pulumi-splunk 1.3.0a1710160292__py3-none-any.whl → 1.3.0a1736835690__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-splunk might be problematic. Click here for more details.
- pulumi_splunk/__init__.py +18 -0
- pulumi_splunk/_inputs.py +1218 -77
- pulumi_splunk/_utilities.py +41 -5
- pulumi_splunk/admin_saml_groups.py +17 -12
- pulumi_splunk/apps_local.py +18 -15
- pulumi_splunk/authentication_users.py +9 -6
- pulumi_splunk/authorization_roles.py +17 -14
- pulumi_splunk/config/__init__.pyi +5 -0
- pulumi_splunk/config/vars.py +5 -0
- pulumi_splunk/configs_conf.py +20 -15
- pulumi_splunk/data_ui_views.py +20 -17
- pulumi_splunk/generic_acl.py +42 -41
- pulumi_splunk/global_http_event_collector.py +5 -4
- pulumi_splunk/indexes.py +12 -9
- pulumi_splunk/inputs_http_event_collector.py +28 -25
- pulumi_splunk/inputs_monitor.py +12 -9
- pulumi_splunk/inputs_script.py +16 -11
- pulumi_splunk/inputs_tcp_cooked.py +16 -13
- pulumi_splunk/inputs_tcp_raw.py +18 -15
- pulumi_splunk/inputs_tcp_splunk_tcp_token.py +16 -11
- pulumi_splunk/inputs_tcp_ssl.py +5 -4
- pulumi_splunk/inputs_udp.py +16 -13
- pulumi_splunk/lookup_definition.py +300 -0
- pulumi_splunk/lookup_table_file.py +367 -0
- pulumi_splunk/outputs.py +206 -36
- pulumi_splunk/outputs_tcp_default.py +20 -17
- pulumi_splunk/outputs_tcp_group.py +16 -13
- pulumi_splunk/outputs_tcp_server.py +16 -11
- pulumi_splunk/outputs_tcp_syslog.py +18 -15
- pulumi_splunk/provider.py +5 -0
- pulumi_splunk/pulumi-plugin.json +2 -1
- pulumi_splunk/saved_searches.py +100 -50
- pulumi_splunk/sh_indexes_manager.py +10 -7
- {pulumi_splunk-1.3.0a1710160292.dist-info → pulumi_splunk-1.3.0a1736835690.dist-info}/METADATA +7 -6
- pulumi_splunk-1.3.0a1736835690.dist-info/RECORD +39 -0
- {pulumi_splunk-1.3.0a1710160292.dist-info → pulumi_splunk-1.3.0a1736835690.dist-info}/WHEEL +1 -1
- pulumi_splunk-1.3.0a1710160292.dist-info/RECORD +0 -37
- {pulumi_splunk-1.3.0a1710160292.dist-info → pulumi_splunk-1.3.0a1736835690.dist-info}/top_level.txt +0 -0
pulumi_splunk/saved_searches.py
CHANGED
|
@@ -4,9 +4,14 @@
|
|
|
4
4
|
|
|
5
5
|
import copy
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
from . import outputs
|
|
12
17
|
from ._inputs import *
|
|
@@ -65,6 +70,7 @@ class SavedSearchesArgs:
|
|
|
65
70
|
action_email_use_tls: Optional[pulumi.Input[bool]] = None,
|
|
66
71
|
action_email_width_sort_columns: Optional[pulumi.Input[bool]] = None,
|
|
67
72
|
action_jira_service_desk_param_account: Optional[pulumi.Input[str]] = None,
|
|
73
|
+
action_jira_service_desk_param_jira_customfields: Optional[pulumi.Input[str]] = None,
|
|
68
74
|
action_jira_service_desk_param_jira_description: Optional[pulumi.Input[str]] = None,
|
|
69
75
|
action_jira_service_desk_param_jira_issue_type: Optional[pulumi.Input[str]] = None,
|
|
70
76
|
action_jira_service_desk_param_jira_priority: Optional[pulumi.Input[str]] = None,
|
|
@@ -229,6 +235,7 @@ class SavedSearchesArgs:
|
|
|
229
235
|
:param pulumi.Input[bool] action_email_use_tls: Indicates whether to use TLS (transport layer security) when communicating with the SMTP server (starttls).Defaults to false.
|
|
230
236
|
:param pulumi.Input[bool] action_email_width_sort_columns: Indicates whether columns should be sorted from least wide to most wide, left to right.Only valid if format=text.
|
|
231
237
|
:param pulumi.Input[str] action_jira_service_desk_param_account: Jira Service Desk account name
|
|
238
|
+
:param pulumi.Input[str] action_jira_service_desk_param_jira_customfields: Jira custom fields data (see https://ta-jira-service-desk-simple-addon.readthedocs.io/en/latest/userguide.html)
|
|
232
239
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_description: Jira issue description
|
|
233
240
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_issue_type: Jira issue type name
|
|
234
241
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_priority: Jira priority of issue
|
|
@@ -301,7 +308,7 @@ class SavedSearchesArgs:
|
|
|
301
308
|
:param pulumi.Input[bool] alert_suppress: Indicates whether alert suppression is enabled for this scheduled search.
|
|
302
309
|
:param pulumi.Input[str] alert_suppress_fields: Comma delimited list of fields to use for suppression when doing per result alerting. Required if suppression is turned on and per result alerting is enabled.
|
|
303
310
|
:param pulumi.Input[str] alert_suppress_period: Valid values: [number][time-unit] Specifies the suppresion period. Only valid if alert.supress is enabled.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
|
|
304
|
-
:param pulumi.Input[str] alert_threshold: Valid values are: Integer[
|
|
311
|
+
:param pulumi.Input[str] alert_threshold: Valid values are: Integer[%]Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alert_comparator is set to rises by perc or drops by perc.
|
|
305
312
|
:param pulumi.Input[bool] alert_track: Valid values: (true | false | auto) Specifies whether to track the actions triggered by this scheduled search.auto - determine whether to track or not based on the tracking setting of each action, do not track scheduled searches that always trigger actions. Default value true - force alert tracking.false - disable alert tracking for this search.
|
|
306
313
|
:param pulumi.Input[str] alert_type: What to base the alert on, overriden by alert_condition if it is specified. Valid values are: always, custom, number of events, number of hosts, number of sources.
|
|
307
314
|
:param pulumi.Input[str] allow_skew: Allows the search scheduler to distribute scheduled searches randomly and more evenly over their specified search periods.
|
|
@@ -310,7 +317,7 @@ class SavedSearchesArgs:
|
|
|
310
317
|
:param pulumi.Input[str] auto_summarize_cron_schedule: Cron schedule that probes and generates the summaries for this saved search.The default value is */10 * * * * and corresponds to \\`every ten hours\\`.
|
|
311
318
|
:param pulumi.Input[str] auto_summarize_dispatch_earliest_time: A time string that specifies the earliest time for summarizing this search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
|
|
312
319
|
:param pulumi.Input[str] auto_summarize_dispatch_latest_time: A time string that specifies the latest time for summarizing this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
|
|
313
|
-
:param pulumi.Input[str] auto_summarize_dispatch_time_format: Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to
|
|
320
|
+
:param pulumi.Input[str] auto_summarize_dispatch_time_format: Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
314
321
|
:param pulumi.Input[str] auto_summarize_dispatch_ttl: Valid values: Integer[p]. Defaults to 60.Indicates the time to live (in seconds) for the artifacts of the summarization of the scheduled search.
