cribl-control-plane 0.0.13__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of cribl-control-plane might be problematic. Click here for more details.
- cribl_control_plane/__init__.py +17 -0
- cribl_control_plane/_hooks/__init__.py +5 -0
- cribl_control_plane/_hooks/clientcredentials.py +211 -0
- cribl_control_plane/_hooks/registration.py +13 -0
- cribl_control_plane/_hooks/sdkhooks.py +81 -0
- cribl_control_plane/_hooks/types.py +112 -0
- cribl_control_plane/_version.py +15 -0
- cribl_control_plane/auth_sdk.py +184 -0
- cribl_control_plane/basesdk.py +358 -0
- cribl_control_plane/errors/__init__.py +60 -0
- cribl_control_plane/errors/apierror.py +38 -0
- cribl_control_plane/errors/criblcontrolplaneerror.py +26 -0
- cribl_control_plane/errors/error.py +24 -0
- cribl_control_plane/errors/healthstatus_error.py +38 -0
- cribl_control_plane/errors/no_response_error.py +13 -0
- cribl_control_plane/errors/responsevalidationerror.py +25 -0
- cribl_control_plane/health.py +166 -0
- cribl_control_plane/httpclient.py +126 -0
- cribl_control_plane/models/__init__.py +7305 -0
- cribl_control_plane/models/addhectokenrequest.py +34 -0
- cribl_control_plane/models/authtoken.py +13 -0
- cribl_control_plane/models/createinputhectokenbyidop.py +45 -0
- cribl_control_plane/models/createinputop.py +24 -0
- cribl_control_plane/models/createoutputop.py +24 -0
- cribl_control_plane/models/createoutputtestbyidop.py +46 -0
- cribl_control_plane/models/criblevent.py +14 -0
- cribl_control_plane/models/deleteinputbyidop.py +37 -0
- cribl_control_plane/models/deleteoutputbyidop.py +37 -0
- cribl_control_plane/models/deleteoutputpqbyidop.py +36 -0
- cribl_control_plane/models/getinputbyidop.py +37 -0
- cribl_control_plane/models/getoutputbyidop.py +37 -0
- cribl_control_plane/models/getoutputpqbyidop.py +36 -0
- cribl_control_plane/models/getoutputsamplesbyidop.py +37 -0
- cribl_control_plane/models/healthstatus.py +36 -0
- cribl_control_plane/models/input.py +199 -0
- cribl_control_plane/models/inputappscope.py +448 -0
- cribl_control_plane/models/inputazureblob.py +308 -0
- cribl_control_plane/models/inputcollection.py +208 -0
- cribl_control_plane/models/inputconfluentcloud.py +585 -0
- cribl_control_plane/models/inputcribl.py +165 -0
- cribl_control_plane/models/inputcriblhttp.py +341 -0
- cribl_control_plane/models/inputcribllakehttp.py +342 -0
- cribl_control_plane/models/inputcriblmetrics.py +175 -0
- cribl_control_plane/models/inputcribltcp.py +299 -0
- cribl_control_plane/models/inputcrowdstrike.py +410 -0
- cribl_control_plane/models/inputdatadogagent.py +364 -0
- cribl_control_plane/models/inputdatagen.py +180 -0
- cribl_control_plane/models/inputedgeprometheus.py +551 -0
- cribl_control_plane/models/inputelastic.py +494 -0
- cribl_control_plane/models/inputeventhub.py +360 -0
- cribl_control_plane/models/inputexec.py +213 -0
- cribl_control_plane/models/inputfile.py +259 -0
- cribl_control_plane/models/inputfirehose.py +341 -0
- cribl_control_plane/models/inputgooglepubsub.py +247 -0
- cribl_control_plane/models/inputgrafana_union.py +1247 -0
- cribl_control_plane/models/inputhttp.py +403 -0
- cribl_control_plane/models/inputhttpraw.py +407 -0
- cribl_control_plane/models/inputjournalfiles.py +208 -0
- cribl_control_plane/models/inputkafka.py +581 -0
- cribl_control_plane/models/inputkinesis.py +363 -0
- cribl_control_plane/models/inputkubeevents.py +182 -0
- cribl_control_plane/models/inputkubelogs.py +256 -0
- cribl_control_plane/models/inputkubemetrics.py +233 -0
- cribl_control_plane/models/inputloki.py +468 -0
- cribl_control_plane/models/inputmetrics.py +290 -0
- cribl_control_plane/models/inputmodeldriventelemetry.py +274 -0
- cribl_control_plane/models/inputmsk.py +654 -0
- cribl_control_plane/models/inputnetflow.py +224 -0
- cribl_control_plane/models/inputoffice365mgmt.py +384 -0
- cribl_control_plane/models/inputoffice365msgtrace.py +449 -0
- cribl_control_plane/models/inputoffice365service.py +377 -0
