pulumi-splunk 1.3.0a1744699028__py3-none-any.whl → 1.3.0a1762412804__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-splunk might be problematic. Click here for more details.

Files changed (39) hide show
  1. pulumi_splunk/__init__.py +2 -2
  2. pulumi_splunk/_inputs.py +1275 -1276
  3. pulumi_splunk/_utilities.py +1 -1
  4. pulumi_splunk/admin_saml_groups.py +37 -37
  5. pulumi_splunk/apps_local.py +210 -210
  6. pulumi_splunk/authentication_users.py +156 -156
  7. pulumi_splunk/authorization_roles.py +224 -224
  8. pulumi_splunk/config/__init__.py +2 -2
  9. pulumi_splunk/config/__init__.pyi +3 -5
  10. pulumi_splunk/config/vars.py +9 -11
  11. pulumi_splunk/configs_conf.py +40 -40
  12. pulumi_splunk/data_ui_views.py +40 -40
  13. pulumi_splunk/generic_acl.py +23 -23
  14. pulumi_splunk/global_http_event_collector.py +122 -122
  15. pulumi_splunk/indexes.py +652 -652
  16. pulumi_splunk/inputs_http_event_collector.py +159 -159
  17. pulumi_splunk/inputs_monitor.py +261 -261
  18. pulumi_splunk/inputs_script.py +159 -159
  19. pulumi_splunk/inputs_tcp_cooked.py +91 -91
  20. pulumi_splunk/inputs_tcp_raw.py +176 -176
  21. pulumi_splunk/inputs_tcp_splunk_tcp_token.py +40 -40
  22. pulumi_splunk/inputs_tcp_ssl.py +88 -88
  23. pulumi_splunk/inputs_udp.py +193 -193
  24. pulumi_splunk/lookup_definition.py +40 -40
  25. pulumi_splunk/lookup_table_file.py +71 -71
  26. pulumi_splunk/outputs.py +857 -858
  27. pulumi_splunk/outputs_tcp_default.py +142 -142
  28. pulumi_splunk/outputs_tcp_group.py +176 -176
  29. pulumi_splunk/outputs_tcp_server.py +176 -176
  30. pulumi_splunk/outputs_tcp_syslog.py +125 -125
  31. pulumi_splunk/provider.py +94 -79
  32. pulumi_splunk/pulumi-plugin.json +1 -1
  33. pulumi_splunk/saved_searches.py +3099 -2887
  34. pulumi_splunk/sh_indexes_manager.py +74 -74
  35. {pulumi_splunk-1.3.0a1744699028.dist-info → pulumi_splunk-1.3.0a1762412804.dist-info}/METADATA +2 -2
  36. pulumi_splunk-1.3.0a1762412804.dist-info/RECORD +39 -0
  37. {pulumi_splunk-1.3.0a1744699028.dist-info → pulumi_splunk-1.3.0a1762412804.dist-info}/WHEEL +1 -1
  38. pulumi_splunk-1.3.0a1744699028.dist-info/RECORD +0 -39
  39. {pulumi_splunk-1.3.0a1744699028.dist-info → pulumi_splunk-1.3.0a1762412804.dist-info}/top_level.txt +0 -0
pulumi_splunk/inputs_tcp_raw.py CHANGED
@@ -1,9 +1,8 @@
1
1
  # coding=utf-8
2
- # *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
2
+ # *** WARNING: this file was generated by pulumi-language-python. ***
3
3
  # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
4
 
