cribl-control-plane 0.4.0a6__py3-none-any.whl → 0.4.0b12__py3-none-any.whl

cribl_control_plane/models/getversiondiffop.py

@@ -1,11 +1,10 @@
 """Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
 
 from __future__ import annotations
-from .gitdiffresult import GitDiffResult, GitDiffResultTypedDict
 from cribl_control_plane.types import BaseModel
 from cribl_control_plane.utils import FieldMetadata, QueryParamMetadata
 import pydantic
-from typing import List, Optional
+from typing import Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -46,20 +45,3 @@ class GetVersionDiffRequest(BaseModel):
         FieldMetadata(query=QueryParamMetadata(style="form", explode=True)),
     ] = None
     r"""Number of lines of the diff to return. Default is 1000. Set to <code>0</code> to return the full diff, regardless of the number of lines."""
-
-
-class GetVersionDiffResponseTypedDict(TypedDict):
-    r"""a list of GitDiffResult objects"""
-
-    count: NotRequired[int]
-    r"""number of items present in the items array"""
-    items: NotRequired[List[GitDiffResultTypedDict]]
-
-
-class GetVersionDiffResponse(BaseModel):
-    r"""a list of GitDiffResult objects"""
-
-    count: Optional[int] = None
-    r"""number of items present in the items array"""
-
-    items: Optional[List[GitDiffResult]] = None

cribl_control_plane/models/getversionfilesop.py

@@ -1,11 +1,10 @@
 """Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
 
 from __future__ import annotations
-from .gitfilesresponse import GitFilesResponse, GitFilesResponseTypedDict
 from cribl_control_plane.types import BaseModel
 from cribl_control_plane.utils import FieldMetadata, QueryParamMetadata
 import pydantic
-from typing import List, Optional
+from typing import Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -30,20 +29,3 @@ class GetVersionFilesRequest(BaseModel):
         FieldMetadata(query=QueryParamMetadata(style="form", explode=True)),
     ] = None
     r"""The Git commit hash to use as the starting point for the request."""
-
-
-class GetVersionFilesResponseTypedDict(TypedDict):
-    r"""a list of GitFilesResponse objects"""
-
-    count: NotRequired[int]
-    r"""number of items present in the items array"""
-    items: NotRequired[List[GitFilesResponseTypedDict]]
-
-
-class GetVersionFilesResponse(BaseModel):
-    r"""a list of GitFilesResponse objects"""
-
-    count: Optional[int] = None
-    r"""number of items present in the items array"""
-
-    items: Optional[List[GitFilesResponse]] = None

cribl_control_plane/models/getversionop.py

@@ -1,11 +1,10 @@
 """Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
 
 from __future__ import annotations
-from .gitlogresult import GitLogResult, GitLogResultTypedDict
 from cribl_control_plane.types import BaseModel
 from cribl_control_plane.utils import FieldMetadata, QueryParamMetadata
 import pydantic
-from typing import List, Optional
+from typing import Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -29,20 +28,3 @@ class GetVersionRequest(BaseModel):
         FieldMetadata(query=QueryParamMetadata(style="form", explode=True)),
     ] = None
     r"""Maximum number of commits to return in the response for this request."""
-
-
-class GetVersionResponseTypedDict(TypedDict):
-    r"""a list of GitLogResult objects"""
-
-    count: NotRequired[int]
-    r"""number of items present in the items array"""
-    items: NotRequired[List[GitLogResultTypedDict]]
-
-
-class GetVersionResponse(BaseModel):
-    r"""a list of GitLogResult objects"""
-
-    count: Optional[int] = None
-    r"""number of items present in the items array"""
-
-    items: Optional[List[GitLogResult]] = None

