -0
- cribl_control_plane/models/inputhttp.py +403 -0
- cribl_control_plane/models/inputhttpraw.py +407 -0
- cribl_control_plane/models/inputjournalfiles.py +208 -0
- cribl_control_plane/models/inputkafka.py +581 -0
- cribl_control_plane/models/inputkinesis.py +363 -0
- cribl_control_plane/models/inputkubeevents.py +182 -0
- cribl_control_plane/models/inputkubelogs.py +256 -0
- cribl_control_plane/models/inputkubemetrics.py +233 -0
- cribl_control_plane/models/inputloki.py +468 -0
- cribl_control_plane/models/inputmetrics.py +290 -0
- cribl_control_plane/models/inputmodeldriventelemetry.py +274 -0
- cribl_control_plane/models/inputmsk.py +654 -0
- cribl_control_plane/models/inputnetflow.py +224 -0
- cribl_control_plane/models/inputoffice365mgmt.py +384 -0
- cribl_control_plane/models/inputoffice365msgtrace.py +449 -0
- cribl_control_plane/models/inputoffice365service.py +377 -0
- cribl_control_plane/models/inputopentelemetry.py +516 -0
- cribl_control_plane/models/inputprometheus.py +464 -0
- cribl_control_plane/models/inputprometheusrw.py +470 -0
- cribl_control_plane/models/inputrawudp.py +207 -0
- cribl_control_plane/models/inputs3.py +416 -0
- cribl_control_plane/models/inputs3inventory.py +440 -0
- cribl_control_plane/models/inputsecuritylake.py +425 -0
- cribl_control_plane/models/inputsnmp.py +274 -0
- cribl_control_plane/models/inputsplunk.py +387 -0
- cribl_control_plane/models/inputsplunkhec.py +478 -0
- cribl_control_plane/models/inputsplunksearch.py +537 -0
- cribl_control_plane/models/inputsqs.py +320 -0
- cribl_control_plane/models/inputsyslog_union.py +759 -0
- cribl_control_plane/models/inputsystemmetrics.py +533 -0
- cribl_control_plane/models/inputsystemstate.py +417 -0
- cribl_control_plane/models/inputtcp.py +359 -0
- cribl_control_plane/models/inputtcpjson.py +334 -0
- cribl_control_plane/models/inputwef.py +498 -0
- cribl_control_plane/models/inputwindowsmetrics.py +457 -0
- cribl_control_plane/models/inputwineventlogs.py +222 -0
- cribl_control_plane/models/inputwiz.py +334 -0
- cribl_control_plane/models/inputzscalerhec.py +439 -0
- cribl_control_plane/models/listinputop.py +24 -0
- cribl_control_plane/models/listoutputop.py +24 -0
- cribl_control_plane/models/logininfo.py +16 -0
- cribl_control_plane/models/output.py +229 -0
- cribl_control_plane/models/outputazureblob.py +471 -0
- cribl_control_plane/models/outputazuredataexplorer.py +660 -0
- cribl_control_plane/models/outputazureeventhub.py +321 -0
- cribl_control_plane/models/outputazurelogs.py +386 -0
- cribl_control_plane/models/outputclickhouse.py +650 -0
- cribl_control_plane/models/outputcloudwatch.py +273 -0
- cribl_control_plane/models/outputconfluentcloud.py +591 -0
- cribl_control_plane/models/outputcriblhttp.py +494 -0
- cribl_control_plane/models/outputcribllake.py +396 -0
- cribl_control_plane/models/outputcribltcp.py +387 -0
- cribl_control_plane/models/outputcrowdstrikenextgensiem.py +410 -0
- cribl_control_plane/models/outputdatadog.py +472 -0
- cribl_control_plane/models/outputdataset.py +437 -0
- cribl_control_plane/models/outputdefault.py +55 -0
- cribl_control_plane/models/outputdevnull.py +50 -0
- cribl_control_plane/models/outputdiskspool.py +89 -0
- cribl_control_plane/models/outputdls3.py +560 -0
- cribl_control_plane/models/outputdynatracehttp.py +454 -0
- cribl_control_plane/models/outputdynatraceotlp.py +486 -0
- cribl_control_plane/models/outputelastic.py +494 -0
- cribl_control_plane/models/outputelasticcloud.py +407 -0
- cribl_control_plane/models/outputexabeam.py +297 -0
- cribl_control_plane/models/outputfilesystem.py +357 -0
- cribl_control_plane/models/outputgooglechronicle.py +486 -0
- cribl_control_plane/models/outputgooglecloudlogging.py +557 -0
- cribl_control_plane/models/outputgooglecloudstorage.py +499 -0
- cribl_control_plane/models/outputgooglepubsub.py +274 -0
- cribl_control_plane/models/outputgrafanacloud_union.py +1024 -0
- cribl_control_plane/models/outputgraphite.py +225 -0
- cribl_control_plane/models/outputhoneycomb.py +369 -0
- cribl_control_plane/models/outputhumiohec.py +389 -0
- cribl_control_plane/models/outputinfluxdb.py +523 -0
- cribl_control_plane/models/outputkafka.py +581 -0
- cribl_control_plane/models/outputkinesis.py +312 -0
- cribl_control_plane/models/outputloki.py +425 -0
- cribl_control_plane/models/outputminio.py +512 -0
- cribl_control_plane/models/outputmsk.py +654 -0
- cribl_control_plane/models/outputnetflow.py +80 -0
- cribl_control_plane/models/outputnewrelic.py +424 -0