5
- import builtins
6
- import copy
5
+ import builtins as _builtins
7
6
  import warnings
8
7
  import sys
9
8
  import pulumi
@@ -23,39 +22,39 @@ __all__ = ['InputsTcpRawArgs', 'InputsTcpRaw']
23
22
  class InputsTcpRawArgs:
24
23
  def __init__(__self__, *,
25
24
  acl: Optional[pulumi.Input['InputsTcpRawAclArgs']] = None,
26
- connection_host: Optional[pulumi.Input[builtins.str]] = None,
27
- disabled: Optional[pulumi.Input[builtins.bool]] = None,
28
- host: Optional[pulumi.Input[builtins.str]] = None,
29
- index: Optional[pulumi.Input[builtins.str]] = None,
30
- name: Optional[pulumi.Input[builtins.str]] = None,
31
- queue: Optional[pulumi.Input[builtins.str]] = None,
32
- raw_tcp_done_timeout: Optional[pulumi.Input[builtins.int]] = None,
33
- restrict_to_host: Optional[pulumi.Input[builtins.str]] = None,
34
- source: Optional[pulumi.Input[builtins.str]] = None,
35
- sourcetype: Optional[pulumi.Input[builtins.str]] = None):
25
+ connection_host: Optional[pulumi.Input[_builtins.str]] = None,
26
+ disabled: Optional[pulumi.Input[_builtins.bool]] = None,
27
+ host: Optional[pulumi.Input[_builtins.str]] = None,
28
+ index: Optional[pulumi.Input[_builtins.str]] = None,
29
+ name: Optional[pulumi.Input[_builtins.str]] = None,
30
+ queue: Optional[pulumi.Input[_builtins.str]] = None,
31
+ raw_tcp_done_timeout: Optional[pulumi.Input[_builtins.int]] = None,
32
+ restrict_to_host: Optional[pulumi.Input[_builtins.str]] = None,
33
+ source: Optional[pulumi.Input[_builtins.str]] = None,
34
+ sourcetype: Optional[pulumi.Input[_builtins.str]] = None):
36
35
  """
37
36
  The set of arguments for constructing a InputsTcpRaw resource.
38
37
  :param pulumi.Input['InputsTcpRawAclArgs'] acl: The app/user context that is the namespace for the resource
39
- :param pulumi.Input[builtins.str] connection_host: Valid values: (ip | dns | none)
38
+ :param pulumi.Input[_builtins.str] connection_host: Valid values: (ip | dns | none)
40
39
  Set the host for the remote server that is sending data.
41
40
  ip sets the host to the IP address of the remote server sending data.
42
41
  dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
43
42
  none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
44
43
  Default value is dns.
45
- :param pulumi.Input[builtins.bool] disabled: Indicates if input is disabled.
46
- :param pulumi.Input[builtins.str] host: Host from which the indexer gets data.
47
- :param pulumi.Input[builtins.str] index: Index to store generated events. Defaults to default.
48
- :param pulumi.Input[builtins.str] name: The input port which receives raw data.
49
- :param pulumi.Input[builtins.str] queue: Valid values: (parsingQueue | indexQueue)
44
+ :param pulumi.Input[_builtins.bool] disabled: Indicates if input is disabled.
45
+ :param pulumi.Input[_builtins.str] host: Host from which the indexer gets data.
46
+ :param pulumi.Input[_builtins.str] index: Index to store generated events. Defaults to default.
47
+ :param pulumi.Input[_builtins.str] name: The input port which receives raw data.
48
+ :param pulumi.Input[_builtins.str] queue: Valid values: (parsingQueue | indexQueue)
50
49
  Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
51
50
  Set queue to parsingQueue to apply props.conf and other parsing rules to your data. For more information about props.conf and rules for timestamping and linebreaking, refer to props.conf and the online documentation at "Monitor files and directories with inputs.conf"
52
51
  Set queue to indexQueue to send your data directly into the index.
53
- :param pulumi.Input[builtins.int] raw_tcp_done_timeout: Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
52
+ :param pulumi.Input[_builtins.int] raw_tcp_done_timeout: Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
54
53
  If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
55
- :param pulumi.Input[builtins.str] restrict_to_host: Allows for restricting this input to only accept data from the host specified here.
56
- :param pulumi.Input[builtins.str] source: Sets the source key/field for events from this input. Defaults to the input file path.
54
+ :param pulumi.Input[_builtins.str] restrict_to_host: Allows for restricting this input to only accept data from the host specified here.
55
+ :param pulumi.Input[_builtins.str] source: Sets the source key/field for events from this input. Defaults to the input file path.
57
56
  Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
58
- :param pulumi.Input[builtins.str] sourcetype: Set the source type for events from this input.
57
+ :param pulumi.Input[_builtins.str] sourcetype: Set the source type for events from this input.
59
58
  "sourcetype=" is automatically prepended to <string>.
60
59
  Defaults to audittrail (if signedaudit=true) or fschange (if signedaudit=false).
61
60
  """
@@ -82,7 +81,7 @@ class InputsTcpRawArgs:
82
81
  if sourcetype is not None:
83
82
  pulumi.set(__self__, "sourcetype", sourcetype)
84
83
 
85
- @property
84
+ @_builtins.property
86
85
  @pulumi.getter
87
86
  def acl(self) -> Optional[pulumi.Input['InputsTcpRawAclArgs']]:
88
87
  """
@@ -94,9 +93,9 @@ class InputsTcpRawArgs:
94
93
  def acl(self, value: Optional[pulumi.Input['InputsTcpRawAclArgs']]):
95
94
  pulumi.set(self, "acl", value)
96
95
 
97
- @property
96
+ @_builtins.property
98
97
  @pulumi.getter(name="connectionHost")
99
- def connection_host(self) -> Optional[pulumi.Input[builtins.str]]:
98
+ def connection_host(self) -> Optional[pulumi.Input[_builtins.str]]:
100
99
  """
101
100
  Valid values: (ip | dns | none)
102
101
  Set the host for the remote server that is sending data.
@@ -108,60 +107,60 @@ class InputsTcpRawArgs:
108
107
  return pulumi.get(self, "connection_host")
109
108
 
110
109
  @connection_host.setter
111
- def connection_host(self, value: Optional[pulumi.Input[builtins.str]]):
110
+ def connection_host(self, value: Optional[pulumi.Input[_builtins.str]]):
112
111
  pulumi.set(self, "connection_host", value)
113
112
 
114
- @property
113
+ @_builtins.property
115
114
  @pulumi.getter
116
- def disabled(self) -> Optional[pulumi.Input[builtins.bool]]:
115
+ def disabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
117
116
  """
118
117
  Indicates if input is disabled.
119
118
  """
120
119
  return pulumi.get(self, "disabled")
121
120
 
122
121
  @disabled.setter
123
- def disabled(self, value: Optional[pulumi.Input[builtins.bool]]):
122
+ def disabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
124
123
  pulumi.set(self, "disabled", value)
125
124
 
126
- @property
125
+ @_builtins.property
127
126
  @pulumi.getter
128
- def host(self) -> Optional[pulumi.Input[builtins.str]]:
127
+ def host(self) -> Optional[pulumi.Input[_builtins.str]]:
129
128
  """
130
129
  Host from which the indexer gets data.
131
130
  """
132
131
  return pulumi.get(self, "host")
133
132
 
134
133
  @host.setter
135
- def host(self, value: Optional[pulumi.Input[builtins.str]]):
134
+ def host(self, value: Optional[pulumi.Input[_builtins.str]]):
136
135
  pulumi.set(self, "host", value)
137
136
 
138
- @property
137
+ @_builtins.property
139
138
  @pulumi.getter
140
- def index(self) -> Optional[pulumi.Input[builtins.str]]:
139
+ def index(self) -> Optional[pulumi.Input[_builtins.str]]:
141
140
  """
142
141
  Index to store generated events. Defaults to default.
143
142
  """
144
143
  return pulumi.get(self, "index")
145
144
 
146
145
  @index.setter
147
- def index(self, value: Optional[pulumi.Input[builtins.str]]):
146
+ def index(self, value: Optional[pulumi.Input[_builtins.str]]):
148
147
  pulumi.set(self, "index", value)
149
148
 