- cribl_control_plane/models/inputopentelemetry.py +516 -0
- cribl_control_plane/models/inputprometheus.py +464 -0
- cribl_control_plane/models/inputprometheusrw.py +470 -0
- cribl_control_plane/models/inputrawudp.py +207 -0
- cribl_control_plane/models/inputs3.py +416 -0
- cribl_control_plane/models/inputs3inventory.py +440 -0
- cribl_control_plane/models/inputsecuritylake.py +425 -0
- cribl_control_plane/models/inputsnmp.py +274 -0
- cribl_control_plane/models/inputsplunk.py +387 -0
- cribl_control_plane/models/inputsplunkhec.py +478 -0
- cribl_control_plane/models/inputsplunksearch.py +537 -0
- cribl_control_plane/models/inputsqs.py +320 -0
- cribl_control_plane/models/inputsyslog_union.py +759 -0
- cribl_control_plane/models/inputsystemmetrics.py +533 -0
- cribl_control_plane/models/inputsystemstate.py +417 -0
- cribl_control_plane/models/inputtcp.py +359 -0
- cribl_control_plane/models/inputtcpjson.py +334 -0
- cribl_control_plane/models/inputwef.py +498 -0
- cribl_control_plane/models/inputwindowsmetrics.py +457 -0
- cribl_control_plane/models/inputwineventlogs.py +222 -0
- cribl_control_plane/models/inputwiz.py +334 -0
- cribl_control_plane/models/inputzscalerhec.py +439 -0
- cribl_control_plane/models/listinputop.py +24 -0
- cribl_control_plane/models/listoutputop.py +24 -0
- cribl_control_plane/models/logininfo.py +16 -0
- cribl_control_plane/models/output.py +229 -0
- cribl_control_plane/models/outputazureblob.py +471 -0
- cribl_control_plane/models/outputazuredataexplorer.py +660 -0
- cribl_control_plane/models/outputazureeventhub.py +321 -0
- cribl_control_plane/models/outputazurelogs.py +386 -0
- cribl_control_plane/models/outputclickhouse.py +650 -0
- cribl_control_plane/models/outputcloudwatch.py +273 -0
- cribl_control_plane/models/outputconfluentcloud.py +591 -0
- cribl_control_plane/models/outputcriblhttp.py +494 -0
- cribl_control_plane/models/outputcribllake.py +396 -0
- cribl_control_plane/models/outputcribltcp.py +387 -0
- cribl_control_plane/models/outputcrowdstrikenextgensiem.py +410 -0
- cribl_control_plane/models/outputdatadog.py +472 -0
- cribl_control_plane/models/outputdataset.py +437 -0
- cribl_control_plane/models/outputdefault.py +55 -0
- cribl_control_plane/models/outputdevnull.py +50 -0
- cribl_control_plane/models/outputdiskspool.py +89 -0
- cribl_control_plane/models/outputdls3.py +560 -0
- cribl_control_plane/models/outputdynatracehttp.py +454 -0
- cribl_control_plane/models/outputdynatraceotlp.py +486 -0
- cribl_control_plane/models/outputelastic.py +494 -0
- cribl_control_plane/models/outputelasticcloud.py +407 -0
- cribl_control_plane/models/outputexabeam.py +297 -0
- cribl_control_plane/models/outputfilesystem.py +357 -0
- cribl_control_plane/models/outputgooglechronicle.py +486 -0
- cribl_control_plane/models/outputgooglecloudlogging.py +557 -0
- cribl_control_plane/models/outputgooglecloudstorage.py +499 -0
- cribl_control_plane/models/outputgooglepubsub.py +274 -0
- cribl_control_plane/models/outputgrafanacloud_union.py +1024 -0
- cribl_control_plane/models/outputgraphite.py +225 -0
- cribl_control_plane/models/outputhoneycomb.py +369 -0
- cribl_control_plane/models/outputhumiohec.py +389 -0
- cribl_control_plane/models/outputinfluxdb.py +523 -0
- cribl_control_plane/models/outputkafka.py +581 -0
- cribl_control_plane/models/outputkinesis.py +312 -0
- cribl_control_plane/models/outputloki.py +425 -0
- cribl_control_plane/models/outputminio.py +512 -0
- cribl_control_plane/models/outputmsk.py +654 -0
- cribl_control_plane/models/outputnetflow.py +80 -0
- cribl_control_plane/models/outputnewrelic.py +424 -0
- cribl_control_plane/models/outputnewrelicevents.py +401 -0
- cribl_control_plane/models/outputopentelemetry.py +669 -0
- cribl_control_plane/models/outputprometheus.py +485 -0
- cribl_control_plane/models/outputring.py +121 -0
- cribl_control_plane/models/outputrouter.py +83 -0
- cribl_control_plane/models/outputs3.py +556 -0
- cribl_control_plane/models/outputsamplesresponse.py +14 -0