- cribl_control_plane/models/outputnewrelicevents.py +401 -0
- cribl_control_plane/models/outputopentelemetry.py +669 -0
- cribl_control_plane/models/outputprometheus.py +485 -0
- cribl_control_plane/models/outputring.py +121 -0
- cribl_control_plane/models/outputrouter.py +83 -0
- cribl_control_plane/models/outputs3.py +556 -0
- cribl_control_plane/models/outputsamplesresponse.py +14 -0
- cribl_control_plane/models/outputsecuritylake.py +505 -0
- cribl_control_plane/models/outputsentinel.py +488 -0
- cribl_control_plane/models/outputsentineloneaisiem.py +505 -0
- cribl_control_plane/models/outputservicenow.py +543 -0
- cribl_control_plane/models/outputsignalfx.py +369 -0
- cribl_control_plane/models/outputsnmp.py +80 -0
- cribl_control_plane/models/outputsns.py +274 -0
- cribl_control_plane/models/outputsplunk.py +383 -0
- cribl_control_plane/models/outputsplunkhec.py +434 -0
- cribl_control_plane/models/outputsplunklb.py +558 -0
- cribl_control_plane/models/outputsqs.py +328 -0
- cribl_control_plane/models/outputstatsd.py +224 -0
- cribl_control_plane/models/outputstatsdext.py +225 -0
- cribl_control_plane/models/outputsumologic.py +378 -0
- cribl_control_plane/models/outputsyslog.py +415 -0
- cribl_control_plane/models/outputtcpjson.py +413 -0
- cribl_control_plane/models/outputtestrequest.py +15 -0
- cribl_control_plane/models/outputtestresponse.py +29 -0
- cribl_control_plane/models/outputwavefront.py +369 -0
- cribl_control_plane/models/outputwebhook.py +689 -0
- cribl_control_plane/models/outputxsiam.py +415 -0
- cribl_control_plane/models/schemeclientoauth.py +24 -0
- cribl_control_plane/models/security.py +36 -0
- cribl_control_plane/models/updatehectokenrequest.py +31 -0
- cribl_control_plane/models/updateinputbyidop.py +44 -0
- cribl_control_plane/models/updateinputhectokenbyidandtokenop.py +52 -0
- cribl_control_plane/models/updateoutputbyidop.py +44 -0
- cribl_control_plane/outputs.py +1615 -0
- cribl_control_plane/py.typed +1 -0
- cribl_control_plane/sdk.py +164 -0
- cribl_control_plane/sdkconfiguration.py +36 -0
- cribl_control_plane/sources.py +1355 -0
- cribl_control_plane/types/__init__.py +21 -0
- cribl_control_plane/types/basemodel.py +39 -0
- cribl_control_plane/utils/__init__.py +187 -0
- cribl_control_plane/utils/annotations.py +55 -0
- cribl_control_plane/utils/datetimes.py +23 -0
- cribl_control_plane/utils/enums.py +74 -0
- cribl_control_plane/utils/eventstreaming.py +238 -0
- cribl_control_plane/utils/forms.py +223 -0
- cribl_control_plane/utils/headers.py +136 -0
- cribl_control_plane/utils/logger.py +27 -0
- cribl_control_plane/utils/metadata.py +118 -0
- cribl_control_plane/utils/queryparams.py +205 -0
- cribl_control_plane/utils/requestbodies.py +66 -0
- cribl_control_plane/utils/retries.py +217 -0
- cribl_control_plane/utils/security.py +207 -0
- cribl_control_plane/utils/serializers.py +249 -0
- cribl_control_plane/utils/unmarshal_json_response.py +24 -0
- cribl_control_plane/utils/url.py +155 -0
- cribl_control_plane/utils/values.py +137 -0
- cribl_control_plane-0.0.13.dist-info/METADATA +489 -0
- cribl_control_plane-0.0.13.dist-info/RECORD +197 -0
- cribl_control_plane-0.0.13.dist-info/WHEEL +4 -0
|
@@ -0,0 +1,494 @@
|
|
|
1
|
+
"""Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
|
|
2
|
+
|
|
3
|
+
from __future__ import annotations
|
|
4
|
+
from cribl_control_plane import utils
|
|
5
|
+
from cribl_control_plane.types import BaseModel
|
|
6
|
+
from cribl_control_plane.utils import validate_open_enum
|
|
7
|
+
from enum import Enum
|
|
8
|
+
import pydantic
|
|
9
|
+
from pydantic.functional_validators import PlainValidator
|
|
10
|
+
from typing import List, Optional
|
|
11
|
+
from typing_extensions import Annotated, NotRequired, TypedDict
|
|
12
|
+
|
|
13
|
+
|
|
14
|
+
class OutputElasticType(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
15
|
+
ELASTIC = "elastic"
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
class OutputElasticExtraHTTPHeaderTypedDict(TypedDict):
|
|
19
|
+
value: str
|
|
20
|
+
name: NotRequired[str]
|
|
21
|
+
|
|
22
|
+
|
|
23
|
+
class OutputElasticExtraHTTPHeader(BaseModel):
|
|
24
|
+
value: str
|
|
25
|
+
|
|
26
|
+
name: Optional[str] = None
|
|
27
|
+
|
|
28
|
+
|
|
29
|
+
class OutputElasticFailedRequestLoggingMode(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
30
|
+
r"""Data to log when a request fails. All headers are redacted by default, unless listed as safe headers below."""
