sumologic.CseAggregationRule

EntitySelectors List<Pulumi.SumoLogic.Inputs.CseAggregationRuleEntitySelector>

The description of the generated Signals

Enabled bool

Whether the rule should generate Signals

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

MatchExpression string

The expression for which records to match on

NameExpression string

The name of the generated Signals

SeverityMapping Pulumi.SumoLogic.Inputs.CseAggregationRuleSeverityMapping

The configuration of how the severity of the Signals should be mapped from the Records

The expression to determine whether a Signal should be created based on the aggregation results

WindowSize string

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

Whether to group records by the specified entity fields

GroupByFields List<string>

A list of fields to group records by

IsPrototype bool

Whether the generated Signals should be prototype Signals

Name string

The name of the Rule

The summary of the generated Signals

AggregationFunctions []CseAggregationRuleAggregationFunctionArgs

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

Tags List<string>

The tags of the generated Signals

WindowSizeMillis string

One or more named aggregation functions

EntitySelectors []CseAggregationRuleEntitySelectorArgs

The description of the generated Signals

Enabled bool

Whether the rule should generate Signals

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

MatchExpression string

The expression for which records to match on

NameExpression string

The name of the generated Signals

SeverityMapping CseAggregationRuleSeverityMappingArgs

The configuration of how the severity of the Signals should be mapped from the Records

The expression to determine whether a Signal should be created based on the aggregation results

WindowSize string

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

Whether to group records by the specified entity fields

GroupByFields []string

A list of fields to group records by

IsPrototype bool

Whether the generated Signals should be prototype Signals

Name string

The name of the Rule

The summary of the generated Signals

aggregationFunctions List<CseAggregationRuleAggregationFunction>

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

Tags []string

The tags of the generated Signals

WindowSizeMillis string

One or more named aggregation functions

entitySelectors List<CseAggregationRuleEntitySelector>

The description of the generated Signals

enabled Boolean

Whether the rule should generate Signals

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

matchExpression String

The expression for which records to match on

nameExpression String

The name of the generated Signals

severityMapping CseAggregationRuleSeverityMapping

The configuration of how the severity of the Signals should be mapped from the Records

The expression to determine whether a Signal should be created based on the aggregation results

windowSize String

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

groupByEntity Boolean

Whether to group records by the specified entity fields

groupByFields List<String>

A list of fields to group records by

isPrototype Boolean

Whether the generated Signals should be prototype Signals

name String

The name of the Rule

aggregationFunctions CseAggregationRuleAggregationFunction[]

The summary of the generated Signals

suppressionWindowSize Integer

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

tags List<String>

The tags of the generated Signals

windowSizeMillis String

One or more named aggregation functions

descriptionExpression string

The description of the generated Signals

enabled boolean

Whether the rule should generate Signals

entitySelectors CseAggregationRuleEntitySelector[]

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

matchExpression string

The expression for which records to match on

nameExpression string

The name of the generated Signals

severityMapping CseAggregationRuleSeverityMapping

The configuration of how the severity of the Signals should be mapped from the Records

triggerExpression string

The expression to determine whether a Signal should be created based on the aggregation results

windowSize string

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

groupByEntity boolean

Whether to group records by the specified entity fields

groupByFields string[]

A list of fields to group records by

isPrototype boolean

Whether the generated Signals should be prototype Signals

name string

The name of the Rule

summaryExpression string

The summary of the generated Signals

suppressionWindowSize number

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

tags string[]

The tags of the generated Signals

windowSizeMillis string

aggregation_functions Sequence[CseAggregationRuleAggregationFunctionArgs]

One or more named aggregation functions

description_expression str

The description of the generated Signals

enabled bool

Whether the rule should generate Signals

entity_selectors Sequence[CseAggregationRuleEntitySelectorArgs]

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

match_expression str

The expression for which records to match on

name_expression str

The name of the generated Signals

severity_mapping CseAggregationRuleSeverityMappingArgs

The configuration of how the severity of the Signals should be mapped from the Records

trigger_expression str

The expression to determine whether a Signal should be created based on the aggregation results

window_size str

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

group_by_entity bool

Whether to group records by the specified entity fields

group_by_fields Sequence[str]