150
- @property
149
+ @_builtins.property
151
150
  @pulumi.getter
152
- def name(self) -> Optional[pulumi.Input[builtins.str]]:
151
+ def name(self) -> Optional[pulumi.Input[_builtins.str]]:
153
152
  """
154
153
  The input port which receives raw data.
155
154
  """
156
155
  return pulumi.get(self, "name")
157
156
 
158
157
  @name.setter
159
- def name(self, value: Optional[pulumi.Input[builtins.str]]):
158
+ def name(self, value: Optional[pulumi.Input[_builtins.str]]):
160
159
  pulumi.set(self, "name", value)
161
160
 
162
- @property
161
+ @_builtins.property
163
162
  @pulumi.getter
164
- def queue(self) -> Optional[pulumi.Input[builtins.str]]:
163
+ def queue(self) -> Optional[pulumi.Input[_builtins.str]]:
165
164
  """
166
165
  Valid values: (parsingQueue | indexQueue)
167
166
  Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
@@ -171,12 +170,12 @@ class InputsTcpRawArgs:
171
170
  return pulumi.get(self, "queue")
172
171
 
173
172
  @queue.setter
174
- def queue(self, value: Optional[pulumi.Input[builtins.str]]):
173
+ def queue(self, value: Optional[pulumi.Input[_builtins.str]]):
175
174
  pulumi.set(self, "queue", value)
176
175
 
177
- @property
176
+ @_builtins.property
178
177
  @pulumi.getter(name="rawTcpDoneTimeout")
179
- def raw_tcp_done_timeout(self) -> Optional[pulumi.Input[builtins.int]]:
178
+ def raw_tcp_done_timeout(self) -> Optional[pulumi.Input[_builtins.int]]:
180
179
  """
181
180
  Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
182
181
  If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
@@ -184,24 +183,24 @@ class InputsTcpRawArgs:
184
183
  return pulumi.get(self, "raw_tcp_done_timeout")
185
184
 
186
185
  @raw_tcp_done_timeout.setter
187
- def raw_tcp_done_timeout(self, value: Optional[pulumi.Input[builtins.int]]):
186
+ def raw_tcp_done_timeout(self, value: Optional[pulumi.Input[_builtins.int]]):
188
187
  pulumi.set(self, "raw_tcp_done_timeout", value)
189
188
 
190
- @property
189
+ @_builtins.property
191
190
  @pulumi.getter(name="restrictToHost")
192
- def restrict_to_host(self) -> Optional[pulumi.Input[builtins.str]]:
191
+ def restrict_to_host(self) -> Optional[pulumi.Input[_builtins.str]]:
193
192
  """
194
193
  Allows for restricting this input to only accept data from the host specified here.
195
194
  """
196
195
  return pulumi.get(self, "restrict_to_host")
197
196
 
198
197
  @restrict_to_host.setter
199
- def restrict_to_host(self, value: Optional[pulumi.Input[builtins.str]]):
198
+ def restrict_to_host(self, value: Optional[pulumi.Input[_builtins.str]]):
200
199
  pulumi.set(self, "restrict_to_host", value)
201
200
 
202
- @property
201
+ @_builtins.property
203
202
  @pulumi.getter
204
- def source(self) -> Optional[pulumi.Input[builtins.str]]:
203
+ def source(self) -> Optional[pulumi.Input[_builtins.str]]:
205
204
  """
206
205
  Sets the source key/field for events from this input. Defaults to the input file path.
207
206
  Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
@@ -209,12 +208,12 @@ class InputsTcpRawArgs:
209
208
  return pulumi.get(self, "source")
210
209
 
211
210
  @source.setter
212
- def source(self, value: Optional[pulumi.Input[builtins.str]]):
211
+ def source(self, value: Optional[pulumi.Input[_builtins.str]]):
213
212
  pulumi.set(self, "source", value)
214
213
 
215
- @property
214
+ @_builtins.property
216
215
  @pulumi.getter
217
- def sourcetype(self) -> Optional[pulumi.Input[builtins.str]]:
216
+ def sourcetype(self) -> Optional[pulumi.Input[_builtins.str]]:
218
217
  """
219
218
  Set the source type for events from this input.
220
219
  "sourcetype=" is automatically prepended to <string>.
@@ -223,7 +222,7 @@ class InputsTcpRawArgs:
223
222
  return pulumi.get(self, "sourcetype")
224
223
 
225
224
  @sourcetype.setter
226
- def sourcetype(self, value: Optional[pulumi.Input[builtins.str]]):
225
+ def sourcetype(self, value: Optional[pulumi.Input[_builtins.str]]):
227
226
  pulumi.set(self, "sourcetype", value)
228
227
 