|
|
315
322
|
:param pulumi.Input[int] auto_summarize_max_disabled_buckets: The maximum number of buckets with the suspended summarization before the summarization search is completely stopped, and the summarization of the search is suspended for auto_summarize.suspend_period. Defaults to 2.
|
|
316
323
|
:param pulumi.Input[float] auto_summarize_max_summary_ratio: The maximum ratio of summary_size/bucket_size, which specifies when to stop summarization and deem it unhelpful for a bucket. Defaults to 0.1 Note: The test is only performed if the summary size is larger than auto_summarize.max_summary_size.
|
|
@@ -336,7 +343,7 @@ class SavedSearchesArgs:
|
|
|
336
343
|
:param pulumi.Input[bool] dispatch_rt_backfill: Whether to back fill the real time window for this search. Parameter valid only if this is a real time search. Defaults to 0.
|
|
337
344
|
:param pulumi.Input[int] dispatch_rt_maximum_span: Allows for a per-job override of the [search] indexed_realtime_maximum_span setting in limits.conf.
|
|
338
345
|
:param pulumi.Input[bool] dispatch_spawn_process: Specifies whether a new search process spawns when this saved search is executed. Defaults to 1. Searches against indexes must run in a separate process.
|
|
339
|
-
:param pulumi.Input[str] dispatch_time_format: A time format string that defines the time format for specifying the earliest and latest time. Defaults to
|
|
346
|
+
:param pulumi.Input[str] dispatch_time_format: A time format string that defines the time format for specifying the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
340
347
|
:param pulumi.Input[str] dispatch_ttl: Valid values: Integer[p]. Defaults to 2p.Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no actions are triggered.
|
|
341
348
|
:param pulumi.Input[str] display_view: Defines the default UI view name (not label) in which to load the results. Accessibility is subject to the user having sufficient permissions.
|
|
342
349
|
:param pulumi.Input[bool] is_scheduled: Whether this search is to be run on a schedule
|
|
@@ -450,6 +457,8 @@ class SavedSearchesArgs:
|
|
|
450
457
|
pulumi.set(__self__, "action_email_width_sort_columns", action_email_width_sort_columns)
|
|
451
458
|
if action_jira_service_desk_param_account is not None:
|
|
452
459
|
pulumi.set(__self__, "action_jira_service_desk_param_account", action_jira_service_desk_param_account)
|
|
460
|
+
if action_jira_service_desk_param_jira_customfields is not None:
|
|
461
|
+
pulumi.set(__self__, "action_jira_service_desk_param_jira_customfields", action_jira_service_desk_param_jira_customfields)
|
|
453
462
|
if action_jira_service_desk_param_jira_description is not None:
|
|
454
463
|
pulumi.set(__self__, "action_jira_service_desk_param_jira_description", action_jira_service_desk_param_jira_description)
|
|
455
464
|
if action_jira_service_desk_param_jira_issue_type is not None:
|
|
@@ -1265,6 +1274,18 @@ class SavedSearchesArgs:
|
|
|
1265
1274
|
def action_jira_service_desk_param_account(self, value: Optional[pulumi.Input[str]]):
|
|
1266
1275
|
pulumi.set(self, "action_jira_service_desk_param_account", value)
|
|
1267
1276
|
|
|
1277
|
+
@property
|
|
1278
|
+
@pulumi.getter(name="actionJiraServiceDeskParamJiraCustomfields")
|
|
1279
|
+
def action_jira_service_desk_param_jira_customfields(self) -> Optional[pulumi.Input[str]]:
|
|
1280
|
+
"""
|
|
1281
|
+
Jira custom fields data (see https://ta-jira-service-desk-simple-addon.readthedocs.io/en/latest/userguide.html)
|
|
1282
|
+
"""
|
|
1283
|
+
return pulumi.get(self, "action_jira_service_desk_param_jira_customfields")
|
|
1284
|
+
|
|
1285
|
+
@action_jira_service_desk_param_jira_customfields.setter
|
|
1286
|
+
def action_jira_service_desk_param_jira_customfields(self, value: Optional[pulumi.Input[str]]):
|
|
1287
|
+
pulumi.set(self, "action_jira_service_desk_param_jira_customfields", value)
|
|
1288
|
+
|
|
1268
1289
|
@property
|
|
1269
1290
|
@pulumi.getter(name="actionJiraServiceDeskParamJiraDescription")
|
|
1270
1291
|
def action_jira_service_desk_param_jira_description(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -2023,7 +2044,7 @@ class SavedSearchesArgs:
|
|
|
2023
2044
|
@pulumi.getter(name="alertThreshold")
|
|
2024
2045
|
def alert_threshold(self) -> Optional[pulumi.Input[str]]:
|
|
2025
2046
|
"""
|
|
2026
|
-
Valid values are: Integer[
|
|
2047
|
+
Valid values are: Integer[%]Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alert_comparator is set to rises by perc or drops by perc.
|
|
2027
2048
|
"""
|
|
2028
2049
|
return pulumi.get(self, "alert_threshold")
|
|
2029
2050
|
|
|
@@ -2131,7 +2152,7 @@ class SavedSearchesArgs:
|
|
|
2131
2152
|
@pulumi.getter(name="autoSummarizeDispatchTimeFormat")
|
|
2132
2153
|
def auto_summarize_dispatch_time_format(self) -> Optional[pulumi.Input[str]]:
|
|
2133
2154
|
"""
|
|
2134
|
-
Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to
|
|
2155
|
+
Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
2135
2156
|
"""
|
|
2136
2157
|
return pulumi.get(self, "auto_summarize_dispatch_time_format")
|
|
2137
2158
|
|
|
@@ -2443,7 +2464,7 @@ class SavedSearchesArgs:
|
|
|
2443
2464
|
@pulumi.getter(name="dispatchTimeFormat")
|
|
2444
2465
|
def dispatch_time_format(self) -> Optional[pulumi.Input[str]]:
|
|
2445
2466
|
"""
|
|
2446
|
-
A time format string that defines the time format for specifying the earliest and latest time. Defaults to
|
|
2467
|
+
A time format string that defines the time format for specifying the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
2447
2468
|
"""
|
|
2448
2469
|
return pulumi.get(self, "dispatch_time_format")
|
|
2449
2470
|
|
|
@@ -2684,6 +2705,7 @@ class _SavedSearchesState:
|
|
|
2684
2705
|
action_email_use_tls: Optional[pulumi.Input[bool]] = None,
|
|
2685
2706
|
action_email_width_sort_columns: Optional[pulumi.Input[bool]] = None,
|
|
2686
2707
|
action_jira_service_desk_param_account: Optional[pulumi.Input[str]] = None,
|
|
2708
|
+
action_jira_service_desk_param_jira_customfields: Optional[pulumi.Input[str]] = None,
|
|
2687
2709
|
action_jira_service_desk_param_jira_description: Optional[pulumi.Input[str]] = None,
|
|
2688
2710
|
action_jira_service_desk_param_jira_issue_type: Optional[pulumi.Input[str]] = None,
|
|
2689
2711
|
action_jira_service_desk_param_jira_priority: Optional[pulumi.Input[str]] = None,
|
|
@@ -2853,6 +2875,7 @@ class _SavedSearchesState:
|
|
|
2853
2875
|
:param pulumi.Input[bool] action_email_use_tls: Indicates whether to use TLS (transport layer security) when communicating with the SMTP server (starttls).Defaults to false.