A list of fields to group records by

is_prototype bool

Whether the generated Signals should be prototype Signals

name str

The name of the Rule

summary_expression str

The summary of the generated Signals

suppression_window_size int

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

tags Sequence[str]

The tags of the generated Signals

window_size_millis str

aggregationFunctions List<Property Map>

One or more named aggregation functions

entitySelectors List<Property Map>

The description of the generated Signals

enabled Boolean

Whether the rule should generate Signals

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

matchExpression String

The expression for which records to match on

nameExpression String

The name of the generated Signals

severityMapping Property Map

The configuration of how the severity of the Signals should be mapped from the Records

The expression to determine whether a Signal should be created based on the aggregation results

windowSize String

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

groupByEntity Boolean

Whether to group records by the specified entity fields

groupByFields List<String>

A list of fields to group records by

isPrototype Boolean

Whether the generated Signals should be prototype Signals

name String

The name of the Rule

AggregationFunctions List<Pulumi.SumoLogic.Inputs.CseAggregationRuleAggregationFunction>

The summary of the generated Signals

suppressionWindowSize Number

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

tags List<String>

The tags of the generated Signals

windowSizeMillis String

Outputs

All input properties are implicitly available as output properties. Additionally, the CseAggregationRule resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing CseAggregationRule Resource

Get an existing CseAggregationRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: CseAggregationRuleState, opts?: CustomResourceOptions): CseAggregationRule

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        aggregation_functions: Optional[Sequence[CseAggregationRuleAggregationFunctionArgs]] = None,
        description_expression: Optional[str] = None,
        enabled: Optional[bool] = None,
        entity_selectors: Optional[Sequence[CseAggregationRuleEntitySelectorArgs]] = None,
        group_by_entity: Optional[bool] = None,
        group_by_fields: Optional[Sequence[str]] = None,
        is_prototype: Optional[bool] = None,
        match_expression: Optional[str] = None,
        name: Optional[str] = None,
        name_expression: Optional[str] = None,
        severity_mapping: Optional[CseAggregationRuleSeverityMappingArgs] = None,
        summary_expression: Optional[str] = None,
        suppression_window_size: Optional[int] = None,
        tags: Optional[Sequence[str]] = None,
        trigger_expression: Optional[str] = None,
        window_size: Optional[str] = None,
        window_size_millis: Optional[str] = None) -> CseAggregationRule

func GetCseAggregationRule(ctx *Context, name string, id IDInput, state *CseAggregationRuleState, opts ...ResourceOption) (*CseAggregationRule, error)

public static CseAggregationRule Get(string name, Input<string> id, CseAggregationRuleState? state, CustomResourceOptions? opts = null)

public static CseAggregationRule get(String name, Output<String> id, CseAggregationRuleState state, CustomResourceOptions options)

Resource lookup is not supported in YAML

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

One or more named aggregation functions

EntitySelectors List<Pulumi.SumoLogic.Inputs.CseAggregationRuleEntitySelector>

The description of the generated Signals

Enabled bool

Whether the rule should generate Signals

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

SeverityMapping Pulumi.SumoLogic.Inputs.CseAggregationRuleSeverityMapping

Whether to group records by the specified entity fields

GroupByFields List<string>

A list of fields to group records by

IsPrototype bool

Whether the generated Signals should be prototype Signals

MatchExpression string

The expression for which records to match on

Name string

The name of the Rule

NameExpression string

The name of the generated Signals

The configuration of how the severity of the Signals should be mapped from the Records

The summary of the generated Signals

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

Tags List<string>

The tags of the generated Signals

AggregationFunctions []CseAggregationRuleAggregationFunctionArgs

The expression to determine whether a Signal should be created based on the aggregation results

WindowSize string

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

WindowSizeMillis string

One or more named aggregation functions

EntitySelectors []CseAggregationRuleEntitySelectorArgs

The description of the generated Signals

Enabled bool

Whether the rule should generate Signals

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

SeverityMapping CseAggregationRuleSeverityMappingArgs

Whether to group records by the specified entity fields

GroupByFields []string

A list of fields to group records by

IsPrototype bool

Whether the generated Signals should be prototype Signals

MatchExpression string

The expression for which records to match on

Name string

The name of the Rule

NameExpression string

The name of the generated Signals

The configuration of how the severity of the Signals should be mapped from the Records