229
228
 
@@ -231,39 +230,39 @@ class InputsTcpRawArgs:
231
230
  class _InputsTcpRawState:
232
231
  def __init__(__self__, *,
233
232
  acl: Optional[pulumi.Input['InputsTcpRawAclArgs']] = None,
234
- connection_host: Optional[pulumi.Input[builtins.str]] = None,
235
- disabled: Optional[pulumi.Input[builtins.bool]] = None,
236
- host: Optional[pulumi.Input[builtins.str]] = None,
237
- index: Optional[pulumi.Input[builtins.str]] = None,
238
- name: Optional[pulumi.Input[builtins.str]] = None,
239
- queue: Optional[pulumi.Input[builtins.str]] = None,
240
- raw_tcp_done_timeout: Optional[pulumi.Input[builtins.int]] = None,
241
- restrict_to_host: Optional[pulumi.Input[builtins.str]] = None,
242
- source: Optional[pulumi.Input[builtins.str]] = None,
243
- sourcetype: Optional[pulumi.Input[builtins.str]] = None):
233
+ connection_host: Optional[pulumi.Input[_builtins.str]] = None,
234
+ disabled: Optional[pulumi.Input[_builtins.bool]] = None,
235
+ host: Optional[pulumi.Input[_builtins.str]] = None,
236
+ index: Optional[pulumi.Input[_builtins.str]] = None,
237
+ name: Optional[pulumi.Input[_builtins.str]] = None,
238
+ queue: Optional[pulumi.Input[_builtins.str]] = None,
239
+ raw_tcp_done_timeout: Optional[pulumi.Input[_builtins.int]] = None,
240
+ restrict_to_host: Optional[pulumi.Input[_builtins.str]] = None,
241
+ source: Optional[pulumi.Input[_builtins.str]] = None,
242
+ sourcetype: Optional[pulumi.Input[_builtins.str]] = None):
244
243
  """
245
244
  Input properties used for looking up and filtering InputsTcpRaw resources.
246
245
  :param pulumi.Input['InputsTcpRawAclArgs'] acl: The app/user context that is the namespace for the resource
247
- :param pulumi.Input[builtins.str] connection_host: Valid values: (ip | dns | none)
246
+ :param pulumi.Input[_builtins.str] connection_host: Valid values: (ip | dns | none)
248
247
  Set the host for the remote server that is sending data.
249
248
  ip sets the host to the IP address of the remote server sending data.
250
249
  dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
251
250
  none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
252
251
  Default value is dns.
253
- :param pulumi.Input[builtins.bool] disabled: Indicates if input is disabled.
254
- :param pulumi.Input[builtins.str] host: Host from which the indexer gets data.
255
- :param pulumi.Input[builtins.str] index: Index to store generated events. Defaults to default.
256
- :param pulumi.Input[builtins.str] name: The input port which receives raw data.
257
- :param pulumi.Input[builtins.str] queue: Valid values: (parsingQueue | indexQueue)
252
+ :param pulumi.Input[_builtins.bool] disabled: Indicates if input is disabled.
253
+ :param pulumi.Input[_builtins.str] host: Host from which the indexer gets data.
254
+ :param pulumi.Input[_builtins.str] index: Index to store generated events. Defaults to default.
255
+ :param pulumi.Input[_builtins.str] name: The input port which receives raw data.
256
+ :param pulumi.Input[_builtins.str] queue: Valid values: (parsingQueue | indexQueue)
258
257
  Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
259
258
  Set queue to parsingQueue to apply props.conf and other parsing rules to your data. For more information about props.conf and rules for timestamping and linebreaking, refer to props.conf and the online documentation at "Monitor files and directories with inputs.conf"
260
259
  Set queue to indexQueue to send your data directly into the index.
261
- :param pulumi.Input[builtins.int] raw_tcp_done_timeout: Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
260
+ :param pulumi.Input[_builtins.int] raw_tcp_done_timeout: Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
262
261
  If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
263
- :param pulumi.Input[builtins.str] restrict_to_host: Allows for restricting this input to only accept data from the host specified here.
264
- :param pulumi.Input[builtins.str] source: Sets the source key/field for events from this input. Defaults to the input file path.
262
+ :param pulumi.Input[_builtins.str] restrict_to_host: Allows for restricting this input to only accept data from the host specified here.
263
+ :param pulumi.Input[_builtins.str] source: Sets the source key/field for events from this input. Defaults to the input file path.
265
264
  Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
266
- :param pulumi.Input[builtins.str] sourcetype: Set the source type for events from this input.
265
+ :param pulumi.Input[_builtins.str] sourcetype: Set the source type for events from this input.
267
266
  "sourcetype=" is automatically prepended to <string>.
268
267
  Defaults to audittrail (if signedaudit=true) or fschange (if signedaudit=false).
269
268
  """
@@ -290,7 +289,7 @@ class _InputsTcpRawState:
290
289
  if sourcetype is not None:
291
290
  pulumi.set(__self__, "sourcetype", sourcetype)
292
291
 
293
- @property
292
+ @_builtins.property
294
293
  @pulumi.getter
295
294
  def acl(self) -> Optional[pulumi.Input['InputsTcpRawAclArgs']]:
296
295
  """
@@ -302,9 +301,9 @@ class _InputsTcpRawState:
302
301
  def acl(self, value: Optional[pulumi.Input['InputsTcpRawAclArgs']]):
303
302
  pulumi.set(self, "acl", value)
304
303
 
305
- @property
304
+ @_builtins.property
306
305
  @pulumi.getter(name="connectionHost")
307
- def connection_host(self) -> Optional[pulumi.Input[builtins.str]]:
306
+ def connection_host(self) -> Optional[pulumi.Input[_builtins.str]]:
308
307
  """
309
308
  Valid values: (ip | dns | none)
310
309
  Set the host for the remote server that is sending data.
@@ -316,60 +315,60 @@ class _InputsTcpRawState:
316
315
  return pulumi.get(self, "connection_host")
317
316
 
318
317
  @connection_host.setter
319
- def connection_host(self, value: Optional[pulumi.Input[builtins.str]]):
318
+ def connection_host(self, value: Optional[pulumi.Input[_builtins.str]]):
320
319
  pulumi.set(self, "connection_host", value)
321
320
 
322
- @property
321
+ @_builtins.property
323
322
  @pulumi.getter
324
- def disabled(self) -> Optional[pulumi.Input[builtins.bool]]:
323
+ def disabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
325
324
  """
326
325
  Indicates if input is disabled.
327
326
  """
328
327
  return pulumi.get(self, "disabled")
329
328
 
330
329
  @disabled.setter
331
- def disabled(self, value: Optional[pulumi.Input[builtins.bool]]):
330
+ def disabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
332
331
  pulumi.set(self, "disabled", value)
333
332
 