- cribl_control_plane/models/outputsecuritylake.py +505 -0
- cribl_control_plane/models/outputsentinel.py +488 -0
- cribl_control_plane/models/outputsentineloneaisiem.py +505 -0
- cribl_control_plane/models/outputservicenow.py +543 -0
- cribl_control_plane/models/outputsignalfx.py +369 -0
- cribl_control_plane/models/outputsnmp.py +80 -0
- cribl_control_plane/models/outputsns.py +274 -0
- cribl_control_plane/models/outputsplunk.py +383 -0
- cribl_control_plane/models/outputsplunkhec.py +434 -0
- cribl_control_plane/models/outputsplunklb.py +558 -0
- cribl_control_plane/models/outputsqs.py +328 -0
- cribl_control_plane/models/outputstatsd.py +224 -0
- cribl_control_plane/models/outputstatsdext.py +225 -0
- cribl_control_plane/models/outputsumologic.py +378 -0
- cribl_control_plane/models/outputsyslog.py +415 -0
- cribl_control_plane/models/outputtcpjson.py +413 -0
- cribl_control_plane/models/outputtestrequest.py +15 -0
- cribl_control_plane/models/outputtestresponse.py +29 -0
- cribl_control_plane/models/outputwavefront.py +369 -0
- cribl_control_plane/models/outputwebhook.py +689 -0
- cribl_control_plane/models/outputxsiam.py +415 -0
- cribl_control_plane/models/schemeclientoauth.py +24 -0
- cribl_control_plane/models/security.py +36 -0
- cribl_control_plane/models/updatehectokenrequest.py +31 -0
- cribl_control_plane/models/updateinputbyidop.py +44 -0
- cribl_control_plane/models/updateinputhectokenbyidandtokenop.py +52 -0
- cribl_control_plane/models/updateoutputbyidop.py +44 -0
- cribl_control_plane/outputs.py +1615 -0
- cribl_control_plane/py.typed +1 -0
- cribl_control_plane/sdk.py +164 -0
- cribl_control_plane/sdkconfiguration.py +36 -0
- cribl_control_plane/sources.py +1355 -0
- cribl_control_plane/types/__init__.py +21 -0
- cribl_control_plane/types/basemodel.py +39 -0
- cribl_control_plane/utils/__init__.py +187 -0
- cribl_control_plane/utils/annotations.py +55 -0
- cribl_control_plane/utils/datetimes.py +23 -0
- cribl_control_plane/utils/enums.py +74 -0
- cribl_control_plane/utils/eventstreaming.py +238 -0
- cribl_control_plane/utils/forms.py +223 -0
- cribl_control_plane/utils/headers.py +136 -0
- cribl_control_plane/utils/logger.py +27 -0
- cribl_control_plane/utils/metadata.py +118 -0
- cribl_control_plane/utils/queryparams.py +205 -0
- cribl_control_plane/utils/requestbodies.py +66 -0
- cribl_control_plane/utils/retries.py +217 -0
- cribl_control_plane/utils/security.py +207 -0
- cribl_control_plane/utils/serializers.py +249 -0
- cribl_control_plane/utils/unmarshal_json_response.py +24 -0
- cribl_control_plane/utils/url.py +155 -0
- cribl_control_plane/utils/values.py +137 -0
- cribl_control_plane-0.0.13.dist-info/METADATA +489 -0
- cribl_control_plane-0.0.13.dist-info/RECORD +197 -0
- cribl_control_plane-0.0.13.dist-info/WHEEL +4 -0
|
@@ -0,0 +1,415 @@
|
|
|
1
|
+
"""Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
|
|
2
|
+
|
|
3
|
+
from __future__ import annotations
|
|
4
|
+
from cribl_control_plane import utils
|
|
5
|
+
from cribl_control_plane.types import BaseModel
|
|
6
|
+
from cribl_control_plane.utils import validate_open_enum
|
|
7
|
+
from enum import Enum
|
|
8
|
+
import pydantic
|
|
9
|
+
from pydantic.functional_validators import PlainValidator
|
|
10
|
+
from typing import List, Optional
|
|
11
|
+
from typing_extensions import Annotated, NotRequired, TypedDict
|
|
12
|
+
|
|
13
|
+
|
|
14
|
+
class OutputSyslogType(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
15
|
+
SYSLOG = "syslog"
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
class OutputSyslogProtocol(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
19
|
+
r"""The network protocol to use for sending out syslog messages"""
|
|
20
|
+
|
|
21
|
+
TCP = "tcp"
|
|
22
|
+
UDP = "udp"
|
|
23
|
+
|
|
24
|
+
|
|
25
|
+
class Facility(int, Enum, metaclass=utils.OpenEnumMeta):
|
|
26
|
+
r"""Default value for message facility. Will be overwritten by value of __facility if set. Defaults to user."""