|
|
31
|
+
|
|
32
|
+
PAYLOAD = "payload"
|
|
33
|
+
PAYLOAD_AND_HEADERS = "payloadAndHeaders"
|
|
34
|
+
NONE = "none"
|
|
35
|
+
|
|
36
|
+
|
|
37
|
+
class OutputElasticResponseRetrySettingTypedDict(TypedDict):
|
|
38
|
+
http_status: float
|
|
39
|
+
r"""The HTTP response status code that will trigger retries"""
|
|
40
|
+
initial_backoff: NotRequired[float]
|
|
41
|
+
r"""How long, in milliseconds, Cribl Stream should wait before initiating backoff. Maximum interval is 600,000 ms (10 minutes)."""
|
|
42
|
+
backoff_rate: NotRequired[float]
|
|
43
|
+
r"""Base for exponential backoff. A value of 2 (default) means Cribl Stream will retry after 2 seconds, then 4 seconds, then 8 seconds, etc."""
|
|
44
|
+
max_backoff: NotRequired[float]
|
|
45
|
+
r"""The maximum backoff interval, in milliseconds, Cribl Stream should apply. Default (and minimum) is 10,000 ms (10 seconds); maximum is 180,000 ms (180 seconds)."""
|
|
46
|
+
|
|
47
|
+
|
|
48
|
+
class OutputElasticResponseRetrySetting(BaseModel):
|
|
49
|
+
http_status: Annotated[float, pydantic.Field(alias="httpStatus")]
|
|
50
|
+
r"""The HTTP response status code that will trigger retries"""
|
|
51
|
+
|
|
52
|
+
initial_backoff: Annotated[
|
|
53
|
+
Optional[float], pydantic.Field(alias="initialBackoff")
|
|
54
|
+
] = 1000
|
|
55
|
+
r"""How long, in milliseconds, Cribl Stream should wait before initiating backoff. Maximum interval is 600,000 ms (10 minutes)."""
|
|
56
|
+
|
|
57
|
+
backoff_rate: Annotated[Optional[float], pydantic.Field(alias="backoffRate")] = 2
|
|
58
|
+
r"""Base for exponential backoff. A value of 2 (default) means Cribl Stream will retry after 2 seconds, then 4 seconds, then 8 seconds, etc."""
|
|
59
|
+
|
|
60
|
+
max_backoff: Annotated[Optional[float], pydantic.Field(alias="maxBackoff")] = 10000
|
|
61
|
+
r"""The maximum backoff interval, in milliseconds, Cribl Stream should apply. Default (and minimum) is 10,000 ms (10 seconds); maximum is 180,000 ms (180 seconds)."""
|
|
62
|
+
|
|
63
|
+
|
|
64
|
+
class OutputElasticTimeoutRetrySettingsTypedDict(TypedDict):
|
|
65
|
+
timeout_retry: NotRequired[bool]
|
|
66
|
+
initial_backoff: NotRequired[float]
|
|
67
|
+
r"""How long, in milliseconds, Cribl Stream should wait before initiating backoff. Maximum interval is 600,000 ms (10 minutes)."""
|
|
68
|
+
backoff_rate: NotRequired[float]
|
|
69
|
+
r"""Base for exponential backoff. A value of 2 (default) means Cribl Stream will retry after 2 seconds, then 4 seconds, then 8 seconds, etc."""
|
|
70
|
+
max_backoff: NotRequired[float]
|
|
71
|
+
r"""The maximum backoff interval, in milliseconds, Cribl Stream should apply. Default (and minimum) is 10,000 ms (10 seconds); maximum is 180,000 ms (180 seconds)."""
|
|
72
|
+
|
|
73
|
+
|
|
74
|
+
class OutputElasticTimeoutRetrySettings(BaseModel):
|
|
75
|
+
timeout_retry: Annotated[Optional[bool], pydantic.Field(alias="timeoutRetry")] = (
|
|
76
|
+
False
|
|
77
|
+
)
|
|
78
|
+
|
|
79
|
+
initial_backoff: Annotated[
|
|
80
|
+
Optional[float], pydantic.Field(alias="initialBackoff")
|
|
81
|
+
] = 1000
|
|
82
|
+
r"""How long, in milliseconds, Cribl Stream should wait before initiating backoff. Maximum interval is 600,000 ms (10 minutes)."""
|
|
83
|
+
|
|
84
|
+
backoff_rate: Annotated[Optional[float], pydantic.Field(alias="backoffRate")] = 2
|
|
85
|
+
r"""Base for exponential backoff. A value of 2 (default) means Cribl Stream will retry after 2 seconds, then 4 seconds, then 8 seconds, etc."""
|
|
86
|
+
|
|
87
|
+
max_backoff: Annotated[Optional[float], pydantic.Field(alias="maxBackoff")] = 10000
|
|
88
|
+
r"""The maximum backoff interval, in milliseconds, Cribl Stream should apply. Default (and minimum) is 10,000 ms (10 seconds); maximum is 180,000 ms (180 seconds)."""