cribl_control_plane/models/getversionshowop.py

@@ -1,11 +1,10 @@
 """Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
 
 from __future__ import annotations
-from .gitshowresult import GitShowResult, GitShowResultTypedDict
 from cribl_control_plane.types import BaseModel
 from cribl_control_plane.utils import FieldMetadata, QueryParamMetadata
 import pydantic
-from typing import List, Optional
+from typing import Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -46,20 +45,3 @@ class GetVersionShowRequest(BaseModel):
         FieldMetadata(query=QueryParamMetadata(style="form", explode=True)),
     ] = None
     r"""Number of lines of the diff to return. Default is 1000. Set to <code>0</code> to return the full diff, regardless of the number of lines."""
-
-
-class GetVersionShowResponseTypedDict(TypedDict):
-    r"""a list of GitShowResult objects"""
-
-    count: NotRequired[int]
-    r"""number of items present in the items array"""
-    items: NotRequired[List[GitShowResultTypedDict]]
-
-
-class GetVersionShowResponse(BaseModel):
-    r"""a list of GitShowResult objects"""
-
-    count: Optional[int] = None
-    r"""number of items present in the items array"""
-
-    items: Optional[List[GitShowResult]] = None

cribl_control_plane/models/getversionstatusop.py

@@ -1,11 +1,10 @@
 """Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
 
 from __future__ import annotations
-from .gitstatusresult import GitStatusResult, GitStatusResultTypedDict
 from cribl_control_plane.types import BaseModel
 from cribl_control_plane.utils import FieldMetadata, QueryParamMetadata
 import pydantic
-from typing import List, Optional
+from typing import Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -21,20 +20,3 @@ class GetVersionStatusRequest(BaseModel):
         FieldMetadata(query=QueryParamMetadata(style="form", explode=True)),
     ] = None
     r"""The <code>id</code> of the Worker Group or Edge Fleet to get the status for."""
-
-
-class GetVersionStatusResponseTypedDict(TypedDict):
-    r"""a list of GitStatusResult objects"""
-
-    count: NotRequired[int]
-    r"""number of items present in the items array"""
-    items: NotRequired[List[GitStatusResultTypedDict]]
-
-
-class GetVersionStatusResponse(BaseModel):
-    r"""a list of GitStatusResult objects"""
-
-    count: Optional[int] = None
-    r"""number of items present in the items array"""
-
-    items: Optional[List[GitStatusResult]] = None

cribl_control_plane/models/groupcreaterequest.py

@@ -56,6 +56,7 @@ class GroupCreateRequestGit(BaseModel):
 
 class GroupCreateRequestType(str, Enum, metaclass=utils.OpenEnumMeta):
     LAKE_ACCESS = "lake_access"
+    LOCAL_SEARCH = "local_search"
 
 
 class GroupCreateRequestTypedDict(TypedDict):

cribl_control_plane/models/hbcriblinfo.py

@@ -2,7 +2,6 @@
 
 from __future__ import annotations
 from .hbleaderinfo import HBLeaderInfo, HBLeaderInfoTypedDict
-from .lookupversions import LookupVersions, LookupVersionsTypedDict
 from cribl_control_plane import models, utils
 from cribl_control_plane.types import BaseModel
 from cribl_control_plane.utils import validate_open_enum
@@ -10,7 +9,7 @@ from enum import Enum
 import pydantic
 from pydantic import field_serializer
 from pydantic.functional_validators import PlainValidator
-from typing import List, Optional
+from typing import Dict, List, Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -59,7 +58,7 @@ class HBCriblInfoTypedDict(TypedDict):
     disable_sni_routing: NotRequired[bool]
     edge_nodes: NotRequired[float]
     install_type: NotRequired[str]
-    lookup_versions: NotRequired[LookupVersionsTypedDict]
+    lookup_versions: NotRequired[Dict[str, Dict[str, str]]]
     master: NotRequired[HBLeaderInfoTypedDict]
     pid: NotRequired[float]
     socks_enabled: NotRequired[bool]
@@ -93,7 +92,7 @@ class HBCriblInfo(BaseModel):
     install_type: Annotated[Optional[str], pydantic.Field(alias="installType")] = None
 
     lookup_versions: Annotated[
-        Optional[LookupVersions], pydantic.Field(alias="lookupVersions")
+        Optional[Dict[str, Dict[str, str]]], pydantic.Field(alias="lookupVersions")
     ] = None
 