|
|
27
|
+
|
|
28
|
+
ZERO = 0
|
|
29
|
+
ONE = 1
|
|
30
|
+
TWO = 2
|
|
31
|
+
THREE = 3
|
|
32
|
+
FOUR = 4
|
|
33
|
+
FIVE = 5
|
|
34
|
+
SIX = 6
|
|
35
|
+
SEVEN = 7
|
|
36
|
+
EIGHT = 8
|
|
37
|
+
NINE = 9
|
|
38
|
+
TEN = 10
|
|
39
|
+
ELEVEN = 11
|
|
40
|
+
TWELVE = 12
|
|
41
|
+
THIRTEEN = 13
|
|
42
|
+
FOURTEEN = 14
|
|
43
|
+
FIFTEEN = 15
|
|
44
|
+
SIXTEEN = 16
|
|
45
|
+
SEVENTEEN = 17
|
|
46
|
+
EIGHTEEN = 18
|
|
47
|
+
NINETEEN = 19
|
|
48
|
+
TWENTY = 20
|
|
49
|
+
TWENTY_ONE = 21
|
|
50
|
+
|
|
51
|
+
|
|
52
|
+
class OutputSyslogSeverity(int, Enum, metaclass=utils.OpenEnumMeta):
|
|
53
|
+
r"""Default value for message severity. Will be overwritten by value of __severity if set. Defaults to notice."""
|
|
54
|
+
|
|
55
|
+
ZERO = 0
|
|
56
|
+
ONE = 1
|
|
57
|
+
TWO = 2
|
|
58
|
+
THREE = 3
|
|
59
|
+
FOUR = 4
|
|
60
|
+
FIVE = 5
|
|
61
|
+
SIX = 6
|
|
62
|
+
SEVEN = 7
|
|
63
|
+
|
|
64
|
+
|
|
65
|
+
class OutputSyslogMessageFormat(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
66
|
+
r"""The syslog message format depending on the receiver's support"""
|
|
67
|
+
|
|
68
|
+
RFC3164 = "rfc3164"
|
|
69
|
+
RFC5424 = "rfc5424"
|
|
70
|
+
|
|
71
|
+
|
|
72
|
+
class TimestampFormat(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
73
|
+
r"""Timestamp format to use when serializing event's time field"""
|
|
74
|
+
|
|
75
|
+
SYSLOG = "syslog"
|
|
76
|
+
ISO8601 = "iso8601"
|
|
77
|
+
|
|
78
|
+
|
|
79
|
+
class OutputSyslogMinimumTLSVersion(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
80
|
+
TL_SV1 = "TLSv1"
|
|
81
|
+
TL_SV1_1 = "TLSv1.1"
|
|
82
|
+
TL_SV1_2 = "TLSv1.2"
|
|
83
|
+
TL_SV1_3 = "TLSv1.3"
|
|
84
|
+
|
|
85
|
+
|
|
86
|
+
class OutputSyslogMaximumTLSVersion(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
87
|
+
TL_SV1 = "TLSv1"
|
|
88
|
+
TL_SV1_1 = "TLSv1.1"
|
|
89
|
+
TL_SV1_2 = "TLSv1.2"
|
|
90
|
+
TL_SV1_3 = "TLSv1.3"
|
|
91
|
+
|
|
92
|
+
|
|
93
|
+
class OutputSyslogTLSSettingsClientSideTypedDict(TypedDict):
|
|
94
|
+
disabled: NotRequired[bool]
|
|
95
|
+
reject_unauthorized: NotRequired[bool]
|
|
96
|
+
r"""Reject certificates that are not authorized by a CA in the CA certificate path, or by another
|
|
97
|
+
trusted CA (such as the system's). Defaults to Enabled. Overrides the toggle from Advanced Settings, when also present.
|
|
98
|
+
"""
|
|
99
|
+
servername: NotRequired[str]
|
|
100
|
+
r"""Server name for the SNI (Server Name Indication) TLS extension. It must be a host name, and not an IP address."""
|
|
101
|
+
certificate_name: NotRequired[str]
|
|
102
|
+
r"""The name of the predefined certificate"""
|
|
103
|
+
ca_path: NotRequired[str]
|
|
104
|
+
r"""Path on client in which to find CA certificates to verify the server's cert. PEM format. Can reference $ENV_VARS."""
|
|
105
|
+
priv_key_path: NotRequired[str]
|
|
106
|
+
r"""Path on client in which to find the private key to use. PEM format. Can reference $ENV_VARS."""
|
|
107
|
+
cert_path: NotRequired[str]
|
|
108
|
+
r"""Path on client in which to find certificates to use. PEM format. Can reference $ENV_VARS."""
|
|
109
|
+
passphrase: NotRequired[str]
|
|
110
|
+
r"""Passphrase to use to decrypt private key"""
|
|
111
|
+
min_version: NotRequired[OutputSyslogMinimumTLSVersion]
|
|
112
|
+
max_version: NotRequired[OutputSyslogMaximumTLSVersion]
|
|
113
|
+
|
|
114
|
+
|
|
115
|
+
class OutputSyslogTLSSettingsClientSide(BaseModel):
|
|
116
|
+
disabled: Optional[bool] = True
|
|
117
|
+
|
|
118
|
+
reject_unauthorized: Annotated[
|
|
119
|
+
Optional[bool], pydantic.Field(alias="rejectUnauthorized")
|
|
120
|
+
] = True
|
|
121
|
+
r"""Reject certificates that are not authorized by a CA in the CA certificate path, or by another
|
|
122
|
+
trusted CA (such as the system's). Defaults to Enabled. Overrides the toggle from Advanced Settings, when also present.