|
|
89
|
+
|
|
90
|
+
|
|
91
|
+
class OutputElasticExtraParamTypedDict(TypedDict):
|
|
92
|
+
name: str
|
|
93
|
+
value: str
|
|
94
|
+
|
|
95
|
+
|
|
96
|
+
class OutputElasticExtraParam(BaseModel):
|
|
97
|
+
name: str
|
|
98
|
+
|
|
99
|
+
value: str
|
|
100
|
+
|
|
101
|
+
|
|
102
|
+
class OutputElasticAuthenticationMethod(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
103
|
+
r"""Enter credentials directly, or select a stored secret"""
|
|
104
|
+
|
|
105
|
+
MANUAL = "manual"
|
|
106
|
+
SECRET = "secret"
|
|
107
|
+
MANUAL_API_KEY = "manualAPIKey"
|
|
108
|
+
TEXT_SECRET = "textSecret"
|
|
109
|
+
|
|
110
|
+
|
|
111
|
+
class OutputElasticAuthTypedDict(TypedDict):
|
|
112
|
+
disabled: NotRequired[bool]
|
|
113
|
+
auth_type: NotRequired[OutputElasticAuthenticationMethod]
|
|
114
|
+
r"""Enter credentials directly, or select a stored secret"""
|
|
115
|
+
|
|
116
|
+
|
|
117
|
+
class OutputElasticAuth(BaseModel):
|
|
118
|
+
disabled: Optional[bool] = True
|
|
119
|
+
|
|
120
|
+
auth_type: Annotated[
|
|
121
|
+
Annotated[
|
|
122
|
+
Optional[OutputElasticAuthenticationMethod],
|
|
123
|
+
PlainValidator(validate_open_enum(False)),
|
|
124
|
+
],
|
|
125
|
+
pydantic.Field(alias="authType"),
|
|
126
|
+
] = OutputElasticAuthenticationMethod.MANUAL
|
|
127
|
+
r"""Enter credentials directly, or select a stored secret"""
|
|
128
|
+
|
|
129
|
+
|
|
130
|
+
class ElasticVersion(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
131
|
+
r"""Optional Elasticsearch version, used to format events. If not specified, will auto-discover version."""
|
|
132
|
+
|
|
133
|
+
AUTO = "auto"
|
|
134
|
+
SIX = "6"
|
|
135
|
+
SEVEN = "7"
|
|
136
|
+
|
|
137
|
+
|
|
138
|
+
class WriteAction(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
139
|
+
r"""Action to use when writing events. Must be set to `Create` when writing to a data stream."""
|
|
140
|
+
|
|
141
|
+
INDEX = "index"
|
|
142
|
+
CREATE = "create"
|
|
143
|
+
|
|
144
|
+
|
|
145
|
+
class OutputElasticBackpressureBehavior(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
146
|
+
r"""How to handle events when all receivers are exerting backpressure"""
|
|
147
|
+
|
|
148
|
+
BLOCK = "block"
|
|
149
|
+
DROP = "drop"
|
|
150
|
+
QUEUE = "queue"
|
|
151
|
+
|
|
152
|
+
|
|
153
|
+
class OutputElasticURLTypedDict(TypedDict):
|
|
154
|
+
url: str
|
|
155
|
+
r"""The URL to an Elastic node to send events to. Example: http://elastic:9200/_bulk"""
|
|
156
|
+
weight: NotRequired[float]
|
|
157
|
+
r"""Assign a weight (>0) to each endpoint to indicate its traffic-handling capability"""
|
|
158
|
+
|
|
159
|
+
|
|
160
|
+
class OutputElasticURL(BaseModel):
|
|
161
|
+
url: str
|
|
162
|
+
r"""The URL to an Elastic node to send events to. Example: http://elastic:9200/_bulk"""
|
|
163
|
+
|
|
164
|
+
weight: Optional[float] = 1
|
|
165
|
+
r"""Assign a weight (>0) to each endpoint to indicate its traffic-handling capability"""
|
|
166
|
+
|
|
167
|
+
|
|
168
|
+
class OutputElasticCompression(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
169
|
+
r"""Codec to use to compress the persisted data"""
|
|
170
|
+
|
|
171
|
+
NONE = "none"
|
|
172
|
+
GZIP = "gzip"
|
|
173
|
+
|
|
174
|
+
|
|
175
|
+
class OutputElasticQueueFullBehavior(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
176
|
+
r"""How to handle events when the queue is exerting backpressure (full capacity or low disk). 'Block' is the same behavior as non-PQ blocking. 'Drop new data' throws away incoming data, while leaving the contents of the PQ unchanged."""
|
|
177
|
+
|
|
178
|
+
BLOCK = "block"
|
|
179
|
+
DROP = "drop"
|
|
180
|
+
|
|
181
|
+
|
|
182
|
+
class OutputElasticMode(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
183
|
+
r"""In Error mode, PQ writes events to the filesystem if the Destination is unavailable. In Backpressure mode, PQ writes events to the filesystem when it detects backpressure from the Destination. In Always On mode, PQ always writes events to the filesystem."""
|
|
184
|
+
|
|
185
|
+
ERROR = "error"
|
|
186
|
+
BACKPRESSURE = "backpressure"
|
|
187
|
+
ALWAYS = "always"
|
|
188
|
+
|
|
189
|
+
|
|
190
|
+
class OutputElasticPqControlsTypedDict(TypedDict):
|
|
191
|
+
pass
|
|
192
|
+
|
|
193
|
+
|
|
194
|
+
class OutputElasticPqControls(BaseModel):
|
|
195
|
+
pass
|
|
196
|
+
|
|
197
|
+
|
|
198
|
+
class OutputElasticTypedDict(TypedDict):
|
|
199
|
+
type: OutputElasticType
|
|
200
|
+
index: str
|
|
201
|
+
r"""Index or data stream to send events to. Must be a JavaScript expression (which can evaluate to a constant value), enclosed in quotes or backticks. Can be overwritten by an event's __index field."""