     master: Optional[HBLeaderInfo] = None

cribl_control_plane/models/heartbeatmetadata.py

@@ -3,25 +3,17 @@
 from __future__ import annotations
 from cribl_control_plane.types import BaseModel
 import pydantic
-from typing import List, Optional
+from typing import Dict, List, Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
-class HeartbeatMetadataTagsTypedDict(TypedDict):
-    pass
-
-
-class HeartbeatMetadataTags(BaseModel):
-    pass
-
-
 class HeartbeatMetadataAwsTypedDict(TypedDict):
     enabled: bool
     instance_id: str
     region: str
     type: str
     zone: str
-    tags: NotRequired[HeartbeatMetadataTagsTypedDict]
+    tags: NotRequired[Dict[str, str]]
 
 
 class HeartbeatMetadataAws(BaseModel):
@@ -35,7 +27,7 @@ class HeartbeatMetadataAws(BaseModel):
 
     zone: str
 
-    tags: Optional[HeartbeatMetadataTags] = None
+    tags: Optional[Dict[str, str]] = None
 
 
 class HeartbeatMetadataHostOsTypedDict(TypedDict):

cribl_control_plane/models/inputcloudflarehec.py

@@ -131,6 +131,7 @@ class InputCloudflareHecAuthenticationMethod(str, Enum, metaclass=utils.OpenEnum
     r"""Select Secret to use a text secret to authenticate"""
 
     SECRET = "secret"
+    MANUAL = "manual"
 
 
 class InputCloudflareHecAuthTokenMetadatumTypedDict(TypedDict):
@@ -149,8 +150,10 @@ class InputCloudflareHecAuthTokenMetadatum(BaseModel):
 class InputCloudflareHecAuthTokenTypedDict(TypedDict):
     auth_type: NotRequired[InputCloudflareHecAuthenticationMethod]
     r"""Select Secret to use a text secret to authenticate"""
-    token_secret: NotRequired[Any]
-    token: NotRequired[Any]
+    token_secret: NotRequired[str]
+    r"""Select or create a stored text secret"""
+    token: NotRequired[str]
+    r"""Shared secret to be provided by any client (Authorization: <token>)"""
     enabled: NotRequired[bool]
     description: NotRequired[str]
     allowed_indexes_at_token: NotRequired[List[str]]
@@ -169,9 +172,11 @@ class InputCloudflareHecAuthToken(BaseModel):
     ] = InputCloudflareHecAuthenticationMethod.SECRET
     r"""Select Secret to use a text secret to authenticate"""
 
-    token_secret: Annotated[Optional[Any], pydantic.Field(alias="tokenSecret")] = None
+    token_secret: Annotated[Optional[str], pydantic.Field(alias="tokenSecret")] = None
+    r"""Select or create a stored text secret"""
 
-    token: Optional[Any] = None
+    token: Optional[str] = None
+    r"""Shared secret to be provided by any client (Authorization: <token>)"""
 
     enabled: Optional[bool] = True
 

cribl_control_plane/models/inputconfluentcloud.py

@@ -626,7 +626,8 @@ class InputConfluentCloudTypedDict(TypedDict):
     sasl: NotRequired[InputConfluentCloudAuthenticationTypedDict]
     r"""Authentication parameters to use when connecting to brokers. Using TLS is highly recommended."""
     session_timeout: NotRequired[float]
-    r"""Timeout used to detect client failures when using Kafka's group-management facilities.
+    r"""
+    Timeout used to detect client failures when using Kafka's group-management facilities.
     If the client sends no heartbeats to the broker before the timeout expires,
     the broker will remove the client from the group and initiate a rebalance.
     Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms.
@@ -748,7 +749,8 @@ class InputConfluentCloud(BaseModel):
     session_timeout: Annotated[
         Optional[float], pydantic.Field(alias="sessionTimeout")
     ] = 30000
-    r"""Timeout used to detect client failures when using Kafka's group-management facilities.
+    r"""
+    Timeout used to detect client failures when using Kafka's group-management facilities.
     If the client sends no heartbeats to the broker before the timeout expires,
     the broker will remove the client from the group and initiate a rebalance.
     Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms.