|
|
123
|
+
"""
|
|
124
|
+
|
|
125
|
+
servername: Optional[str] = None
|
|
126
|
+
r"""Server name for the SNI (Server Name Indication) TLS extension. It must be a host name, and not an IP address."""
|
|
127
|
+
|
|
128
|
+
certificate_name: Annotated[
|
|
129
|
+
Optional[str], pydantic.Field(alias="certificateName")
|
|
130
|
+
] = None
|
|
131
|
+
r"""The name of the predefined certificate"""
|
|
132
|
+
|
|
133
|
+
ca_path: Annotated[Optional[str], pydantic.Field(alias="caPath")] = None
|
|
134
|
+
r"""Path on client in which to find CA certificates to verify the server's cert. PEM format. Can reference $ENV_VARS."""
|
|
135
|
+
|
|
136
|
+
priv_key_path: Annotated[Optional[str], pydantic.Field(alias="privKeyPath")] = None
|
|
137
|
+
r"""Path on client in which to find the private key to use. PEM format. Can reference $ENV_VARS."""
|
|
138
|
+
|
|
139
|
+
cert_path: Annotated[Optional[str], pydantic.Field(alias="certPath")] = None
|
|
140
|
+
r"""Path on client in which to find certificates to use. PEM format. Can reference $ENV_VARS."""
|
|
141
|
+
|
|
142
|
+
passphrase: Optional[str] = None
|
|
143
|
+
r"""Passphrase to use to decrypt private key"""
|
|
144
|
+
|
|
145
|
+
min_version: Annotated[
|
|
146
|
+
Annotated[
|
|
147
|
+
Optional[OutputSyslogMinimumTLSVersion],
|
|
148
|
+
PlainValidator(validate_open_enum(False)),
|
|
149
|
+
],
|
|
150
|
+
pydantic.Field(alias="minVersion"),
|
|
151
|
+
] = None
|
|
152
|
+
|
|
153
|
+
max_version: Annotated[
|
|
154
|
+
Annotated[
|
|
155
|
+
Optional[OutputSyslogMaximumTLSVersion],
|
|
156
|
+
PlainValidator(validate_open_enum(False)),
|
|
157
|
+
],
|
|
158
|
+
pydantic.Field(alias="maxVersion"),
|
|
159
|
+
] = None
|
|
160
|
+
|
|
161
|
+
|
|
162
|
+
class OutputSyslogBackpressureBehavior(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
163
|
+
r"""How to handle events when all receivers are exerting backpressure"""
|
|
164
|
+
|
|
165
|
+
BLOCK = "block"
|
|
166
|
+
DROP = "drop"
|
|
167
|
+
QUEUE = "queue"
|
|
168
|
+
|
|
169
|
+
|
|
170
|
+
class OutputSyslogCompression(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
171
|
+
r"""Codec to use to compress the persisted data"""
|
|
172
|
+
|
|
173
|
+
NONE = "none"
|
|
174
|
+
GZIP = "gzip"
|
|
175
|
+
|
|
176
|
+
|
|
177
|
+
class OutputSyslogQueueFullBehavior(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
178
|
+
r"""How to handle events when the queue is exerting backpressure (full capacity or low disk). 'Block' is the same behavior as non-PQ blocking. 'Drop new data' throws away incoming data, while leaving the contents of the PQ unchanged."""
|
|
179
|
+
|
|
180
|
+
BLOCK = "block"
|
|
181
|
+
DROP = "drop"
|
|
182
|
+
|
|
183
|
+
|
|
184
|
+
class OutputSyslogMode(str, Enum, metaclass=utils.OpenEnumMeta):
|
|
185
|
+
r"""In Error mode, PQ writes events to the filesystem if the Destination is unavailable. In Backpressure mode, PQ writes events to the filesystem when it detects backpressure from the Destination. In Always On mode, PQ always writes events to the filesystem."""
|
|
186
|
+
|
|
187
|
+
ERROR = "error"
|
|
188
|
+
BACKPRESSURE = "backpressure"
|
|
189
|
+
ALWAYS = "always"
|
|
190
|
+
|
|
191
|
+
|
|
192
|
+
class OutputSyslogPqControlsTypedDict(TypedDict):
|
|
193
|
+
pass
|
|
194
|
+
|
|
195
|
+
|
|
196
|
+
class OutputSyslogPqControls(BaseModel):
|
|
197
|
+
pass
|
|
198
|
+
|
|
199
|
+
|
|
200
|
+
class OutputSyslogTypedDict(TypedDict):
|
|
201
|
+
id: str
|
|
202
|
+
r"""Unique ID for this output"""
|
|
203
|
+
type: OutputSyslogType
|
|
204
|
+
pipeline: NotRequired[str]
|
|
205
|
+
r"""Pipeline to process data before sending out to this output"""
|
|
206
|
+
system_fields: NotRequired[List[str]]
|
|
207
|
+
r"""Fields to automatically add to events, such as cribl_pipe. Supports wildcards."""
|
|
208
|
+
environment: NotRequired[str]
|
|
209
|
+
r"""Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere."""