|
|
2854
2876
|
:param pulumi.Input[bool] action_email_width_sort_columns: Indicates whether columns should be sorted from least wide to most wide, left to right.Only valid if format=text.
|
|
2855
2877
|
:param pulumi.Input[str] action_jira_service_desk_param_account: Jira Service Desk account name
|
|
2878
|
+
:param pulumi.Input[str] action_jira_service_desk_param_jira_customfields: Jira custom fields data (see https://ta-jira-service-desk-simple-addon.readthedocs.io/en/latest/userguide.html)
|
|
2856
2879
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_description: Jira issue description
|
|
2857
2880
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_issue_type: Jira issue type name
|
|
2858
2881
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_priority: Jira priority of issue
|
|
@@ -2929,7 +2952,7 @@ class _SavedSearchesState:
|
|
|
2929
2952
|
:param pulumi.Input[bool] alert_suppress: Indicates whether alert suppression is enabled for this scheduled search.
|
|
2930
2953
|
:param pulumi.Input[str] alert_suppress_fields: Comma delimited list of fields to use for suppression when doing per result alerting. Required if suppression is turned on and per result alerting is enabled.
|
|
2931
2954
|
:param pulumi.Input[str] alert_suppress_period: Valid values: [number][time-unit] Specifies the suppresion period. Only valid if alert.supress is enabled.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
|
|
2932
|
-
:param pulumi.Input[str] alert_threshold: Valid values are: Integer[
|
|
2955
|
+
:param pulumi.Input[str] alert_threshold: Valid values are: Integer[%]Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alert_comparator is set to rises by perc or drops by perc.
|
|
2933
2956
|
:param pulumi.Input[bool] alert_track: Valid values: (true | false | auto) Specifies whether to track the actions triggered by this scheduled search.auto - determine whether to track or not based on the tracking setting of each action, do not track scheduled searches that always trigger actions. Default value true - force alert tracking.false - disable alert tracking for this search.
|
|
2934
2957
|
:param pulumi.Input[str] alert_type: What to base the alert on, overriden by alert_condition if it is specified. Valid values are: always, custom, number of events, number of hosts, number of sources.
|
|
2935
2958
|
:param pulumi.Input[str] allow_skew: Allows the search scheduler to distribute scheduled searches randomly and more evenly over their specified search periods.
|
|
@@ -2938,7 +2961,7 @@ class _SavedSearchesState:
|
|
|
2938
2961
|
:param pulumi.Input[str] auto_summarize_cron_schedule: Cron schedule that probes and generates the summaries for this saved search.The default value is */10 * * * * and corresponds to \\`every ten hours\\`.
|
|
2939
2962
|
:param pulumi.Input[str] auto_summarize_dispatch_earliest_time: A time string that specifies the earliest time for summarizing this search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
|
|
2940
2963
|
:param pulumi.Input[str] auto_summarize_dispatch_latest_time: A time string that specifies the latest time for summarizing this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
|
|
2941
|
-
:param pulumi.Input[str] auto_summarize_dispatch_time_format: Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to
|
|
2964
|
+
:param pulumi.Input[str] auto_summarize_dispatch_time_format: Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
2942
2965
|
:param pulumi.Input[str] auto_summarize_dispatch_ttl: Valid values: Integer[p]. Defaults to 60.Indicates the time to live (in seconds) for the artifacts of the summarization of the scheduled search.
|
|
2943
2966
|
:param pulumi.Input[int] auto_summarize_max_disabled_buckets: The maximum number of buckets with the suspended summarization before the summarization search is completely stopped, and the summarization of the search is suspended for auto_summarize.suspend_period. Defaults to 2.
|
|
2944
2967
|
:param pulumi.Input[float] auto_summarize_max_summary_ratio: The maximum ratio of summary_size/bucket_size, which specifies when to stop summarization and deem it unhelpful for a bucket. Defaults to 0.1 Note: The test is only performed if the summary size is larger than auto_summarize.max_summary_size.
|
|
@@ -2964,7 +2987,7 @@ class _SavedSearchesState:
|
|
|
2964
2987
|
:param pulumi.Input[bool] dispatch_rt_backfill: Whether to back fill the real time window for this search. Parameter valid only if this is a real time search. Defaults to 0.
|
|
2965
2988
|
:param pulumi.Input[int] dispatch_rt_maximum_span: Allows for a per-job override of the [search] indexed_realtime_maximum_span setting in limits.conf.
|
|
2966
2989
|
:param pulumi.Input[bool] dispatch_spawn_process: Specifies whether a new search process spawns when this saved search is executed. Defaults to 1. Searches against indexes must run in a separate process.
|
|
2967
|
-
:param pulumi.Input[str] dispatch_time_format: A time format string that defines the time format for specifying the earliest and latest time. Defaults to
|
|
2990
|
+
:param pulumi.Input[str] dispatch_time_format: A time format string that defines the time format for specifying the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
2968
2991
|
:param pulumi.Input[str] dispatch_ttl: Valid values: Integer[p]. Defaults to 2p.Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no actions are triggered.
|
|
2969
2992
|
:param pulumi.Input[str] display_view: Defines the default UI view name (not label) in which to load the results. Accessibility is subject to the user having sufficient permissions.