cribl_control_plane/models/inputcribllakehttp.py

@@ -259,19 +259,34 @@ class InputCriblLakeHTTPAuthTokensExtMetadatum(BaseModel):
 
 class SplunkHecMetadataTypedDict(TypedDict):
     enabled: NotRequired[bool]
+    default_dataset: NotRequired[str]
+    allowed_indexes_at_token: NotRequired[List[str]]
 
 
 class SplunkHecMetadata(BaseModel):
     enabled: Optional[bool] = None
 
+    default_dataset: Annotated[
+        Optional[str], pydantic.Field(alias="defaultDataset")
+    ] = None
+
+    allowed_indexes_at_token: Annotated[
+        Optional[List[str]], pydantic.Field(alias="allowedIndexesAtToken")
+    ] = None
+
 
 class ElasticsearchMetadataTypedDict(TypedDict):
     enabled: NotRequired[bool]
+    default_dataset: NotRequired[str]
 
 
 class ElasticsearchMetadata(BaseModel):
     enabled: Optional[bool] = None
 
+    default_dataset: Annotated[
+        Optional[str], pydantic.Field(alias="defaultDataset")
+    ] = None
+
 
 class InputCriblLakeHTTPAuthTokensExtTypedDict(TypedDict):
     token: str

cribl_control_plane/models/inputkafka.py

@@ -616,7 +616,8 @@ class InputKafkaTypedDict(TypedDict):
     r"""Authentication parameters to use when connecting to brokers. Using TLS is highly recommended."""
     tls: NotRequired[InputKafkaTLSSettingsClientSideTypedDict]
     session_timeout: NotRequired[float]
-    r"""Timeout used to detect client failures when using Kafka's group-management facilities.
+    r"""
+    Timeout used to detect client failures when using Kafka's group-management facilities.
     If the client sends no heartbeats to the broker before the timeout expires,
     the broker will remove the client from the group and initiate a rebalance.
     Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms.
@@ -738,7 +739,8 @@ class InputKafka(BaseModel):
     session_timeout: Annotated[
         Optional[float], pydantic.Field(alias="sessionTimeout")
     ] = 30000
-    r"""Timeout used to detect client failures when using Kafka's group-management facilities.
+    r"""
+    Timeout used to detect client failures when using Kafka's group-management facilities.
     If the client sends no heartbeats to the broker before the timeout expires,
     the broker will remove the client from the group and initiate a rebalance.
     Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms.

cribl_control_plane/models/inputmsk.py

@@ -453,7 +453,8 @@ class InputMskTypedDict(TypedDict):
     from_beginning: NotRequired[bool]
     r"""Leave enabled if you want the Source, upon first subscribing to a topic, to read starting with the earliest available message"""
     session_timeout: NotRequired[float]
-    r"""Timeout used to detect client failures when using Kafka's group-management facilities.
+    r"""
+    Timeout used to detect client failures when using Kafka's group-management facilities.
     If the client sends no heartbeats to the broker before the timeout expires,
     the broker will remove the client from the group and initiate a rebalance.
     Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms.
@@ -576,7 +577,8 @@ class InputMsk(BaseModel):
     session_timeout: Annotated[
         Optional[float], pydantic.Field(alias="sessionTimeout")
     ] = 30000
-    r"""Timeout used to detect client failures when using Kafka's group-management facilities.
+    r"""
+    Timeout used to detect client failures when using Kafka's group-management facilities.
     If the client sends no heartbeats to the broker before the timeout expires,
     the broker will remove the client from the group and initiate a rebalance.
     Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms.