|
|
210
|
+
streamtags: NotRequired[List[str]]
|
|
211
|
+
r"""Tags for filtering and grouping in @{product}"""
|
|
212
|
+
protocol: NotRequired[OutputSyslogProtocol]
|
|
213
|
+
r"""The network protocol to use for sending out syslog messages"""
|
|
214
|
+
facility: NotRequired[Facility]
|
|
215
|
+
r"""Default value for message facility. Will be overwritten by value of __facility if set. Defaults to user."""
|
|
216
|
+
severity: NotRequired[OutputSyslogSeverity]
|
|
217
|
+
r"""Default value for message severity. Will be overwritten by value of __severity if set. Defaults to notice."""
|
|
218
|
+
app_name: NotRequired[str]
|
|
219
|
+
r"""Default name for device or application that originated the message. Defaults to Cribl, but will be overwritten by value of __appname if set."""
|
|
220
|
+
message_format: NotRequired[OutputSyslogMessageFormat]
|
|
221
|
+
r"""The syslog message format depending on the receiver's support"""
|
|
222
|
+
timestamp_format: NotRequired[TimestampFormat]
|
|
223
|
+
r"""Timestamp format to use when serializing event's time field"""
|
|
224
|
+
throttle_rate_per_sec: NotRequired[str]
|
|
225
|
+
r"""Rate (in bytes per second) to throttle while writing to an output. Accepts values with multiple-byte units, such as KB, MB, and GB. (Example: 42 MB) Default value of 0 specifies no throttling."""
|
|
226
|
+
octet_count_framing: NotRequired[bool]
|
|
227
|
+
r"""Prefix messages with the byte count of the message. If disabled, no prefix will be set, and the message will be appended with a \n."""
|
|
228
|
+
log_failed_requests: NotRequired[bool]
|
|
229
|
+
r"""Use to troubleshoot issues with sending data"""
|
|
230
|
+
description: NotRequired[str]
|
|
231
|
+
load_balanced: NotRequired[bool]
|
|
232
|
+
r"""For optimal performance, enable load balancing even if you have one hostname, as it can expand to multiple IPs. If this setting is disabled, consider enabling round-robin DNS."""
|
|
233
|
+
connection_timeout: NotRequired[float]
|
|
234
|
+
r"""Amount of time (milliseconds) to wait for the connection to establish before retrying"""
|
|
235
|
+
write_timeout: NotRequired[float]
|
|
236
|
+
r"""Amount of time (milliseconds) to wait for a write to complete before assuming connection is dead"""
|
|
237
|
+
tls: NotRequired[OutputSyslogTLSSettingsClientSideTypedDict]
|
|
238
|
+
on_backpressure: NotRequired[OutputSyslogBackpressureBehavior]
|
|
239
|
+
r"""How to handle events when all receivers are exerting backpressure"""
|
|
240
|
+
host: NotRequired[str]
|
|
241
|
+
r"""The hostname of the receiver"""
|
|
242
|
+
port: NotRequired[float]
|
|
243
|
+
r"""The port to connect to on the provided host"""
|
|
244
|
+
max_record_size: NotRequired[float]
|
|
245
|
+
r"""Maximum size of syslog messages. Make sure this value is less than or equal to the MTU to avoid UDP packet fragmentation."""
|
|
246
|
+
udp_dns_resolve_period_sec: NotRequired[float]
|
|
247
|
+
r"""How often to resolve the destination hostname to an IP address. Ignored if the destination is an IP address. A value of 0 means every message sent will incur a DNS lookup."""
|
|
248
|
+
pq_max_file_size: NotRequired[str]
|
|
249
|
+
r"""The maximum size to store in each queue file before closing and optionally compressing (KB, MB, etc.)"""
|
|
250
|
+
pq_max_size: NotRequired[str]
|
|
251
|
+
r"""The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc."""
|
|
252
|
+
pq_path: NotRequired[str]
|
|
253
|
+
r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/<output-id>."""
|
|
254
|
+
pq_compress: NotRequired[OutputSyslogCompression]
|
|
255
|
+
r"""Codec to use to compress the persisted data"""
|
|
256
|
+
pq_on_backpressure: NotRequired[OutputSyslogQueueFullBehavior]
|
|
257
|
+
r"""How to handle events when the queue is exerting backpressure (full capacity or low disk). 'Block' is the same behavior as non-PQ blocking. 'Drop new data' throws away incoming data, while leaving the contents of the PQ unchanged."""
|
|
258
|
+
pq_mode: NotRequired[OutputSyslogMode]
|
|
259
|
+
r"""In Error mode, PQ writes events to the filesystem if the Destination is unavailable. In Backpressure mode, PQ writes events to the filesystem when it detects backpressure from the Destination. In Always On mode, PQ always writes events to the filesystem."""