334
- @property
333
+ @_builtins.property
335
334
  @pulumi.getter
336
- def host(self) -> Optional[pulumi.Input[builtins.str]]:
335
+ def host(self) -> Optional[pulumi.Input[_builtins.str]]:
337
336
  """
338
337
  Host from which the indexer gets data.
339
338
  """
340
339
  return pulumi.get(self, "host")
341
340
 
342
341
  @host.setter
343
- def host(self, value: Optional[pulumi.Input[builtins.str]]):
342
+ def host(self, value: Optional[pulumi.Input[_builtins.str]]):
344
343
  pulumi.set(self, "host", value)
345
344
 
346
- @property
345
+ @_builtins.property
347
346
  @pulumi.getter
348
- def index(self) -> Optional[pulumi.Input[builtins.str]]:
347
+ def index(self) -> Optional[pulumi.Input[_builtins.str]]:
349
348
  """
350
349
  Index to store generated events. Defaults to default.
351
350
  """
352
351
  return pulumi.get(self, "index")
353
352
 
354
353
  @index.setter
355
- def index(self, value: Optional[pulumi.Input[builtins.str]]):
354
+ def index(self, value: Optional[pulumi.Input[_builtins.str]]):
356
355
  pulumi.set(self, "index", value)
357
356
 
358
- @property
357
+ @_builtins.property
359
358
  @pulumi.getter
360
- def name(self) -> Optional[pulumi.Input[builtins.str]]:
359
+ def name(self) -> Optional[pulumi.Input[_builtins.str]]:
361
360
  """
362
361
  The input port which receives raw data.
363
362
  """
364
363
  return pulumi.get(self, "name")
365
364
 
366
365
  @name.setter
367
- def name(self, value: Optional[pulumi.Input[builtins.str]]):
366
+ def name(self, value: Optional[pulumi.Input[_builtins.str]]):
368
367
  pulumi.set(self, "name", value)
369
368
 
370
- @property
369
+ @_builtins.property
371
370
  @pulumi.getter
372
- def queue(self) -> Optional[pulumi.Input[builtins.str]]:
371
+ def queue(self) -> Optional[pulumi.Input[_builtins.str]]:
373
372
  """
374
373
  Valid values: (parsingQueue | indexQueue)
375
374
  Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
@@ -379,12 +378,12 @@ class _InputsTcpRawState:
379
378
  return pulumi.get(self, "queue")
380
379
 
381
380
  @queue.setter
382
- def queue(self, value: Optional[pulumi.Input[builtins.str]]):
381
+ def queue(self, value: Optional[pulumi.Input[_builtins.str]]):
383
382
  pulumi.set(self, "queue", value)
384
383
 
385
- @property
384
+ @_builtins.property
386
385
  @pulumi.getter(name="rawTcpDoneTimeout")
387
- def raw_tcp_done_timeout(self) -> Optional[pulumi.Input[builtins.int]]:
386
+ def raw_tcp_done_timeout(self) -> Optional[pulumi.Input[_builtins.int]]:
388
387
  """
389
388
  Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
390
389
  If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
@@ -392,24 +391,24 @@ class _InputsTcpRawState:
392
391
  return pulumi.get(self, "raw_tcp_done_timeout")
393
392
 
394
393
  @raw_tcp_done_timeout.setter
395
- def raw_tcp_done_timeout(self, value: Optional[pulumi.Input[builtins.int]]):
394
+ def raw_tcp_done_timeout(self, value: Optional[pulumi.Input[_builtins.int]]):
396
395
  pulumi.set(self, "raw_tcp_done_timeout", value)
397
396
 
398
- @property
397
+ @_builtins.property
399
398
  @pulumi.getter(name="restrictToHost")
400
- def restrict_to_host(self) -> Optional[pulumi.Input[builtins.str]]:
399
+ def restrict_to_host(self) -> Optional[pulumi.Input[_builtins.str]]:
401
400
  """
402
401
  Allows for restricting this input to only accept data from the host specified here.
403
402
  """
404
403
  return pulumi.get(self, "restrict_to_host")
405
404
 
406
405
  @restrict_to_host.setter
407
- def restrict_to_host(self, value: Optional[pulumi.Input[builtins.str]]):
406
+ def restrict_to_host(self, value: Optional[pulumi.Input[_builtins.str]]):
408
407
  pulumi.set(self, "restrict_to_host", value)
409
408
 
410
- @property
409
+ @_builtins.property
411
410
  @pulumi.getter
412
- def source(self) -> Optional[pulumi.Input[builtins.str]]:
411
+ def source(self) -> Optional[pulumi.Input[_builtins.str]]:
413
412
  """
414
413
  Sets the source key/field for events from this input. Defaults to the input file path.
415
414
  Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
@@ -417,12 +416,12 @@ class _InputsTcpRawState:
417
416
  return pulumi.get(self, "source")
418
417
 
419
418
  @source.setter
420
- def source(self, value: Optional[pulumi.Input[builtins.str]]):
419
+ def source(self, value: Optional[pulumi.Input[_builtins.str]]):
421
420
  pulumi.set(self, "source", value)
422
421
 
423
- @property
422
+ @_builtins.property
424
423
  @pulumi.getter
425
- def sourcetype(self) -> Optional[pulumi.Input[builtins.str]]:
424
+ def sourcetype(self) -> Optional[pulumi.Input[_builtins.str]]:
426
425
  """
427
426
  Set the source type for events from this input.
428
427
  "sourcetype=" is automatically prepended to <string>.
@@ -431,26 +430,27 @@ class _InputsTcpRawState:
431
430
  return pulumi.get(self, "sourcetype")
432
431
 
433
432
  @sourcetype.setter
434
- def sourcetype(self, value: Optional[pulumi.Input[builtins.str]]):
433
+ def sourcetype(self, value: Optional[pulumi.Input[_builtins.str]]):
435
434
  pulumi.set(self, "sourcetype", value)
436
435
 