|
|
202
|
+
id: NotRequired[str]
|
|
203
|
+
r"""Unique ID for this output"""
|
|
204
|
+
pipeline: NotRequired[str]
|
|
205
|
+
r"""Pipeline to process data before sending out to this output"""
|
|
206
|
+
system_fields: NotRequired[List[str]]
|
|
207
|
+
r"""Fields to automatically add to events, such as cribl_pipe. Supports wildcards."""
|
|
208
|
+
environment: NotRequired[str]
|
|
209
|
+
r"""Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere."""
|
|
210
|
+
streamtags: NotRequired[List[str]]
|
|
211
|
+
r"""Tags for filtering and grouping in @{product}"""
|
|
212
|
+
load_balanced: NotRequired[bool]
|
|
213
|
+
r"""Enable for optimal performance. Even if you have one hostname, it can expand to multiple IPs. If disabled, consider enabling round-robin DNS."""
|
|
214
|
+
doc_type: NotRequired[str]
|
|
215
|
+
r"""Document type to use for events. Can be overwritten by an event's __type field."""
|
|
216
|
+
concurrency: NotRequired[float]
|
|
217
|
+
r"""Maximum number of ongoing requests before blocking"""
|
|
218
|
+
max_payload_size_kb: NotRequired[float]
|
|
219
|
+
r"""Maximum size, in KB, of the request body"""
|
|
220
|
+
max_payload_events: NotRequired[float]
|
|
221
|
+
r"""Maximum number of events to include in the request body. Default is 0 (unlimited)."""
|
|
222
|
+
compress: NotRequired[bool]
|
|
223
|
+
r"""Compress the payload body before sending"""
|
|
224
|
+
reject_unauthorized: NotRequired[bool]
|
|
225
|
+
r"""Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's).
|
|
226
|
+
Enabled by default. When this setting is also present in TLS Settings (Client Side),
|
|
227
|
+
that value will take precedence.
|
|
228
|
+
"""
|
|
229
|
+
timeout_sec: NotRequired[float]
|
|
230
|
+
r"""Amount of time, in seconds, to wait for a request to complete before canceling it"""
|
|
231
|
+
flush_period_sec: NotRequired[float]
|
|
232
|
+
r"""Maximum time between requests. Small values could cause the payload size to be smaller than the configured Body size limit."""
|
|
233
|
+
extra_http_headers: NotRequired[List[OutputElasticExtraHTTPHeaderTypedDict]]
|
|
234
|
+
r"""Headers to add to all events"""
|
|
235
|
+
failed_request_logging_mode: NotRequired[OutputElasticFailedRequestLoggingMode]
|
|
236
|
+
r"""Data to log when a request fails. All headers are redacted by default, unless listed as safe headers below."""
|
|
237
|
+
safe_headers: NotRequired[List[str]]
|
|
238
|
+
r"""List of headers that are safe to log in plain text"""
|
|
239
|
+
response_retry_settings: NotRequired[
|
|
240
|
+
List[OutputElasticResponseRetrySettingTypedDict]
|
|
241
|
+
]
|
|
242
|
+
r"""Automatically retry after unsuccessful response status codes, such as 429 (Too Many Requests) or 503 (Service Unavailable)"""
|
|
243
|
+
timeout_retry_settings: NotRequired[OutputElasticTimeoutRetrySettingsTypedDict]
|
|
244
|
+
response_honor_retry_after_header: NotRequired[bool]
|
|
245
|
+
r"""Honor any Retry-After header that specifies a delay (in seconds) no longer than 180 seconds after the retry request. @{product} limits the delay to 180 seconds, even if the Retry-After header specifies a longer delay. When enabled, takes precedence over user-configured retry options. When disabled, all Retry-After headers are ignored."""
|
|
246
|
+
extra_params: NotRequired[List[OutputElasticExtraParamTypedDict]]
|
|
247
|
+
auth: NotRequired[OutputElasticAuthTypedDict]
|
|
248
|
+
elastic_version: NotRequired[ElasticVersion]
|
|
249
|
+
r"""Optional Elasticsearch version, used to format events. If not specified, will auto-discover version."""
|
|
250
|
+
elastic_pipeline: NotRequired[str]
|
|
251
|
+
r"""Optional Elasticsearch destination pipeline"""
|
|
252
|
+
include_doc_id: NotRequired[bool]
|
|
253
|
+
r"""Include the `document_id` field when sending events to an Elastic TSDS (time series data stream)"""
|
|
254
|
+
write_action: NotRequired[WriteAction]
|
|
255
|
+
r"""Action to use when writing events. Must be set to `Create` when writing to a data stream."""
|
|
256
|
+
retry_partial_errors: NotRequired[bool]
|
|
257
|
+
r"""Retry failed events when a bulk request to Elastic is successful, but the response body returns an error for one or more events in the batch"""
|
|
258
|
+
on_backpressure: NotRequired[OutputElasticBackpressureBehavior]
|
|
259
|
+
r"""How to handle events when all receivers are exerting backpressure"""
|
|
260
|
+
description: NotRequired[str]
|
|
261
|
+
url: NotRequired[str]
|
|
262
|
+
r"""The Cloud ID or URL to an Elastic cluster to send events to. Example: http://elastic:9200/_bulk"""
|
|
263
|
+
use_round_robin_dns: NotRequired[bool]
|
|
264
|
+
r"""Enable round-robin DNS lookup. When a DNS server returns multiple addresses, @{product} will cycle through them in the order returned. For optimal performance, consider enabling this setting for non-load balanced destinations."""