|
|
260
|
+
pq_controls: NotRequired[OutputSyslogPqControlsTypedDict]
|
|
261
|
+
|
|
262
|
+
|
|
263
|
+
class OutputSyslog(BaseModel):
|
|
264
|
+
id: str
|
|
265
|
+
r"""Unique ID for this output"""
|
|
266
|
+
|
|
267
|
+
type: Annotated[OutputSyslogType, PlainValidator(validate_open_enum(False))]
|
|
268
|
+
|
|
269
|
+
pipeline: Optional[str] = None
|
|
270
|
+
r"""Pipeline to process data before sending out to this output"""
|
|
271
|
+
|
|
272
|
+
system_fields: Annotated[
|
|
273
|
+
Optional[List[str]], pydantic.Field(alias="systemFields")
|
|
274
|
+
] = None
|
|
275
|
+
r"""Fields to automatically add to events, such as cribl_pipe. Supports wildcards."""
|
|
276
|
+
|
|
277
|
+
environment: Optional[str] = None
|
|
278
|
+
r"""Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere."""
|
|
279
|
+
|
|
280
|
+
streamtags: Optional[List[str]] = None
|
|
281
|
+
r"""Tags for filtering and grouping in @{product}"""
|
|
282
|
+
|
|
283
|
+
protocol: Annotated[
|
|
284
|
+
Optional[OutputSyslogProtocol], PlainValidator(validate_open_enum(False))
|
|
285
|
+
] = OutputSyslogProtocol.TCP
|
|
286
|
+
r"""The network protocol to use for sending out syslog messages"""
|
|
287
|
+
|
|
288
|
+
facility: Annotated[
|
|
289
|
+
Optional[Facility], PlainValidator(validate_open_enum(True))
|
|
290
|
+
] = Facility.ONE
|
|
291
|
+
r"""Default value for message facility. Will be overwritten by value of __facility if set. Defaults to user."""
|
|
292
|
+
|
|
293
|
+
severity: Annotated[
|
|
294
|
+
Optional[OutputSyslogSeverity], PlainValidator(validate_open_enum(True))
|
|
295
|
+
] = OutputSyslogSeverity.FIVE
|
|
296
|
+
r"""Default value for message severity. Will be overwritten by value of __severity if set. Defaults to notice."""
|
|
297
|
+
|
|
298
|
+
app_name: Annotated[Optional[str], pydantic.Field(alias="appName")] = "Cribl"
|
|
299
|
+
r"""Default name for device or application that originated the message. Defaults to Cribl, but will be overwritten by value of __appname if set."""
|
|
300
|
+
|
|
301
|
+
message_format: Annotated[
|
|
302
|
+
Annotated[
|
|
303
|
+
Optional[OutputSyslogMessageFormat],
|
|
304
|
+
PlainValidator(validate_open_enum(False)),
|
|
305
|
+
],
|
|
306
|
+
pydantic.Field(alias="messageFormat"),
|
|
307
|
+
] = OutputSyslogMessageFormat.RFC3164
|
|
308
|
+
r"""The syslog message format depending on the receiver's support"""
|
|
309
|
+
|
|
310
|
+
timestamp_format: Annotated[
|
|
311
|
+
Annotated[Optional[TimestampFormat], PlainValidator(validate_open_enum(False))],
|
|
312
|
+
pydantic.Field(alias="timestampFormat"),
|
|
313
|
+
] = TimestampFormat.SYSLOG
|
|
314
|
+
r"""Timestamp format to use when serializing event's time field"""
|
|
315
|
+
|
|
316
|
+
throttle_rate_per_sec: Annotated[
|
|
317
|
+
Optional[str], pydantic.Field(alias="throttleRatePerSec")
|
|
318
|
+
] = "0"
|
|
319
|
+
r"""Rate (in bytes per second) to throttle while writing to an output. Accepts values with multiple-byte units, such as KB, MB, and GB. (Example: 42 MB) Default value of 0 specifies no throttling."""
|
|
320
|
+
|
|
321
|
+
octet_count_framing: Annotated[
|
|
322
|
+
Optional[bool], pydantic.Field(alias="octetCountFraming")
|
|
323
|
+
] = None
|
|
324
|
+
r"""Prefix messages with the byte count of the message. If disabled, no prefix will be set, and the message will be appended with a \n."""
|
|
325
|
+
|
|
326
|
+
log_failed_requests: Annotated[
|
|
327
|
+
Optional[bool], pydantic.Field(alias="logFailedRequests")
|
|
328
|
+
] = False
|
|
329
|
+
r"""Use to troubleshoot issues with sending data"""
|
|
330
|
+
|
|
331
|
+
description: Optional[str] = None
|
|
332
|
+
|
|
333
|
+
load_balanced: Annotated[Optional[bool], pydantic.Field(alias="loadBalanced")] = (
|
|
334
|
+
True
|
|
335
|
+
)
|
|
336
|
+
r"""For optimal performance, enable load balancing even if you have one hostname, as it can expand to multiple IPs. If this setting is disabled, consider enabling round-robin DNS."""