437
436
 
437
+ @pulumi.type_token("splunk:index/inputsTcpRaw:InputsTcpRaw")
438
438
  class InputsTcpRaw(pulumi.CustomResource):
439
439
  @overload
440
440
  def __init__(__self__,
441
441
  resource_name: str,
442
442
  opts: Optional[pulumi.ResourceOptions] = None,
443
443
  acl: Optional[pulumi.Input[Union['InputsTcpRawAclArgs', 'InputsTcpRawAclArgsDict']]] = None,
444
- connection_host: Optional[pulumi.Input[builtins.str]] = None,
445
- disabled: Optional[pulumi.Input[builtins.bool]] = None,
446
- host: Optional[pulumi.Input[builtins.str]] = None,
447
- index: Optional[pulumi.Input[builtins.str]] = None,
448
- name: Optional[pulumi.Input[builtins.str]] = None,
449
- queue: Optional[pulumi.Input[builtins.str]] = None,
450
- raw_tcp_done_timeout: Optional[pulumi.Input[builtins.int]] = None,
451
- restrict_to_host: Optional[pulumi.Input[builtins.str]] = None,
452
- source: Optional[pulumi.Input[builtins.str]] = None,
453
- sourcetype: Optional[pulumi.Input[builtins.str]] = None,
444
+ connection_host: Optional[pulumi.Input[_builtins.str]] = None,
445
+ disabled: Optional[pulumi.Input[_builtins.bool]] = None,
446
+ host: Optional[pulumi.Input[_builtins.str]] = None,
447
+ index: Optional[pulumi.Input[_builtins.str]] = None,
448
+ name: Optional[pulumi.Input[_builtins.str]] = None,
449
+ queue: Optional[pulumi.Input[_builtins.str]] = None,
450
+ raw_tcp_done_timeout: Optional[pulumi.Input[_builtins.int]] = None,
451
+ restrict_to_host: Optional[pulumi.Input[_builtins.str]] = None,
452
+ source: Optional[pulumi.Input[_builtins.str]] = None,
453
+ sourcetype: Optional[pulumi.Input[_builtins.str]] = None,
454
454
  __props__=None):
455
455
  """
456
456
  ## # Resource: InputsTcpRaw
@@ -475,26 +475,26 @@ class InputsTcpRaw(pulumi.CustomResource):
475
475
  :param str resource_name: The name of the resource.
476
476
  :param pulumi.ResourceOptions opts: Options for the resource.
477
477
  :param pulumi.Input[Union['InputsTcpRawAclArgs', 'InputsTcpRawAclArgsDict']] acl: The app/user context that is the namespace for the resource
478
- :param pulumi.Input[builtins.str] connection_host: Valid values: (ip | dns | none)
478
+ :param pulumi.Input[_builtins.str] connection_host: Valid values: (ip | dns | none)
479
479
  Set the host for the remote server that is sending data.
480
480
  ip sets the host to the IP address of the remote server sending data.
481
481
  dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
482
482
  none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
483
483
  Default value is dns.
484
- :param pulumi.Input[builtins.bool] disabled: Indicates if input is disabled.
485
- :param pulumi.Input[builtins.str] host: Host from which the indexer gets data.
486
- :param pulumi.Input[builtins.str] index: Index to store generated events. Defaults to default.
487
- :param pulumi.Input[builtins.str] name: The input port which receives raw data.
488
- :param pulumi.Input[builtins.str] queue: Valid values: (parsingQueue | indexQueue)
484
+ :param pulumi.Input[_builtins.bool] disabled: Indicates if input is disabled.
485
+ :param pulumi.Input[_builtins.str] host: Host from which the indexer gets data.
486
+ :param pulumi.Input[_builtins.str] index: Index to store generated events. Defaults to default.
487
+ :param pulumi.Input[_builtins.str] name: The input port which receives raw data.
488
+ :param pulumi.Input[_builtins.str] queue: Valid values: (parsingQueue | indexQueue)
489
489
  Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
490
490
  Set queue to parsingQueue to apply props.conf and other parsing rules to your data. For more information about props.conf and rules for timestamping and linebreaking, refer to props.conf and the online documentation at "Monitor files and directories with inputs.conf"
491
491
  Set queue to indexQueue to send your data directly into the index.
492
- :param pulumi.Input[builtins.int] raw_tcp_done_timeout: Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
492
+ :param pulumi.Input[_builtins.int] raw_tcp_done_timeout: Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
493
493
  If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
494
- :param pulumi.Input[builtins.str] restrict_to_host: Allows for restricting this input to only accept data from the host specified here.
495
- :param pulumi.Input[builtins.str] source: Sets the source key/field for events from this input. Defaults to the input file path.
494
+ :param pulumi.Input[_builtins.str] restrict_to_host: Allows for restricting this input to only accept data from the host specified here.
495
+ :param pulumi.Input[_builtins.str] source: Sets the source key/field for events from this input. Defaults to the input file path.
496
496
  Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
497
- :param pulumi.Input[builtins.str] sourcetype: Set the source type for events from this input.
497
+ :param pulumi.Input[_builtins.str] sourcetype: Set the source type for events from this input.
498
498
  "sourcetype=" is automatically prepended to <string>.
499
499
  Defaults to audittrail (if signedaudit=true) or fschange (if signedaudit=false).
500
500
  """
@@ -540,16 +540,16 @@ class InputsTcpRaw(pulumi.CustomResource):
540
540
  resource_name: str,
541
541
  opts: Optional[pulumi.ResourceOptions] = None,
542
542
  acl: Optional[pulumi.Input[Union['InputsTcpRawAclArgs', 'InputsTcpRawAclArgsDict']]] = None,
543
- connection_host: Optional[pulumi.Input[builtins.str]] = None,
544
- disabled: Optional[pulumi.Input[builtins.bool]] = None,
545
- host: Optional[pulumi.Input[builtins.str]] = None,
546
- index: Optional[pulumi.Input[builtins.str]] = None,
547
- name: Optional[pulumi.Input[builtins.str]] = None,
548
- queue: Optional[pulumi.Input[builtins.str]] = None,
549
- raw_tcp_done_timeout: Optional[pulumi.Input[builtins.int]] = None,
550
- restrict_to_host: Optional[pulumi.Input[builtins.str]] = None,
551
- source: Optional[pulumi.Input[builtins.str]] = None,
552
- sourcetype: Optional[pulumi.Input[builtins.str]] = None,
543
+ connection_host: Optional[pulumi.Input[_builtins.str]] = None,