|
|
2970
2993
|
:param pulumi.Input[bool] is_scheduled: Whether this search is to be run on a schedule
|
|
@@ -3080,6 +3103,8 @@ class _SavedSearchesState:
|
|
|
3080
3103
|
pulumi.set(__self__, "action_email_width_sort_columns", action_email_width_sort_columns)
|
|
3081
3104
|
if action_jira_service_desk_param_account is not None:
|
|
3082
3105
|
pulumi.set(__self__, "action_jira_service_desk_param_account", action_jira_service_desk_param_account)
|
|
3106
|
+
if action_jira_service_desk_param_jira_customfields is not None:
|
|
3107
|
+
pulumi.set(__self__, "action_jira_service_desk_param_jira_customfields", action_jira_service_desk_param_jira_customfields)
|
|
3083
3108
|
if action_jira_service_desk_param_jira_description is not None:
|
|
3084
3109
|
pulumi.set(__self__, "action_jira_service_desk_param_jira_description", action_jira_service_desk_param_jira_description)
|
|
3085
3110
|
if action_jira_service_desk_param_jira_issue_type is not None:
|
|
@@ -3905,6 +3930,18 @@ class _SavedSearchesState:
|
|
|
3905
3930
|
def action_jira_service_desk_param_account(self, value: Optional[pulumi.Input[str]]):
|
|
3906
3931
|
pulumi.set(self, "action_jira_service_desk_param_account", value)
|
|
3907
3932
|
|
|
3933
|
+
@property
|
|
3934
|
+
@pulumi.getter(name="actionJiraServiceDeskParamJiraCustomfields")
|
|
3935
|
+
def action_jira_service_desk_param_jira_customfields(self) -> Optional[pulumi.Input[str]]:
|
|
3936
|
+
"""
|
|
3937
|
+
Jira custom fields data (see https://ta-jira-service-desk-simple-addon.readthedocs.io/en/latest/userguide.html)
|
|
3938
|
+
"""
|
|
3939
|
+
return pulumi.get(self, "action_jira_service_desk_param_jira_customfields")
|
|
3940
|
+
|
|
3941
|
+
@action_jira_service_desk_param_jira_customfields.setter
|
|
3942
|
+
def action_jira_service_desk_param_jira_customfields(self, value: Optional[pulumi.Input[str]]):
|
|
3943
|
+
pulumi.set(self, "action_jira_service_desk_param_jira_customfields", value)
|
|
3944
|
+
|
|
3908
3945
|
@property
|
|
3909
3946
|
@pulumi.getter(name="actionJiraServiceDeskParamJiraDescription")
|
|
3910
3947
|
def action_jira_service_desk_param_jira_description(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -4711,7 +4748,7 @@ class _SavedSearchesState:
|
|
|
4711
4748
|
@pulumi.getter(name="alertThreshold")
|
|
4712
4749
|
def alert_threshold(self) -> Optional[pulumi.Input[str]]:
|
|
4713
4750
|
"""
|
|
4714
|
-
Valid values are: Integer[
|
|
4751
|
+
Valid values are: Integer[%]Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alert_comparator is set to rises by perc or drops by perc.
|
|
4715
4752
|
"""
|
|
4716
4753
|
return pulumi.get(self, "alert_threshold")
|
|
4717
4754
|
|
|
@@ -4819,7 +4856,7 @@ class _SavedSearchesState:
|
|
|
4819
4856
|
@pulumi.getter(name="autoSummarizeDispatchTimeFormat")
|
|
4820
4857
|
def auto_summarize_dispatch_time_format(self) -> Optional[pulumi.Input[str]]:
|
|
4821
4858
|
"""
|
|
4822
|
-
Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to
|
|
4859
|
+
Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
4823
4860
|
"""
|
|
4824
4861
|
return pulumi.get(self, "auto_summarize_dispatch_time_format")
|
|
4825
4862
|
|
|
@@ -5131,7 +5168,7 @@ class _SavedSearchesState:
|
|
|
5131
5168
|
@pulumi.getter(name="dispatchTimeFormat")
|
|
5132
5169
|
def dispatch_time_format(self) -> Optional[pulumi.Input[str]]:
|
|
5133
5170
|
"""
|
|
5134
|
-
A time format string that defines the time format for specifying the earliest and latest time. Defaults to
|
|
5171
|
+
A time format string that defines the time format for specifying the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
5135
5172
|
"""
|
|
5136
5173
|
return pulumi.get(self, "dispatch_time_format")
|
|
5137
5174
|
|
|
@@ -5337,7 +5374,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5337
5374
|
def __init__(__self__,
|
|
5338
5375
|
resource_name: str,
|
|
5339
5376
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
5340
|
-
acl: Optional[pulumi.Input[
|
|
5377
|
+
acl: Optional[pulumi.Input[Union['SavedSearchesAclArgs', 'SavedSearchesAclArgsDict']]] = None,
|
|
5341
5378
|
action_create_xsoar_incident: Optional[pulumi.Input[str]] = None,
|
|
5342
5379
|
action_create_xsoar_incident_param_custom_fields: Optional[pulumi.Input[str]] = None,
|
|
5343
5380
|
action_create_xsoar_incident_param_details: Optional[pulumi.Input[str]] = None,
|
|
@@ -5385,6 +5422,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5385
5422
|
action_email_use_tls: Optional[pulumi.Input[bool]] = None,
|
|
5386
5423
|
action_email_width_sort_columns: Optional[pulumi.Input[bool]] = None,
|
|
5387
5424
|
action_jira_service_desk_param_account: Optional[pulumi.Input[str]] = None,
|
|
5425
|
+
action_jira_service_desk_param_jira_customfields: Optional[pulumi.Input[str]] = None,
|
|
5388
5426
|
action_jira_service_desk_param_jira_description: Optional[pulumi.Input[str]] = None,
|
|
5389
5427
|
action_jira_service_desk_param_jira_issue_type: Optional[pulumi.Input[str]] = None,
|
|
5390
5428
|
action_jira_service_desk_param_jira_priority: Optional[pulumi.Input[str]] = None,
|
|
@@ -5507,35 +5545,34 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5507
5545
|
|
|
5508
5546
|
## Example Usage
|
|
5509
5547
|
|
|
5510
|
-
<!--Start PulumiCodeChooser -->
|
|
5511
5548
|
```python
|
|
5512
5549
|
import pulumi
|
|
5513
5550
|
import pulumi_splunk as splunk
|
|
5514
5551
|
|
|
5515
|
-
saved_search = splunk.SavedSearches("
|
|
5516
|
-
|
|
5517
|
-
|
|
5518
|
-
|
|
5519
|
-
sharing="app",
|
|
5520
|
-
),
|
|
5552
|
+
saved_search = splunk.SavedSearches("saved_search",
|
|
5553
|
+
name="Test New Alert",
|
|
5554
|
+
search="index=main",
|
|
5555
|
+
actions="email",
|
|
5521
5556
|
action_email_format="table",
|
|
5522
|
-
action_email_max_results=10,
|
|
5523
5557
|
action_email_max_time="5m",
|
|
5558
|
+
action_email_max_results=10,
|
|
5524
5559
|
action_email_send_results=False,
|
|
5525
5560
|
action_email_subject="Splunk Alert: $name$",
|
|
5526
5561
|
action_email_to="splunk@splunk.com",
|
|
5527
5562
|
action_email_track_alert=True,
|
|
5528
|
-
actions="email",
|
|
5529
|
-
cron_schedule="*/5 * * * *",
|
|
5530
5563
|
dispatch_earliest_time="rt-15m",
|
|
5531
5564
|
dispatch_latest_time="rt-0m",
|
|
5532
|
-
|
|
5565
|
+
cron_schedule="*/5 * * * *",
|
|
5566
|
+
acl={
|
|
5567
|
+
"owner": "admin",
|
|
5568
|
+
"sharing": "app",
|
|
5569
|
+
"app": "launcher",
|
|
5570
|
+
})
|
|
5533
5571
|
```
|
|
5534
|
-
<!--End PulumiCodeChooser -->
|
|
5535
5572
|
|
|
5536
5573
|
:param str resource_name: The name of the resource.