|
|
337
|
+
|
|
338
|
+
connection_timeout: Annotated[
|
|
339
|
+
Optional[float], pydantic.Field(alias="connectionTimeout")
|
|
340
|
+
] = 10000
|
|
341
|
+
r"""Amount of time (milliseconds) to wait for the connection to establish before retrying"""
|
|
342
|
+
|
|
343
|
+
write_timeout: Annotated[Optional[float], pydantic.Field(alias="writeTimeout")] = (
|
|
344
|
+
60000
|
|
345
|
+
)
|
|
346
|
+
r"""Amount of time (milliseconds) to wait for a write to complete before assuming connection is dead"""
|
|
347
|
+
|
|
348
|
+
tls: Optional[OutputSyslogTLSSettingsClientSide] = None
|
|
349
|
+
|
|
350
|
+
on_backpressure: Annotated[
|
|
351
|
+
Annotated[
|
|
352
|
+
Optional[OutputSyslogBackpressureBehavior],
|
|
353
|
+
PlainValidator(validate_open_enum(False)),
|
|
354
|
+
],
|
|
355
|
+
pydantic.Field(alias="onBackpressure"),
|
|
356
|
+
] = OutputSyslogBackpressureBehavior.BLOCK
|
|
357
|
+
r"""How to handle events when all receivers are exerting backpressure"""
|
|
358
|
+
|
|
359
|
+
host: Optional[str] = None
|
|
360
|
+
r"""The hostname of the receiver"""
|
|
361
|
+
|
|
362
|
+
port: Optional[float] = None
|
|
363
|
+
r"""The port to connect to on the provided host"""
|
|
364
|
+
|
|
365
|
+
max_record_size: Annotated[
|
|
366
|
+
Optional[float], pydantic.Field(alias="maxRecordSize")
|
|
367
|
+
] = 1500
|
|
368
|
+
r"""Maximum size of syslog messages. Make sure this value is less than or equal to the MTU to avoid UDP packet fragmentation."""
|
|
369
|
+
|
|
370
|
+
udp_dns_resolve_period_sec: Annotated[
|
|
371
|
+
Optional[float], pydantic.Field(alias="udpDnsResolvePeriodSec")
|
|
372
|
+
] = 0
|
|
373
|
+
r"""How often to resolve the destination hostname to an IP address. Ignored if the destination is an IP address. A value of 0 means every message sent will incur a DNS lookup."""
|
|
374
|
+
|
|
375
|
+
pq_max_file_size: Annotated[
|
|
376
|
+
Optional[str], pydantic.Field(alias="pqMaxFileSize")
|
|
377
|
+
] = "1 MB"
|
|
378
|
+
r"""The maximum size to store in each queue file before closing and optionally compressing (KB, MB, etc.)"""
|
|
379
|
+
|
|
380
|
+
pq_max_size: Annotated[Optional[str], pydantic.Field(alias="pqMaxSize")] = "5GB"
|
|
381
|
+
r"""The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc."""
|
|
382
|
+
|
|
383
|
+
pq_path: Annotated[Optional[str], pydantic.Field(alias="pqPath")] = (
|
|
384
|
+
"$CRIBL_HOME/state/queues"
|
|
385
|
+
)
|
|
386
|
+
r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/<output-id>."""
|
|
387
|
+
|
|
388
|
+
pq_compress: Annotated[
|
|
389
|
+
Annotated[
|
|
390
|
+
Optional[OutputSyslogCompression], PlainValidator(validate_open_enum(False))
|
|
391
|
+
],
|
|
392
|
+
pydantic.Field(alias="pqCompress"),
|
|
393
|
+
] = OutputSyslogCompression.NONE
|
|
394
|
+
r"""Codec to use to compress the persisted data"""
|
|
395
|
+
|
|
396
|
+
pq_on_backpressure: Annotated[
|
|
397
|
+
Annotated[
|
|
398
|
+
Optional[OutputSyslogQueueFullBehavior],
|
|
399
|
+
PlainValidator(validate_open_enum(False)),
|
|
400
|
+
],
|
|
401
|
+
pydantic.Field(alias="pqOnBackpressure"),
|
|
402
|
+
] = OutputSyslogQueueFullBehavior.BLOCK
|
|
403
|
+
r"""How to handle events when the queue is exerting backpressure (full capacity or low disk). 'Block' is the same behavior as non-PQ blocking. 'Drop new data' throws away incoming data, while leaving the contents of the PQ unchanged."""
|
|
404
|
+
|
|
405
|
+
pq_mode: Annotated[
|
|
406
|
+
Annotated[
|
|
407
|
+
Optional[OutputSyslogMode], PlainValidator(validate_open_enum(False))
|
|
408
|
+
],
|
|
409
|
+
pydantic.Field(alias="pqMode"),
|
|
410
|
+
] = OutputSyslogMode.ERROR
|
|
411
|
+
r"""In Error mode, PQ writes events to the filesystem if the Destination is unavailable. In Backpressure mode, PQ writes events to the filesystem when it detects backpressure from the Destination. In Always On mode, PQ always writes events to the filesystem."""
|
|
412
|
+
|
|
413
|
+
pq_controls: Annotated[
|
|
414
|
+
Optional[OutputSyslogPqControls], pydantic.Field(alias="pqControls")
|
|
415
|
+
] = None
|