|
|
265
|
+
exclude_self: NotRequired[bool]
|
|
266
|
+
r"""Exclude all IPs of the current host from the list of any resolved hostnames"""
|
|
267
|
+
urls: NotRequired[List[OutputElasticURLTypedDict]]
|
|
268
|
+
dns_resolve_period_sec: NotRequired[float]
|
|
269
|
+
r"""The interval in which to re-resolve any hostnames and pick up destinations from A records"""
|
|
270
|
+
load_balance_stats_period_sec: NotRequired[float]
|
|
271
|
+
r"""How far back in time to keep traffic stats for load balancing purposes"""
|
|
272
|
+
pq_max_file_size: NotRequired[str]
|
|
273
|
+
r"""The maximum size to store in each queue file before closing and optionally compressing (KB, MB, etc.)"""
|
|
274
|
+
pq_max_size: NotRequired[str]
|
|
275
|
+
r"""The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc."""
|
|
276
|
+
pq_path: NotRequired[str]
|
|
277
|
+
r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/<output-id>."""
|
|
278
|
+
pq_compress: NotRequired[OutputElasticCompression]
|
|
279
|
+
r"""Codec to use to compress the persisted data"""
|
|
280
|
+
pq_on_backpressure: NotRequired[OutputElasticQueueFullBehavior]
|
|
281
|
+
r"""How to handle events when the queue is exerting backpressure (full capacity or low disk). 'Block' is the same behavior as non-PQ blocking. 'Drop new data' throws away incoming data, while leaving the contents of the PQ unchanged."""
|
|
282
|
+
pq_mode: NotRequired[OutputElasticMode]
|
|
283
|
+
r"""In Error mode, PQ writes events to the filesystem if the Destination is unavailable. In Backpressure mode, PQ writes events to the filesystem when it detects backpressure from the Destination. In Always On mode, PQ always writes events to the filesystem."""
|
|
284
|
+
pq_controls: NotRequired[OutputElasticPqControlsTypedDict]
|
|
285
|
+
|
|
286
|
+
|
|
287
|
+
class OutputElastic(BaseModel):
|
|
288
|
+
type: Annotated[OutputElasticType, PlainValidator(validate_open_enum(False))]
|
|
289
|
+
|
|
290
|
+
index: str
|
|
291
|
+
r"""Index or data stream to send events to. Must be a JavaScript expression (which can evaluate to a constant value), enclosed in quotes or backticks. Can be overwritten by an event's __index field."""
|
|
292
|
+
|
|
293
|
+
id: Optional[str] = None
|
|
294
|
+
r"""Unique ID for this output"""
|
|
295
|
+
|
|
296
|
+
pipeline: Optional[str] = None
|
|
297
|
+
r"""Pipeline to process data before sending out to this output"""
|
|
298
|
+
|
|
299
|
+
system_fields: Annotated[
|
|
300
|
+
Optional[List[str]], pydantic.Field(alias="systemFields")
|
|
301
|
+
] = None
|
|
302
|
+
r"""Fields to automatically add to events, such as cribl_pipe. Supports wildcards."""
|
|
303
|
+
|
|
304
|
+
environment: Optional[str] = None
|
|
305
|
+
r"""Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere."""
|
|
306
|
+
|
|
307
|
+
streamtags: Optional[List[str]] = None
|
|
308
|
+
r"""Tags for filtering and grouping in @{product}"""
|
|
309
|
+
|
|
310
|
+
load_balanced: Annotated[Optional[bool], pydantic.Field(alias="loadBalanced")] = (
|
|
311
|
+
True
|
|
312
|
+
)
|
|
313
|
+
r"""Enable for optimal performance. Even if you have one hostname, it can expand to multiple IPs. If disabled, consider enabling round-robin DNS."""
|
|
314
|
+
|
|
315
|
+
doc_type: Annotated[Optional[str], pydantic.Field(alias="docType")] = None
|
|
316
|
+
r"""Document type to use for events. Can be overwritten by an event's __type field."""
|
|
317
|
+
|
|
318
|
+
concurrency: Optional[float] = 5
|
|
319
|
+
r"""Maximum number of ongoing requests before blocking"""
|
|
320
|
+
|
|
321
|
+
max_payload_size_kb: Annotated[
|
|
322
|
+
Optional[float], pydantic.Field(alias="maxPayloadSizeKB")
|
|
323
|
+
] = 4096
|
|
324
|
+
r"""Maximum size, in KB, of the request body"""
|
|
325
|
+
|
|
326
|
+
max_payload_events: Annotated[
|
|
327
|
+
Optional[float], pydantic.Field(alias="maxPayloadEvents")
|
|
328
|
+
] = 0
|
|
329
|
+
r"""Maximum number of events to include in the request body. Default is 0 (unlimited)."""
|
|
330
|
+
|
|
331
|
+
compress: Optional[bool] = True
|
|
332
|
+
r"""Compress the payload body before sending"""
|
|
333
|
+
|
|
334
|
+
reject_unauthorized: Annotated[
|
|
335
|
+
Optional[bool], pydantic.Field(alias="rejectUnauthorized")
|
|
336
|
+
] = True
|
|
337
|
+
r"""Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's).