|
|
5537
5574
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
5538
|
-
:param pulumi.Input[
|
|
5575
|
+
:param pulumi.Input[Union['SavedSearchesAclArgs', 'SavedSearchesAclArgsDict']] acl: The app/user context that is the namespace for the resource
|
|
5539
5576
|
:param pulumi.Input[str] action_create_xsoar_incident: Enable XSOAR alerting (Should by 1 (Enabled) or 0 (Disabled))
|
|
5540
5577
|
:param pulumi.Input[str] action_create_xsoar_incident_param_custom_fields: XSOAR custom incident fields (should be a comma separated list)
|
|
5541
5578
|
:param pulumi.Input[str] action_create_xsoar_incident_param_details: XSOAR incident description
|
|
@@ -5583,6 +5620,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5583
5620
|
:param pulumi.Input[bool] action_email_use_tls: Indicates whether to use TLS (transport layer security) when communicating with the SMTP server (starttls).Defaults to false.
|
|
5584
5621
|
:param pulumi.Input[bool] action_email_width_sort_columns: Indicates whether columns should be sorted from least wide to most wide, left to right.Only valid if format=text.
|
|
5585
5622
|
:param pulumi.Input[str] action_jira_service_desk_param_account: Jira Service Desk account name
|
|
5623
|
+
:param pulumi.Input[str] action_jira_service_desk_param_jira_customfields: Jira custom fields data (see https://ta-jira-service-desk-simple-addon.readthedocs.io/en/latest/userguide.html)
|
|
5586
5624
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_description: Jira issue description
|
|
5587
5625
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_issue_type: Jira issue type name
|
|
5588
5626
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_priority: Jira priority of issue
|
|
@@ -5655,7 +5693,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5655
5693
|
:param pulumi.Input[bool] alert_suppress: Indicates whether alert suppression is enabled for this scheduled search.
|
|
5656
5694
|
:param pulumi.Input[str] alert_suppress_fields: Comma delimited list of fields to use for suppression when doing per result alerting. Required if suppression is turned on and per result alerting is enabled.
|
|
5657
5695
|
:param pulumi.Input[str] alert_suppress_period: Valid values: [number][time-unit] Specifies the suppresion period. Only valid if alert.supress is enabled.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
|
|
5658
|
-
:param pulumi.Input[str] alert_threshold: Valid values are: Integer[
|
|
5696
|
+
:param pulumi.Input[str] alert_threshold: Valid values are: Integer[%]Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alert_comparator is set to rises by perc or drops by perc.
|
|
5659
5697
|
:param pulumi.Input[bool] alert_track: Valid values: (true | false | auto) Specifies whether to track the actions triggered by this scheduled search.auto - determine whether to track or not based on the tracking setting of each action, do not track scheduled searches that always trigger actions. Default value true - force alert tracking.false - disable alert tracking for this search.
|
|
5660
5698
|
:param pulumi.Input[str] alert_type: What to base the alert on, overriden by alert_condition if it is specified. Valid values are: always, custom, number of events, number of hosts, number of sources.
|
|
5661
5699
|
:param pulumi.Input[str] allow_skew: Allows the search scheduler to distribute scheduled searches randomly and more evenly over their specified search periods.
|
|
@@ -5664,7 +5702,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5664
5702
|
:param pulumi.Input[str] auto_summarize_cron_schedule: Cron schedule that probes and generates the summaries for this saved search.The default value is */10 * * * * and corresponds to \\`every ten hours\\`.
|
|
5665
5703
|
:param pulumi.Input[str] auto_summarize_dispatch_earliest_time: A time string that specifies the earliest time for summarizing this search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
|
|
5666
5704
|
:param pulumi.Input[str] auto_summarize_dispatch_latest_time: A time string that specifies the latest time for summarizing this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
|
|
5667
|
-
:param pulumi.Input[str] auto_summarize_dispatch_time_format: Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to
|
|
5705
|
+
:param pulumi.Input[str] auto_summarize_dispatch_time_format: Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
5668
5706
|
:param pulumi.Input[str] auto_summarize_dispatch_ttl: Valid values: Integer[p]. Defaults to 60.Indicates the time to live (in seconds) for the artifacts of the summarization of the scheduled search.
|
|
5669
5707
|
:param pulumi.Input[int] auto_summarize_max_disabled_buckets: The maximum number of buckets with the suspended summarization before the summarization search is completely stopped, and the summarization of the search is suspended for auto_summarize.suspend_period. Defaults to 2.
|
|
5670
5708
|
:param pulumi.Input[float] auto_summarize_max_summary_ratio: The maximum ratio of summary_size/bucket_size, which specifies when to stop summarization and deem it unhelpful for a bucket. Defaults to 0.1 Note: The test is only performed if the summary size is larger than auto_summarize.max_summary_size.
|
|
@@ -5690,7 +5728,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5690
5728
|
:param pulumi.Input[bool] dispatch_rt_backfill: Whether to back fill the real time window for this search. Parameter valid only if this is a real time search. Defaults to 0.
|
|
5691
5729
|
:param pulumi.Input[int] dispatch_rt_maximum_span: Allows for a per-job override of the [search] indexed_realtime_maximum_span setting in limits.conf.
|
|
5692
5730
|
:param pulumi.Input[bool] dispatch_spawn_process: Specifies whether a new search process spawns when this saved search is executed. Defaults to 1. Searches against indexes must run in a separate process.
|
|
5693
|
-
:param pulumi.Input[str] dispatch_time_format: A time format string that defines the time format for specifying the earliest and latest time. Defaults to
|
|
5731
|
+
:param pulumi.Input[str] dispatch_time_format: A time format string that defines the time format for specifying the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
5694
5732
|
:param pulumi.Input[str] dispatch_ttl: Valid values: Integer[p]. Defaults to 2p.Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no actions are triggered.
|
|
5695
5733
|
:param pulumi.Input[str] display_view: Defines the default UI view name (not label) in which to load the results. Accessibility is subject to the user having sufficient permissions.
|
|
5696
5734
|
:param pulumi.Input[bool] is_scheduled: Whether this search is to be run on a schedule
|
|
@@ -5721,31 +5759,30 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5721
5759
|
|
|
5722
5760
|
## Example Usage
|
|
5723
5761
|
|
|
5724
|
-
<!--Start PulumiCodeChooser -->
|
|
5725
5762
|
```python
|
|
5726
5763
|
import pulumi
|
|
5727
5764
|
import pulumi_splunk as splunk
|
|
5728
5765
|
|
|
5729
|
-
saved_search = splunk.SavedSearches("
|
|
5730
|
-
|
|
5731
|
-
|
|
5732
|
-
|
|
5733
|
-
sharing="app",
|
|
5734
|
-
),
|
|
5766
|
+
saved_search = splunk.SavedSearches("saved_search",
|
|
5767
|
+
name="Test New Alert",
|
|
5768
|
+
search="index=main",
|
|
5769
|
+
actions="email",
|
|
5735
5770
|
action_email_format="table",
|
|
5736
|
-
action_email_max_results=10,
|
|
5737
5771
|
action_email_max_time="5m",
|
|
5772
|
+
action_email_max_results=10,
|
|
5738
5773
|
action_email_send_results=False,
|
|
5739
5774
|
action_email_subject="Splunk Alert: $name$",
|
|
5740
5775
|
action_email_to="splunk@splunk.com",
|
|
5741
5776
|
action_email_track_alert=True,
|
|
5742
|
-
actions="email",
|
|
5743
|
-
cron_schedule="*/5 * * * *",
|
|
5744
5777
|
dispatch_earliest_time="rt-15m",
|
|
5745
5778
|
dispatch_latest_time="rt-0m",
|
|
5746
|
-
|
|
5779
|
+
cron_schedule="*/5 * * * *",
|
|
5780
|
+
acl={
|
|
5781
|
+
"owner": "admin",
|
|
5782
|
+
"sharing": "app",
|
|
5783
|
+
"app": "launcher",
|
|
5784
|
+
})
|
|
5747
5785
|
```
|
|
5748
|
-
<!--End PulumiCodeChooser -->
|
|
5749
5786
|
|
|
5750
5787
|
:param str resource_name: The name of the resource.