cribl_control_plane/models/inputsnmp.py

@@ -8,7 +8,7 @@ from enum import Enum
 import pydantic
 from pydantic import field_serializer
 from pydantic.functional_validators import PlainValidator
-from typing import Any, List, Optional
+from typing import List, Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -143,11 +143,25 @@ class AuthenticationProtocol(str, Enum, metaclass=utils.OpenEnumMeta):
     SHA512 = "sha512"
 
 
+class PrivacyProtocol(str, Enum, metaclass=utils.OpenEnumMeta):
+    # None
+    NONE = "none"
+    # DES
+    DES = "des"
+    # AES128
+    AES = "aes"
+    # AES256b (Blumenthal)
+    AES256B = "aes256b"
+    # AES256r (Reeder)
+    AES256R = "aes256r"
+
+
 class V3UserTypedDict(TypedDict):
     name: str
     auth_protocol: NotRequired[AuthenticationProtocol]
-    auth_key: NotRequired[Any]
-    priv_protocol: NotRequired[str]
+    auth_key: NotRequired[str]
+    priv_protocol: NotRequired[PrivacyProtocol]
+    priv_key: NotRequired[str]
 
 
 class V3User(BaseModel):
@@ -160,11 +174,14 @@ class V3User(BaseModel):
         pydantic.Field(alias="authProtocol"),
     ] = AuthenticationProtocol.NONE
 
-    auth_key: Annotated[Optional[Any], pydantic.Field(alias="authKey")] = None
+    auth_key: Annotated[Optional[str], pydantic.Field(alias="authKey")] = None
 
-    priv_protocol: Annotated[Optional[str], pydantic.Field(alias="privProtocol")] = (
-        "none"
-    )
+    priv_protocol: Annotated[
+        Annotated[Optional[PrivacyProtocol], PlainValidator(validate_open_enum(False))],
+        pydantic.Field(alias="privProtocol"),
+    ] = PrivacyProtocol.NONE
+
+    priv_key: Annotated[Optional[str], pydantic.Field(alias="privKey")] = None
 
     @field_serializer("auth_protocol")
     def serialize_auth_protocol(self, value):
@@ -175,6 +192,15 @@ class V3User(BaseModel):
                 return value
         return value
 
+    @field_serializer("priv_protocol")
+    def serialize_priv_protocol(self, value):
+        if isinstance(value, str):
+            try:
+                return models.PrivacyProtocol(value)
+            except ValueError:
+                return value
+        return value
+
 
 class SNMPv3AuthenticationTypedDict(TypedDict):
     r"""Authentication parameters for SNMPv3 trap. Set the log level to debug if you are experiencing authentication or decryption issues."""

cribl_control_plane/models/inputsplunkhec.py

@@ -147,10 +147,12 @@ class InputSplunkHecAuthTokenMetadatum(BaseModel):
 
 
 class InputSplunkHecAuthTokenTypedDict(TypedDict):
-    token: Any
+    token: str
+    r"""Shared secret to be provided by any client (Authorization: <token>)"""
     auth_type: NotRequired[InputSplunkHecAuthenticationMethod]
     r"""Select Manual to enter an auth token directly, or select Secret to use a text secret to authenticate"""
-    token_secret: NotRequired[Any]
+    token_secret: NotRequired[str]
+    r"""Select or create a stored text secret"""
     enabled: NotRequired[bool]
     description: NotRequired[str]
     r"""Optional token description"""
@@ -161,7 +163,8 @@ class InputSplunkHecAuthTokenTypedDict(TypedDict):
 
 
 class InputSplunkHecAuthToken(BaseModel):
-    token: Any
+    token: str
+    r"""Shared secret to be provided by any client (Authorization: <token>)"""
 
     auth_type: Annotated[
         Annotated[
@@ -172,7 +175,8 @@ class InputSplunkHecAuthToken(BaseModel):
     ] = InputSplunkHecAuthenticationMethod.MANUAL
     r"""Select Manual to enter an auth token directly, or select Secret to use a text secret to authenticate"""
 