544
+ disabled: Optional[pulumi.Input[_builtins.bool]] = None,
545
+ host: Optional[pulumi.Input[_builtins.str]] = None,
546
+ index: Optional[pulumi.Input[_builtins.str]] = None,
547
+ name: Optional[pulumi.Input[_builtins.str]] = None,
548
+ queue: Optional[pulumi.Input[_builtins.str]] = None,
549
+ raw_tcp_done_timeout: Optional[pulumi.Input[_builtins.int]] = None,
550
+ restrict_to_host: Optional[pulumi.Input[_builtins.str]] = None,
551
+ source: Optional[pulumi.Input[_builtins.str]] = None,
552
+ sourcetype: Optional[pulumi.Input[_builtins.str]] = None,
553
553
  __props__=None):
554
554
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
555
555
  if not isinstance(opts, pulumi.ResourceOptions):
@@ -581,16 +581,16 @@ class InputsTcpRaw(pulumi.CustomResource):
581
581
  id: pulumi.Input[str],
582
582
  opts: Optional[pulumi.ResourceOptions] = None,
583
583
  acl: Optional[pulumi.Input[Union['InputsTcpRawAclArgs', 'InputsTcpRawAclArgsDict']]] = None,
584
- connection_host: Optional[pulumi.Input[builtins.str]] = None,
585
- disabled: Optional[pulumi.Input[builtins.bool]] = None,
586
- host: Optional[pulumi.Input[builtins.str]] = None,
587
- index: Optional[pulumi.Input[builtins.str]] = None,
588
- name: Optional[pulumi.Input[builtins.str]] = None,
589
- queue: Optional[pulumi.Input[builtins.str]] = None,
590
- raw_tcp_done_timeout: Optional[pulumi.Input[builtins.int]] = None,
591
- restrict_to_host: Optional[pulumi.Input[builtins.str]] = None,
592
- source: Optional[pulumi.Input[builtins.str]] = None,
593
- sourcetype: Optional[pulumi.Input[builtins.str]] = None) -> 'InputsTcpRaw':
584
+ connection_host: Optional[pulumi.Input[_builtins.str]] = None,
585
+ disabled: Optional[pulumi.Input[_builtins.bool]] = None,
586
+ host: Optional[pulumi.Input[_builtins.str]] = None,
587
+ index: Optional[pulumi.Input[_builtins.str]] = None,
588
+ name: Optional[pulumi.Input[_builtins.str]] = None,
589
+ queue: Optional[pulumi.Input[_builtins.str]] = None,
590
+ raw_tcp_done_timeout: Optional[pulumi.Input[_builtins.int]] = None,
591
+ restrict_to_host: Optional[pulumi.Input[_builtins.str]] = None,
592
+ source: Optional[pulumi.Input[_builtins.str]] = None,
593
+ sourcetype: Optional[pulumi.Input[_builtins.str]] = None) -> 'InputsTcpRaw':
594
594
  """
595
595
  Get an existing InputsTcpRaw resource's state with the given name, id, and optional extra
596
596
  properties used to qualify the lookup.
@@ -599,26 +599,26 @@ class InputsTcpRaw(pulumi.CustomResource):
599
599
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
600
600
  :param pulumi.ResourceOptions opts: Options for the resource.
601
601
  :param pulumi.Input[Union['InputsTcpRawAclArgs', 'InputsTcpRawAclArgsDict']] acl: The app/user context that is the namespace for the resource
602
- :param pulumi.Input[builtins.str] connection_host: Valid values: (ip | dns | none)
602
+ :param pulumi.Input[_builtins.str] connection_host: Valid values: (ip | dns | none)
603
603
  Set the host for the remote server that is sending data.
604
604
  ip sets the host to the IP address of the remote server sending data.
605
605
  dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
606
606
  none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
607
607
  Default value is dns.
608
- :param pulumi.Input[builtins.bool] disabled: Indicates if input is disabled.
609
- :param pulumi.Input[builtins.str] host: Host from which the indexer gets data.
610
- :param pulumi.Input[builtins.str] index: Index to store generated events. Defaults to default.
611
- :param pulumi.Input[builtins.str] name: The input port which receives raw data.
612
- :param pulumi.Input[builtins.str] queue: Valid values: (parsingQueue | indexQueue)
608
+ :param pulumi.Input[_builtins.bool] disabled: Indicates if input is disabled.
609
+ :param pulumi.Input[_builtins.str] host: Host from which the indexer gets data.
610
+ :param pulumi.Input[_builtins.str] index: Index to store generated events. Defaults to default.
611
+ :param pulumi.Input[_builtins.str] name: The input port which receives raw data.
612
+ :param pulumi.Input[_builtins.str] queue: Valid values: (parsingQueue | indexQueue)
613
613
  Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
614
614
  Set queue to parsingQueue to apply props.conf and other parsing rules to your data. For more information about props.conf and rules for timestamping and linebreaking, refer to props.conf and the online documentation at "Monitor files and directories with inputs.conf"
615
615
  Set queue to indexQueue to send your data directly into the index.
616
- :param pulumi.Input[builtins.int] raw_tcp_done_timeout: Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
616
+ :param pulumi.Input[_builtins.int] raw_tcp_done_timeout: Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
617
617
  If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
618
- :param pulumi.Input[builtins.str] restrict_to_host: Allows for restricting this input to only accept data from the host specified here.
619
- :param pulumi.Input[builtins.str] source: Sets the source key/field for events from this input. Defaults to the input file path.
618
+ :param pulumi.Input[_builtins.str] restrict_to_host: Allows for restricting this input to only accept data from the host specified here.
619
+ :param pulumi.Input[_builtins.str] source: Sets the source key/field for events from this input. Defaults to the input file path.
620
620
  Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
621
- :param pulumi.Input[builtins.str] sourcetype: Set the source type for events from this input.
621
+ :param pulumi.Input[_builtins.str] sourcetype: Set the source type for events from this input.
622
622
  "sourcetype=" is automatically prepended to <string>.
623
623
  Defaults to audittrail (if signedaudit=true) or fschange (if signedaudit=false).
624
624
  """
@@ -639,7 +639,7 @@ class InputsTcpRaw(pulumi.CustomResource):
639
639
  __props__.__dict__["sourcetype"] = sourcetype
640
640
  return InputsTcpRaw(resource_name, opts=opts, __props__=__props__)
641
641
 