|
|
5751
5788
|
:param SavedSearchesArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -5762,7 +5799,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5762
5799
|
def _internal_init(__self__,
|
|
5763
5800
|
resource_name: str,
|
|
5764
5801
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
5765
|
-
acl: Optional[pulumi.Input[
|
|
5802
|
+
acl: Optional[pulumi.Input[Union['SavedSearchesAclArgs', 'SavedSearchesAclArgsDict']]] = None,
|
|
5766
5803
|
action_create_xsoar_incident: Optional[pulumi.Input[str]] = None,
|
|
5767
5804
|
action_create_xsoar_incident_param_custom_fields: Optional[pulumi.Input[str]] = None,
|
|
5768
5805
|
action_create_xsoar_incident_param_details: Optional[pulumi.Input[str]] = None,
|
|
@@ -5810,6 +5847,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5810
5847
|
action_email_use_tls: Optional[pulumi.Input[bool]] = None,
|
|
5811
5848
|
action_email_width_sort_columns: Optional[pulumi.Input[bool]] = None,
|
|
5812
5849
|
action_jira_service_desk_param_account: Optional[pulumi.Input[str]] = None,
|
|
5850
|
+
action_jira_service_desk_param_jira_customfields: Optional[pulumi.Input[str]] = None,
|
|
5813
5851
|
action_jira_service_desk_param_jira_description: Optional[pulumi.Input[str]] = None,
|
|
5814
5852
|
action_jira_service_desk_param_jira_issue_type: Optional[pulumi.Input[str]] = None,
|
|
5815
5853
|
action_jira_service_desk_param_jira_priority: Optional[pulumi.Input[str]] = None,
|
|
@@ -5981,6 +6019,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
5981
6019
|
__props__.__dict__["action_email_use_tls"] = action_email_use_tls
|
|
5982
6020
|
__props__.__dict__["action_email_width_sort_columns"] = action_email_width_sort_columns
|
|
5983
6021
|
__props__.__dict__["action_jira_service_desk_param_account"] = action_jira_service_desk_param_account
|
|
6022
|
+
__props__.__dict__["action_jira_service_desk_param_jira_customfields"] = action_jira_service_desk_param_jira_customfields
|
|
5984
6023
|
__props__.__dict__["action_jira_service_desk_param_jira_description"] = action_jira_service_desk_param_jira_description
|
|
5985
6024
|
__props__.__dict__["action_jira_service_desk_param_jira_issue_type"] = action_jira_service_desk_param_jira_issue_type
|
|
5986
6025
|
__props__.__dict__["action_jira_service_desk_param_jira_priority"] = action_jira_service_desk_param_jira_priority
|
|
@@ -6112,7 +6151,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
6112
6151
|
def get(resource_name: str,
|
|
6113
6152
|
id: pulumi.Input[str],
|
|
6114
6153
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
6115
|
-
acl: Optional[pulumi.Input[
|
|
6154
|
+
acl: Optional[pulumi.Input[Union['SavedSearchesAclArgs', 'SavedSearchesAclArgsDict']]] = None,
|
|
6116
6155
|
action_create_xsoar_incident: Optional[pulumi.Input[str]] = None,
|
|
6117
6156
|
action_create_xsoar_incident_param_custom_fields: Optional[pulumi.Input[str]] = None,
|
|
6118
6157
|
action_create_xsoar_incident_param_details: Optional[pulumi.Input[str]] = None,
|
|
@@ -6161,6 +6200,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
6161
6200
|
action_email_use_tls: Optional[pulumi.Input[bool]] = None,
|
|
6162
6201
|
action_email_width_sort_columns: Optional[pulumi.Input[bool]] = None,
|
|
6163
6202
|
action_jira_service_desk_param_account: Optional[pulumi.Input[str]] = None,
|
|
6203
|
+
action_jira_service_desk_param_jira_customfields: Optional[pulumi.Input[str]] = None,
|
|
6164
6204
|
action_jira_service_desk_param_jira_description: Optional[pulumi.Input[str]] = None,
|
|
6165
6205
|
action_jira_service_desk_param_jira_issue_type: Optional[pulumi.Input[str]] = None,
|
|
6166
6206
|
action_jira_service_desk_param_jira_priority: Optional[pulumi.Input[str]] = None,
|
|
@@ -6286,7 +6326,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
6286
6326
|
:param str resource_name: The unique name of the resulting resource.
|
|
6287
6327
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
6288
6328
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
6289
|
-
:param pulumi.Input[
|
|
6329
|
+
:param pulumi.Input[Union['SavedSearchesAclArgs', 'SavedSearchesAclArgsDict']] acl: The app/user context that is the namespace for the resource
|
|
6290
6330
|
:param pulumi.Input[str] action_create_xsoar_incident: Enable XSOAR alerting (Should by 1 (Enabled) or 0 (Disabled))
|
|
6291
6331
|
:param pulumi.Input[str] action_create_xsoar_incident_param_custom_fields: XSOAR custom incident fields (should be a comma separated list)
|
|
6292
6332
|
:param pulumi.Input[str] action_create_xsoar_incident_param_details: XSOAR incident description
|
|
@@ -6335,6 +6375,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
6335
6375
|
:param pulumi.Input[bool] action_email_use_tls: Indicates whether to use TLS (transport layer security) when communicating with the SMTP server (starttls).Defaults to false.
|
|
6336
6376
|
:param pulumi.Input[bool] action_email_width_sort_columns: Indicates whether columns should be sorted from least wide to most wide, left to right.Only valid if format=text.
|
|
6337
6377
|
:param pulumi.Input[str] action_jira_service_desk_param_account: Jira Service Desk account name
|
|
6378
|
+
:param pulumi.Input[str] action_jira_service_desk_param_jira_customfields: Jira custom fields data (see https://ta-jira-service-desk-simple-addon.readthedocs.io/en/latest/userguide.html)
|
|
6338
6379
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_description: Jira issue description
|
|
6339
6380
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_issue_type: Jira issue type name
|
|
6340
6381
|
:param pulumi.Input[str] action_jira_service_desk_param_jira_priority: Jira priority of issue
|
|
@@ -6411,7 +6452,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
6411
6452
|
:param pulumi.Input[bool] alert_suppress: Indicates whether alert suppression is enabled for this scheduled search.