|
|
338
|
+
Enabled by default. When this setting is also present in TLS Settings (Client Side),
|
|
339
|
+
that value will take precedence.
|
|
340
|
+
"""
|
|
341
|
+
|
|
342
|
+
timeout_sec: Annotated[Optional[float], pydantic.Field(alias="timeoutSec")] = 30
|
|
343
|
+
r"""Amount of time, in seconds, to wait for a request to complete before canceling it"""
|
|
344
|
+
|
|
345
|
+
flush_period_sec: Annotated[
|
|
346
|
+
Optional[float], pydantic.Field(alias="flushPeriodSec")
|
|
347
|
+
] = 1
|
|
348
|
+
r"""Maximum time between requests. Small values could cause the payload size to be smaller than the configured Body size limit."""
|
|
349
|
+
|
|
350
|
+
extra_http_headers: Annotated[
|
|
351
|
+
Optional[List[OutputElasticExtraHTTPHeader]],
|
|
352
|
+
pydantic.Field(alias="extraHttpHeaders"),
|
|
353
|
+
] = None
|
|
354
|
+
r"""Headers to add to all events"""
|
|
355
|
+
|
|
356
|
+
failed_request_logging_mode: Annotated[
|
|
357
|
+
Annotated[
|
|
358
|
+
Optional[OutputElasticFailedRequestLoggingMode],
|
|
359
|
+
PlainValidator(validate_open_enum(False)),
|
|
360
|
+
],
|
|
361
|
+
pydantic.Field(alias="failedRequestLoggingMode"),
|
|
362
|
+
] = OutputElasticFailedRequestLoggingMode.NONE
|
|
363
|
+
r"""Data to log when a request fails. All headers are redacted by default, unless listed as safe headers below."""
|
|
364
|
+
|
|
365
|
+
safe_headers: Annotated[
|
|
366
|
+
Optional[List[str]], pydantic.Field(alias="safeHeaders")
|
|
367
|
+
] = None
|
|
368
|
+
r"""List of headers that are safe to log in plain text"""
|
|
369
|
+
|
|
370
|
+
response_retry_settings: Annotated[
|
|
371
|
+
Optional[List[OutputElasticResponseRetrySetting]],
|
|
372
|
+
pydantic.Field(alias="responseRetrySettings"),
|
|
373
|
+
] = None
|
|
374
|
+
r"""Automatically retry after unsuccessful response status codes, such as 429 (Too Many Requests) or 503 (Service Unavailable)"""
|
|
375
|
+
|
|
376
|
+
timeout_retry_settings: Annotated[
|
|
377
|
+
Optional[OutputElasticTimeoutRetrySettings],
|
|
378
|
+
pydantic.Field(alias="timeoutRetrySettings"),
|
|
379
|
+
] = None
|
|
380
|
+
|
|
381
|
+
response_honor_retry_after_header: Annotated[
|
|
382
|
+
Optional[bool], pydantic.Field(alias="responseHonorRetryAfterHeader")
|
|
383
|
+
] = False
|
|
384
|
+
r"""Honor any Retry-After header that specifies a delay (in seconds) no longer than 180 seconds after the retry request. @{product} limits the delay to 180 seconds, even if the Retry-After header specifies a longer delay. When enabled, takes precedence over user-configured retry options. When disabled, all Retry-After headers are ignored."""
|
|
385
|
+
|
|
386
|
+
extra_params: Annotated[
|
|
387
|
+
Optional[List[OutputElasticExtraParam]], pydantic.Field(alias="extraParams")
|
|
388
|
+
] = None
|
|
389
|
+
|
|
390
|
+
auth: Optional[OutputElasticAuth] = None
|
|
391
|
+
|
|
392
|
+
elastic_version: Annotated[
|
|
393
|
+
Annotated[Optional[ElasticVersion], PlainValidator(validate_open_enum(False))],
|
|
394
|
+
pydantic.Field(alias="elasticVersion"),
|
|
395
|
+
] = ElasticVersion.AUTO
|
|
396
|
+
r"""Optional Elasticsearch version, used to format events. If not specified, will auto-discover version."""
|
|
397
|
+
|
|
398
|
+
elastic_pipeline: Annotated[
|
|
399
|
+
Optional[str], pydantic.Field(alias="elasticPipeline")
|
|
400
|
+
] = None
|
|
401
|
+
r"""Optional Elasticsearch destination pipeline"""
|
|
402
|
+
|
|
403
|
+
include_doc_id: Annotated[Optional[bool], pydantic.Field(alias="includeDocId")] = (
|
|
404
|
+
False
|
|
405
|
+
)
|
|
406
|
+
r"""Include the `document_id` field when sending events to an Elastic TSDS (time series data stream)"""
|
|
407
|
+
|
|
408
|
+
write_action: Annotated[
|
|
409
|
+
Annotated[Optional[WriteAction], PlainValidator(validate_open_enum(False))],
|
|
410
|
+
pydantic.Field(alias="writeAction"),
|
|
411
|
+
] = WriteAction.CREATE
|
|
412
|
+
r"""Action to use when writing events. Must be set to `Create` when writing to a data stream."""