642
- @property
642
+ @_builtins.property
643
643
  @pulumi.getter
644
644
  def acl(self) -> pulumi.Output['outputs.InputsTcpRawAcl']:
645
645
  """
@@ -647,9 +647,9 @@ class InputsTcpRaw(pulumi.CustomResource):
647
647
  """
648
648
  return pulumi.get(self, "acl")
649
649
 
650
- @property
650
+ @_builtins.property
651
651
  @pulumi.getter(name="connectionHost")
652
- def connection_host(self) -> pulumi.Output[builtins.str]:
652
+ def connection_host(self) -> pulumi.Output[_builtins.str]:
653
653
  """
654
654
  Valid values: (ip | dns | none)
655
655
  Set the host for the remote server that is sending data.
@@ -660,41 +660,41 @@ class InputsTcpRaw(pulumi.CustomResource):
660
660
  """
661
661
  return pulumi.get(self, "connection_host")
662
662
 
663
- @property
663
+ @_builtins.property
664
664
  @pulumi.getter
665
- def disabled(self) -> pulumi.Output[builtins.bool]:
665
+ def disabled(self) -> pulumi.Output[_builtins.bool]:
666
666
  """
667
667
  Indicates if input is disabled.
668
668
  """
669
669
  return pulumi.get(self, "disabled")
670
670
 
671
- @property
671
+ @_builtins.property
672
672
  @pulumi.getter
673
- def host(self) -> pulumi.Output[builtins.str]:
673
+ def host(self) -> pulumi.Output[_builtins.str]:
674
674
  """
675
675
  Host from which the indexer gets data.
676
676
  """
677
677
  return pulumi.get(self, "host")
678
678
 
679
- @property
679
+ @_builtins.property
680
680
  @pulumi.getter
681
- def index(self) -> pulumi.Output[builtins.str]:
681
+ def index(self) -> pulumi.Output[_builtins.str]:
682
682
  """
683
683
  Index to store generated events. Defaults to default.
684
684
  """
685
685
  return pulumi.get(self, "index")
686
686
 
687
- @property
687
+ @_builtins.property
688
688
  @pulumi.getter
689
- def name(self) -> pulumi.Output[builtins.str]:
689
+ def name(self) -> pulumi.Output[_builtins.str]:
690
690
  """
691
691
  The input port which receives raw data.
692
692
  """
693
693
  return pulumi.get(self, "name")
694
694
 
695
- @property
695
+ @_builtins.property
696
696
  @pulumi.getter
697
- def queue(self) -> pulumi.Output[builtins.str]:
697
+ def queue(self) -> pulumi.Output[_builtins.str]:
698
698
  """
699
699
  Valid values: (parsingQueue | indexQueue)
700
700
  Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
@@ -703,35 +703,35 @@ class InputsTcpRaw(pulumi.CustomResource):
703
703
  """
704
704
  return pulumi.get(self, "queue")
705
705
 
706
- @property
706
+ @_builtins.property
707
707
  @pulumi.getter(name="rawTcpDoneTimeout")
708
- def raw_tcp_done_timeout(self) -> pulumi.Output[builtins.int]:
708
+ def raw_tcp_done_timeout(self) -> pulumi.Output[_builtins.int]:
709
709
  """
710
710
  Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
711
711
  If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
712
712
  """
713
713
  return pulumi.get(self, "raw_tcp_done_timeout")
714
714
 
715
- @property
715
+ @_builtins.property
716
716
  @pulumi.getter(name="restrictToHost")
717
- def restrict_to_host(self) -> pulumi.Output[builtins.str]:
717
+ def restrict_to_host(self) -> pulumi.Output[_builtins.str]:
718
718
  """
719
719
  Allows for restricting this input to only accept data from the host specified here.
720
720
  """
721
721
  return pulumi.get(self, "restrict_to_host")
722
722
 
723
- @property
723
+ @_builtins.property
724
724
  @pulumi.getter
725
- def source(self) -> pulumi.Output[builtins.str]:
725
+ def source(self) -> pulumi.Output[_builtins.str]:
726
726
  """
727
727
  Sets the source key/field for events from this input. Defaults to the input file path.
728
728
  Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
729
729
  """
730
730
  return pulumi.get(self, "source")
731
731
 
732
- @property
732
+ @_builtins.property
733
733
  @pulumi.getter
734
- def sourcetype(self) -> pulumi.Output[builtins.str]:
734
+ def sourcetype(self) -> pulumi.Output[_builtins.str]:
735
735
  """
736
736
  Set the source type for events from this input.
737
737
  "sourcetype=" is automatically prepended to <string>.