-    token_secret: Annotated[Optional[Any], pydantic.Field(alias="tokenSecret")] = None
+    token_secret: Annotated[Optional[str], pydantic.Field(alias="tokenSecret")] = None
+    r"""Select or create a stored text secret"""
 
     enabled: Optional[bool] = True
 

cribl_control_plane/models/inputwef.py

@@ -284,6 +284,21 @@ class SubscriptionMetadatum(BaseModel):
     r"""JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)"""
 
 
+class QueryTypedDict(TypedDict):
+    path: str
+    r"""The Path attribute from the relevant XML Select element"""
+    query_expression: str
+    r"""The XPath query inside the relevant XML Select element"""
+
+
+class Query(BaseModel):
+    path: str
+    r"""The Path attribute from the relevant XML Select element"""
+
+    query_expression: Annotated[str, pydantic.Field(alias="queryExpression")]
+    r"""The XPath query inside the relevant XML Select element"""
+
+
 class SubscriptionTypedDict(TypedDict):
     subscription_name: str
     targets: List[str]
@@ -307,6 +322,9 @@ class SubscriptionTypedDict(TypedDict):
     query_selector: NotRequired[QueryBuilderMode]
     metadata: NotRequired[List[SubscriptionMetadatumTypedDict]]
     r"""Fields to add to events ingested under this subscription"""
+    queries: NotRequired[List[QueryTypedDict]]
+    xml_query: NotRequired[str]
+    r"""The XPath query to use for selecting events"""
 
 
 class Subscription(BaseModel):
@@ -358,6 +376,11 @@ class Subscription(BaseModel):
     metadata: Optional[List[SubscriptionMetadatum]] = None
     r"""Fields to add to events ingested under this subscription"""
 
+    queries: Optional[List[Query]] = None
+
+    xml_query: Annotated[Optional[str], pydantic.Field(alias="xmlQuery")] = None
+    r"""The XPath query to use for selecting events"""
+
     @field_serializer("content_format")
     def serialize_content_format(self, value):
         if isinstance(value, str):

cribl_control_plane/models/inputwiz.py

@@ -126,23 +126,118 @@ class InputWizPq(BaseModel):
         return value
 
 
+class ManageStateTypedDict(TypedDict):
+    pass
+
+
+class ManageState(BaseModel):
+    pass
+
+
+class InputWizLogLevel(str, Enum, metaclass=utils.OpenEnumMeta):
+    r"""Collector runtime log level"""
+
+    ERROR = "error"
+    WARN = "warn"
+    INFO = "info"
+    DEBUG = "debug"
+    SILLY = "silly"
+
+
 class InputWizContentConfigTypedDict(TypedDict):
     content_type: str
     r"""The name of the Wiz query"""
+    content_query: str
+    r"""Template for POST body to send with the Collect request. Reference global variables, or functions using template params: `${C.vars.myVar}`, or `${Date.now()}`, `${param}`."""
     content_description: NotRequired[str]
     enabled: NotRequired[bool]
+    state_tracking: NotRequired[bool]
+    r"""Track collection progress between consecutive scheduled executions"""
+    state_update_expression: NotRequired[str]
+    r"""JavaScript expression that defines how to update the state from an event. Use the event's data and the current state to compute the new state. See [Understanding State Expression Fields](https://docs.cribl.io/stream/collectors-rest#state-tracking-expression-fields) for more information."""
+    state_merge_expression: NotRequired[str]
+    r"""JavaScript expression that defines which state to keep when merging a task's newly reported state with previously saved state. Evaluates `prevState` and `newState` variables, resolving to the state to keep."""
+    manage_state: NotRequired[ManageStateTypedDict]
+    cron_schedule: NotRequired[str]
+    r"""A cron schedule on which to run this job"""
+    earliest: NotRequired[str]
+    r"""Earliest time, relative to now. Format supported: [+|-]<time_integer><time_unit>@<snap-to_time_unit> (ex: -1hr, -42m, -42m@h)"""
+    latest: NotRequired[str]
+    r"""Latest time, relative to now. Format supported: [+|-]<time_integer><time_unit>@<snap-to_time_unit> (ex: -1hr, -42m, -42m@h)"""
+    job_timeout: NotRequired[str]
+    r"""Maximum time the job is allowed to run (examples: 30, 45s, 15m). Units default to seconds if not specified. Enter 0 for unlimited time."""
+    log_level: NotRequired[InputWizLogLevel]
+    r"""Collector runtime log level"""
+    max_pages: NotRequired[float]
+    r"""Maximum number of pages to retrieve per collection task. Defaults to 0. Set to 0 to retrieve all pages."""
 