|
|
413
|
+
|
|
414
|
+
retry_partial_errors: Annotated[
|
|
415
|
+
Optional[bool], pydantic.Field(alias="retryPartialErrors")
|
|
416
|
+
] = False
|
|
417
|
+
r"""Retry failed events when a bulk request to Elastic is successful, but the response body returns an error for one or more events in the batch"""
|
|
418
|
+
|
|
419
|
+
on_backpressure: Annotated[
|
|
420
|
+
Annotated[
|
|
421
|
+
Optional[OutputElasticBackpressureBehavior],
|
|
422
|
+
PlainValidator(validate_open_enum(False)),
|
|
423
|
+
],
|
|
424
|
+
pydantic.Field(alias="onBackpressure"),
|
|
425
|
+
] = OutputElasticBackpressureBehavior.BLOCK
|
|
426
|
+
r"""How to handle events when all receivers are exerting backpressure"""
|
|
427
|
+
|
|
428
|
+
description: Optional[str] = None
|
|
429
|
+
|
|
430
|
+
url: Optional[str] = None
|
|
431
|
+
r"""The Cloud ID or URL to an Elastic cluster to send events to. Example: http://elastic:9200/_bulk"""
|
|
432
|
+
|
|
433
|
+
use_round_robin_dns: Annotated[
|
|
434
|
+
Optional[bool], pydantic.Field(alias="useRoundRobinDns")
|
|
435
|
+
] = False
|
|
436
|
+
r"""Enable round-robin DNS lookup. When a DNS server returns multiple addresses, @{product} will cycle through them in the order returned. For optimal performance, consider enabling this setting for non-load balanced destinations."""
|
|
437
|
+
|
|
438
|
+
exclude_self: Annotated[Optional[bool], pydantic.Field(alias="excludeSelf")] = False
|
|
439
|
+
r"""Exclude all IPs of the current host from the list of any resolved hostnames"""
|
|
440
|
+
|
|
441
|
+
urls: Optional[List[OutputElasticURL]] = None
|
|
442
|
+
|
|
443
|
+
dns_resolve_period_sec: Annotated[
|
|
444
|
+
Optional[float], pydantic.Field(alias="dnsResolvePeriodSec")
|
|
445
|
+
] = 600
|
|
446
|
+
r"""The interval in which to re-resolve any hostnames and pick up destinations from A records"""
|
|
447
|
+
|
|
448
|
+
load_balance_stats_period_sec: Annotated[
|
|
449
|
+
Optional[float], pydantic.Field(alias="loadBalanceStatsPeriodSec")
|
|
450
|
+
] = 300
|
|
451
|
+
r"""How far back in time to keep traffic stats for load balancing purposes"""
|
|
452
|
+
|
|
453
|
+
pq_max_file_size: Annotated[
|
|
454
|
+
Optional[str], pydantic.Field(alias="pqMaxFileSize")
|
|
455
|
+
] = "1 MB"
|
|
456
|
+
r"""The maximum size to store in each queue file before closing and optionally compressing (KB, MB, etc.)"""
|
|
457
|
+
|
|
458
|
+
pq_max_size: Annotated[Optional[str], pydantic.Field(alias="pqMaxSize")] = "5GB"
|
|
459
|
+
r"""The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc."""
|
|
460
|
+
|
|
461
|
+
pq_path: Annotated[Optional[str], pydantic.Field(alias="pqPath")] = (
|
|
462
|
+
"$CRIBL_HOME/state/queues"
|
|
463
|
+
)
|
|
464
|
+
r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/<output-id>."""
|
|
465
|
+
|
|
466
|
+
pq_compress: Annotated[
|
|
467
|
+
Annotated[
|
|
468
|
+
Optional[OutputElasticCompression],
|
|
469
|
+
PlainValidator(validate_open_enum(False)),
|
|
470
|
+
],
|
|
471
|
+
pydantic.Field(alias="pqCompress"),
|
|
472
|
+
] = OutputElasticCompression.NONE
|
|
473
|
+
r"""Codec to use to compress the persisted data"""
|
|
474
|
+
|
|
475
|
+
pq_on_backpressure: Annotated[
|
|
476
|
+
Annotated[
|
|
477
|
+
Optional[OutputElasticQueueFullBehavior],
|
|
478
|
+
PlainValidator(validate_open_enum(False)),
|
|
479
|
+
],
|
|
480
|
+
pydantic.Field(alias="pqOnBackpressure"),
|
|
481
|
+
] = OutputElasticQueueFullBehavior.BLOCK
|
|
482
|
+
r"""How to handle events when the queue is exerting backpressure (full capacity or low disk). 'Block' is the same behavior as non-PQ blocking. 'Drop new data' throws away incoming data, while leaving the contents of the PQ unchanged."""
|
|
483
|
+
|
|
484
|
+
pq_mode: Annotated[
|
|
485
|
+
Annotated[
|
|
486
|
+
Optional[OutputElasticMode], PlainValidator(validate_open_enum(False))
|
|
487
|
+
],
|
|
488
|
+
pydantic.Field(alias="pqMode"),
|
|
489
|
+
] = OutputElasticMode.ERROR
|
|
490
|
+
r"""In Error mode, PQ writes events to the filesystem if the Destination is unavailable. In Backpressure mode, PQ writes events to the filesystem when it detects backpressure from the Destination. In Always On mode, PQ always writes events to the filesystem."""
|
|
491
|
+
|
|
492
|
+
pq_controls: Annotated[
|
|
493
|
+
Optional[OutputElasticPqControls], pydantic.Field(alias="pqControls")
|
|
494
|
+
] = None
|