|
|
6412
6453
|
:param pulumi.Input[str] alert_suppress_fields: Comma delimited list of fields to use for suppression when doing per result alerting. Required if suppression is turned on and per result alerting is enabled.
|
|
6413
6454
|
:param pulumi.Input[str] alert_suppress_period: Valid values: [number][time-unit] Specifies the suppresion period. Only valid if alert.supress is enabled.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
|
|
6414
|
-
:param pulumi.Input[str] alert_threshold: Valid values are: Integer[
|
|
6455
|
+
:param pulumi.Input[str] alert_threshold: Valid values are: Integer[%]Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alert_comparator is set to rises by perc or drops by perc.
|
|
6415
6456
|
:param pulumi.Input[bool] alert_track: Valid values: (true | false | auto) Specifies whether to track the actions triggered by this scheduled search.auto - determine whether to track or not based on the tracking setting of each action, do not track scheduled searches that always trigger actions. Default value true - force alert tracking.false - disable alert tracking for this search.
|
|
6416
6457
|
:param pulumi.Input[str] alert_type: What to base the alert on, overriden by alert_condition if it is specified. Valid values are: always, custom, number of events, number of hosts, number of sources.
|
|
6417
6458
|
:param pulumi.Input[str] allow_skew: Allows the search scheduler to distribute scheduled searches randomly and more evenly over their specified search periods.
|
|
@@ -6420,7 +6461,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
6420
6461
|
:param pulumi.Input[str] auto_summarize_cron_schedule: Cron schedule that probes and generates the summaries for this saved search.The default value is */10 * * * * and corresponds to \\`every ten hours\\`.
|
|
6421
6462
|
:param pulumi.Input[str] auto_summarize_dispatch_earliest_time: A time string that specifies the earliest time for summarizing this search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
|
|
6422
6463
|
:param pulumi.Input[str] auto_summarize_dispatch_latest_time: A time string that specifies the latest time for summarizing this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
|
|
6423
|
-
:param pulumi.Input[str] auto_summarize_dispatch_time_format: Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to
|
|
6464
|
+
:param pulumi.Input[str] auto_summarize_dispatch_time_format: Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
6424
6465
|
:param pulumi.Input[str] auto_summarize_dispatch_ttl: Valid values: Integer[p]. Defaults to 60.Indicates the time to live (in seconds) for the artifacts of the summarization of the scheduled search.
|
|
6425
6466
|
:param pulumi.Input[int] auto_summarize_max_disabled_buckets: The maximum number of buckets with the suspended summarization before the summarization search is completely stopped, and the summarization of the search is suspended for auto_summarize.suspend_period. Defaults to 2.
|
|
6426
6467
|
:param pulumi.Input[float] auto_summarize_max_summary_ratio: The maximum ratio of summary_size/bucket_size, which specifies when to stop summarization and deem it unhelpful for a bucket. Defaults to 0.1 Note: The test is only performed if the summary size is larger than auto_summarize.max_summary_size.
|
|
@@ -6446,7 +6487,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
6446
6487
|
:param pulumi.Input[bool] dispatch_rt_backfill: Whether to back fill the real time window for this search. Parameter valid only if this is a real time search. Defaults to 0.
|
|
6447
6488
|
:param pulumi.Input[int] dispatch_rt_maximum_span: Allows for a per-job override of the [search] indexed_realtime_maximum_span setting in limits.conf.
|
|
6448
6489
|
:param pulumi.Input[bool] dispatch_spawn_process: Specifies whether a new search process spawns when this saved search is executed. Defaults to 1. Searches against indexes must run in a separate process.
|
|
6449
|
-
:param pulumi.Input[str] dispatch_time_format: A time format string that defines the time format for specifying the earliest and latest time. Defaults to
|
|
6490
|
+
:param pulumi.Input[str] dispatch_time_format: A time format string that defines the time format for specifying the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
6450
6491
|
:param pulumi.Input[str] dispatch_ttl: Valid values: Integer[p]. Defaults to 2p.Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no actions are triggered.
|
|
6451
6492
|
:param pulumi.Input[str] display_view: Defines the default UI view name (not label) in which to load the results. Accessibility is subject to the user having sufficient permissions.
|
|
6452
6493
|
:param pulumi.Input[bool] is_scheduled: Whether this search is to be run on a schedule
|
|
@@ -6517,6 +6558,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
6517
6558
|
__props__.__dict__["action_email_use_tls"] = action_email_use_tls
|
|
6518
6559
|
__props__.__dict__["action_email_width_sort_columns"] = action_email_width_sort_columns
|
|
6519
6560
|
__props__.__dict__["action_jira_service_desk_param_account"] = action_jira_service_desk_param_account
|
|
6561
|
+
__props__.__dict__["action_jira_service_desk_param_jira_customfields"] = action_jira_service_desk_param_jira_customfields
|
|
6520
6562
|
__props__.__dict__["action_jira_service_desk_param_jira_description"] = action_jira_service_desk_param_jira_description
|
|
6521
6563
|
__props__.__dict__["action_jira_service_desk_param_jira_issue_type"] = action_jira_service_desk_param_jira_issue_type
|
|
6522
6564
|
__props__.__dict__["action_jira_service_desk_param_jira_priority"] = action_jira_service_desk_param_jira_priority
|
|
@@ -7029,6 +7071,14 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
7029
7071
|
"""
|
|
7030
7072
|
return pulumi.get(self, "action_jira_service_desk_param_account")
|
|
7031
7073
|
|
|
7074
|
+
@property
|
|
7075
|
+
@pulumi.getter(name="actionJiraServiceDeskParamJiraCustomfields")
|
|
7076
|
+
def action_jira_service_desk_param_jira_customfields(self) -> pulumi.Output[Optional[str]]:
|
|
7077
|
+
"""
|
|
7078
|
+
Jira custom fields data (see https://ta-jira-service-desk-simple-addon.readthedocs.io/en/latest/userguide.html)
|
|
7079
|
+
"""
|
|
7080
|
+
return pulumi.get(self, "action_jira_service_desk_param_jira_customfields")
|
|
7081
|
+
|
|
7032
7082
|
@property
|
|
7033
7083
|
@pulumi.getter(name="actionJiraServiceDeskParamJiraDescription")
|
|
7034
7084
|
def action_jira_service_desk_param_jira_description(self) -> pulumi.Output[Optional[str]]:
|
|
@@ -7571,7 +7621,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
7571
7621
|
@pulumi.getter(name="alertThreshold")
|
|
7572
7622
|
def alert_threshold(self) -> pulumi.Output[str]:
|
|
7573
7623
|
"""
|
|
7574
|
-
Valid values are: Integer[
|
|
7624
|
+
Valid values are: Integer[%]Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alert_comparator is set to rises by perc or drops by perc.