 
 class InputWizContentConfig(BaseModel):
     content_type: Annotated[str, pydantic.Field(alias="contentType")]
     r"""The name of the Wiz query"""
 
+    content_query: Annotated[str, pydantic.Field(alias="contentQuery")]
+    r"""Template for POST body to send with the Collect request. Reference global variables, or functions using template params: `${C.vars.myVar}`, or `${Date.now()}`, `${param}`."""
+
     content_description: Annotated[
         Optional[str], pydantic.Field(alias="contentDescription")
     ] = None
 
     enabled: Optional[bool] = False
 
+    state_tracking: Annotated[Optional[bool], pydantic.Field(alias="stateTracking")] = (
+        False
+    )
+    r"""Track collection progress between consecutive scheduled executions"""
+
+    state_update_expression: Annotated[
+        Optional[str], pydantic.Field(alias="stateUpdateExpression")
+    ] = "__timestampExtracted !== false && {latestTime: (state.latestTime || 0) > _time ? state.latestTime : _time}"
+    r"""JavaScript expression that defines how to update the state from an event. Use the event's data and the current state to compute the new state. See [Understanding State Expression Fields](https://docs.cribl.io/stream/collectors-rest#state-tracking-expression-fields) for more information."""
+
+    state_merge_expression: Annotated[
+        Optional[str], pydantic.Field(alias="stateMergeExpression")
+    ] = "prevState.latestTime > newState.latestTime ? prevState : newState"
+    r"""JavaScript expression that defines which state to keep when merging a task's newly reported state with previously saved state. Evaluates `prevState` and `newState` variables, resolving to the state to keep."""
+
+    manage_state: Annotated[
+        Optional[ManageState], pydantic.Field(alias="manageState")
+    ] = None
+
+    cron_schedule: Annotated[Optional[str], pydantic.Field(alias="cronSchedule")] = (
+        "0 */12 * * *"
+    )
+    r"""A cron schedule on which to run this job"""
+
+    earliest: Optional[str] = "-12h@h"
+    r"""Earliest time, relative to now. Format supported: [+|-]<time_integer><time_unit>@<snap-to_time_unit> (ex: -1hr, -42m, -42m@h)"""
+
+    latest: Optional[str] = "now"
+    r"""Latest time, relative to now. Format supported: [+|-]<time_integer><time_unit>@<snap-to_time_unit> (ex: -1hr, -42m, -42m@h)"""
+
+    job_timeout: Annotated[Optional[str], pydantic.Field(alias="jobTimeout")] = "0"
+    r"""Maximum time the job is allowed to run (examples: 30, 45s, 15m). Units default to seconds if not specified. Enter 0 for unlimited time."""
+
+    log_level: Annotated[
+        Annotated[
+            Optional[InputWizLogLevel], PlainValidator(validate_open_enum(False))
+        ],
+        pydantic.Field(alias="logLevel"),
+    ] = InputWizLogLevel.INFO
+    r"""Collector runtime log level"""
+
+    max_pages: Annotated[Optional[float], pydantic.Field(alias="maxPages")] = 0
+    r"""Maximum number of pages to retrieve per collection task. Defaults to 0. Set to 0 to retrieve all pages."""
+
+    @field_serializer("log_level")
+    def serialize_log_level(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputWizLogLevel(value)
+            except ValueError:
+                return value
+        return value
+
 
 class InputWizMetadatumTypedDict(TypedDict):
     name: str