The summary of the generated Signals

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

Tags []string

The tags of the generated Signals

aggregationFunctions List<CseAggregationRuleAggregationFunction>

The expression to determine whether a Signal should be created based on the aggregation results

WindowSize string

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

WindowSizeMillis string

One or more named aggregation functions

entitySelectors List<CseAggregationRuleEntitySelector>

The description of the generated Signals

enabled Boolean

Whether the rule should generate Signals

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

groupByEntity Boolean

Whether to group records by the specified entity fields

groupByFields List<String>

A list of fields to group records by

isPrototype Boolean

Whether the generated Signals should be prototype Signals

matchExpression String

The expression for which records to match on

name String

The name of the Rule

nameExpression String

The name of the generated Signals

severityMapping CseAggregationRuleSeverityMapping

The configuration of how the severity of the Signals should be mapped from the Records

The summary of the generated Signals

suppressionWindowSize Integer

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

tags List<String>

The tags of the generated Signals

aggregationFunctions CseAggregationRuleAggregationFunction[]

The expression to determine whether a Signal should be created based on the aggregation results

windowSize String

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

windowSizeMillis String

One or more named aggregation functions

descriptionExpression string

The description of the generated Signals

enabled boolean

Whether the rule should generate Signals

entitySelectors CseAggregationRuleEntitySelector[]

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

groupByEntity boolean

Whether to group records by the specified entity fields

groupByFields string[]

A list of fields to group records by

isPrototype boolean

Whether the generated Signals should be prototype Signals

matchExpression string

The expression for which records to match on

name string

The name of the Rule

nameExpression string

The name of the generated Signals

severityMapping CseAggregationRuleSeverityMapping

The configuration of how the severity of the Signals should be mapped from the Records

summaryExpression string

The summary of the generated Signals

suppressionWindowSize number

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

tags string[]

The tags of the generated Signals

triggerExpression string

The expression to determine whether a Signal should be created based on the aggregation results

windowSize string

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

windowSizeMillis string

aggregation_functions Sequence[CseAggregationRuleAggregationFunctionArgs]

One or more named aggregation functions

description_expression str

The description of the generated Signals

enabled bool

Whether the rule should generate Signals

entity_selectors Sequence[CseAggregationRuleEntitySelectorArgs]

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

group_by_entity bool

Whether to group records by the specified entity fields

group_by_fields Sequence[str]

A list of fields to group records by

is_prototype bool

Whether the generated Signals should be prototype Signals

match_expression str

The expression for which records to match on

name str

The name of the Rule

name_expression str

The name of the generated Signals

severity_mapping CseAggregationRuleSeverityMappingArgs

The configuration of how the severity of the Signals should be mapped from the Records

summary_expression str

The summary of the generated Signals

suppression_window_size int

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

tags Sequence[str]

The tags of the generated Signals

trigger_expression str

The expression to determine whether a Signal should be created based on the aggregation results

window_size str

How long of a window to aggregate records for. Current acceptable values are T05M, T10M, T30M, T60M, T24H, T12H, T05D or CUSTOM

window_size_millis str

aggregationFunctions List<Property Map>

One or more named aggregation functions

entitySelectors List<Property Map>

The description of the generated Signals

enabled Boolean

Whether the rule should generate Signals

The entities to generate Signals on

entityType - (Required) The type of the entity to generate the Signal on.

groupByEntity Boolean

Whether to group records by the specified entity fields

groupByFields List<String>

A list of fields to group records by

isPrototype Boolean

Whether the generated Signals should be prototype Signals

matchExpression String

The expression for which records to match on

name String

The name of the Rule

nameExpression String

The name of the generated Signals

severityMapping Property Map

The configuration of how the severity of the Signals should be mapped from the Records

The summary of the generated Signals

suppressionWindowSize Number

For how long to suppress Signal generation, in milliseconds. Must be greater than window_size and less than the global limit of 7 days.

The following attributes are exported:

tags List<String>

The tags of the generated Signals