|
|
7575
7625
|
"""
|
|
7576
7626
|
return pulumi.get(self, "alert_threshold")
|
|
7577
7627
|
|
|
@@ -7643,7 +7693,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
7643
7693
|
@pulumi.getter(name="autoSummarizeDispatchTimeFormat")
|
|
7644
7694
|
def auto_summarize_dispatch_time_format(self) -> pulumi.Output[str]:
|
|
7645
7695
|
"""
|
|
7646
|
-
Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to
|
|
7696
|
+
Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
7647
7697
|
"""
|
|
7648
7698
|
return pulumi.get(self, "auto_summarize_dispatch_time_format")
|
|
7649
7699
|
|
|
@@ -7851,7 +7901,7 @@ class SavedSearches(pulumi.CustomResource):
|
|
|
7851
7901
|
@pulumi.getter(name="dispatchTimeFormat")
|
|
7852
7902
|
def dispatch_time_format(self) -> pulumi.Output[str]:
|
|
7853
7903
|
"""
|
|
7854
|
-
A time format string that defines the time format for specifying the earliest and latest time. Defaults to
|
|
7904
|
+
A time format string that defines the time format for specifying the earliest and latest time. Defaults to %FT%T.%Q%:z
|
|
7855
7905
|
"""
|
|
7856
7906
|
return pulumi.get(self, "dispatch_time_format")
|
|
7857
7907
|
|
|
@@ -4,9 +4,14 @@
|
|
|
4
4
|
|
|
5
5
|
import copy
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
from . import outputs
|
|
12
17
|
from ._inputs import *
|
|
@@ -194,7 +199,7 @@ class ShIndexesManager(pulumi.CustomResource):
|
|
|
194
199
|
def __init__(__self__,
|
|
195
200
|
resource_name: str,
|
|
196
201
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
197
|
-
acl: Optional[pulumi.Input[
|
|
202
|
+
acl: Optional[pulumi.Input[Union['ShIndexesManagerAclArgs', 'ShIndexesManagerAclArgsDict']]] = None,
|
|
198
203
|
datatype: Optional[pulumi.Input[str]] = None,
|
|
199
204
|
frozen_time_period_in_secs: Optional[pulumi.Input[str]] = None,
|
|
200
205
|
max_global_raw_data_size_mb: Optional[pulumi.Input[str]] = None,
|
|
@@ -211,17 +216,16 @@ class ShIndexesManager(pulumi.CustomResource):
|
|
|
211
216
|
|
|
212
217
|
## Example Usage
|
|
213
218
|
|
|
214
|
-
<!--Start PulumiCodeChooser -->
|
|
215
219
|
```python
|
|
216
220
|
import pulumi
|
|
217
221
|
import pulumi_splunk as splunk
|
|
218
222
|
|
|
219
223
|
tf_index = splunk.ShIndexesManager("tf-index",
|
|
224
|
+
name="tf-test-index-0",
|
|
220
225
|
datatype="event",
|
|
221
226
|
frozen_time_period_in_secs="94608000",
|
|
222
227
|
max_global_raw_data_size_mb="100")
|
|
223
228
|
```
|
|
224
|
-
<!--End PulumiCodeChooser -->
|
|
225
229
|
|
|
226
230
|
:param str resource_name: The name of the resource.
|
|
227
231
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
@@ -249,17 +253,16 @@ class ShIndexesManager(pulumi.CustomResource):
|
|
|
249
253
|
|
|
250
254
|
## Example Usage
|
|
251
255
|
|
|
252
|
-
<!--Start PulumiCodeChooser -->
|
|
253
256
|
```python
|
|
254
257
|
import pulumi
|
|
255
258
|
import pulumi_splunk as splunk
|
|
256
259
|
|
|
257
260
|
tf_index = splunk.ShIndexesManager("tf-index",
|
|
261
|
+
name="tf-test-index-0",
|
|
258
262
|
datatype="event",
|
|
259
263
|
frozen_time_period_in_secs="94608000",
|
|
260
264
|
max_global_raw_data_size_mb="100")
|
|
261
265
|
```
|
|
262
|
-
<!--End PulumiCodeChooser -->
|
|
263
266
|
|
|
264
267
|
:param str resource_name: The name of the resource.
|
|
265
268
|
:param ShIndexesManagerArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -276,7 +279,7 @@ class ShIndexesManager(pulumi.CustomResource):
|
|
|
276
279
|
def _internal_init(__self__,
|
|
277
280
|
resource_name: str,
|
|
278
281
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
279
|
-
acl: Optional[pulumi.Input[
|
|
282
|
+
acl: Optional[pulumi.Input[Union['ShIndexesManagerAclArgs', 'ShIndexesManagerAclArgsDict']]] = None,
|
|
280
283
|
datatype: Optional[pulumi.Input[str]] = None,
|
|
281
284
|
frozen_time_period_in_secs: Optional[pulumi.Input[str]] = None,
|
|
282
285
|
max_global_raw_data_size_mb: Optional[pulumi.Input[str]] = None,
|
|
@@ -305,7 +308,7 @@ class ShIndexesManager(pulumi.CustomResource):
|
|
|
305
308
|
def get(resource_name: str,
|
|
306
309
|
id: pulumi.Input[str],
|
|
307
310
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
308
|
-
acl: Optional[pulumi.Input[
|
|
311
|
+
acl: Optional[pulumi.Input[Union['ShIndexesManagerAclArgs', 'ShIndexesManagerAclArgsDict']]] = None,
|
|
309
312
|
datatype: Optional[pulumi.Input[str]] = None,
|
|
310
313
|
frozen_time_period_in_secs: Optional[pulumi.Input[str]] = None,
|
|
311
314
|
max_global_raw_data_size_mb: Optional[pulumi.Input[str]] = None,
|
{pulumi_splunk-1.3.0a1710160292.dist-info → pulumi_splunk-1.3.0a1736835690.dist-info}/METADATA
RENAMED
|
@@ -1,16 +1,17 @@
|
|
|
1
|
-
Metadata-Version: 2.
|
|
1
|
+
Metadata-Version: 2.2
|
|
2
2
|
Name: pulumi_splunk
|
|
3
|
-
Version: 1.3.
|
|
3
|
+
Version: 1.3.0a1736835690
|
|
4
4
|
Summary: A Pulumi package for creating and managing splunk cloud resources.
|
|
5
5
|
License: Apache-2.0
|
|
6
6
|
Project-URL: Homepage, https://pulumi.io
|
|
7
7
|
Project-URL: Repository, https://github.com/pulumi/pulumi-splunk
|
|
8
8
|
Keywords: pulumi,splunk
|
|
9
|
-
Requires-Python: >=3.
|
|
9
|
+
Requires-Python: >=3.9
|
|
10
10
|
Description-Content-Type: text/markdown
|
|
11
|
-
Requires-Dist: parver
|
|
12
|
-
Requires-Dist: pulumi
|
|
13
|
-
Requires-Dist: semver
|
|
11
|
+
Requires-Dist: parver>=0.2.1
|
|
12
|
+
Requires-Dist: pulumi<4.0.0,>=3.0.0a1
|
|
13
|
+
Requires-Dist: semver>=2.8.1
|
|
14
|
+
Requires-Dist: typing-extensions>=4.11; python_version < "3.11"
|
|
14
15
|
|
|
15
16
|
[](https://github.com/pulumi/pulumi-splunk/actions)
|
|
16
17
|
[](https://slack.pulumi.com)
|