Resource for managing an AWS CloudWatch Logs Transformer.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const exampleLogGroup = new aws.cloudwatch.LogGroup("example", {name: "example"});
const example = new aws.cloudwatch.LogTransformer("example", {
transformerConfigs: [{
parseJsons: [{}],
}],
logGroupArn: exampleLogGroup.arn,
});
import pulumi
import pulumi_aws as aws
example_log_group = aws.cloudwatch.LogGroup("example", name="example")
example = aws.cloudwatch.LogTransformer("example",
transformer_configs=[{
"parse_jsons": [{}],
}],
log_group_arn=example_log_group.arn)
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/cloudwatch"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleLogGroup, err := cloudwatch.NewLogGroup(ctx, "example", &cloudwatch.LogGroupArgs{
Name: pulumi.String("example"),
})
if err != nil {
return err
}
_, err = cloudwatch.NewLogTransformer(ctx, "example", &cloudwatch.LogTransformerArgs{
TransformerConfigs: cloudwatch.LogTransformerTransformerConfigArray{
&cloudwatch.LogTransformerTransformerConfigArgs{
ParseJsons: cloudwatch.LogTransformerTransformerConfigParseJsonArray{
&cloudwatch.LogTransformerTransformerConfigParseJsonArgs{},
},
},
},
LogGroupArn: exampleLogGroup.Arn,
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var exampleLogGroup = new Aws.CloudWatch.LogGroup("example", new()
{
Name = "example",
});
var example = new Aws.CloudWatch.LogTransformer("example", new()
{
TransformerConfigs = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigArgs
{
ParseJsons = new[]
{
null,
},
},
},
LogGroupArn = exampleLogGroup.Arn,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cloudwatch.LogGroup;
import com.pulumi.aws.cloudwatch.LogGroupArgs;
import com.pulumi.aws.cloudwatch.LogTransformer;
import com.pulumi.aws.cloudwatch.LogTransformerArgs;
import com.pulumi.aws.cloudwatch.inputs.LogTransformerTransformerConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleLogGroup = new LogGroup("exampleLogGroup", LogGroupArgs.builder()
.name("example")
.build());
var example = new LogTransformer("example", LogTransformerArgs.builder()
.transformerConfigs(LogTransformerTransformerConfigArgs.builder()
.parseJsons(LogTransformerTransformerConfigParseJsonArgs.builder()
.build())
.build())
.logGroupArn(exampleLogGroup.arn())
.build());
}
}
resources:
example:
type: aws:cloudwatch:LogTransformer
properties:
transformerConfigs:
- parseJsons:
- {}
logGroupArn: ${exampleLogGroup.arn}
exampleLogGroup:
type: aws:cloudwatch:LogGroup
name: example
properties:
name: example
Create LogTransformer Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new LogTransformer(name: string, args: LogTransformerArgs, opts?: CustomResourceOptions);@overload
def LogTransformer(resource_name: str,
args: LogTransformerArgs,
opts: Optional[ResourceOptions] = None)
@overload
def LogTransformer(resource_name: str,
opts: Optional[ResourceOptions] = None,
log_group_arn: Optional[str] = None,
transformer_configs: Optional[Sequence[LogTransformerTransformerConfigArgs]] = None,
region: Optional[str] = None)func NewLogTransformer(ctx *Context, name string, args LogTransformerArgs, opts ...ResourceOption) (*LogTransformer, error)public LogTransformer(string name, LogTransformerArgs args, CustomResourceOptions? opts = null)
public LogTransformer(String name, LogTransformerArgs args)
public LogTransformer(String name, LogTransformerArgs args, CustomResourceOptions options)
type: aws:cloudwatch:LogTransformer
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args LogTransformerArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args LogTransformerArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args LogTransformerArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args LogTransformerArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args LogTransformerArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var logTransformerResource = new Aws.CloudWatch.LogTransformer("logTransformerResource", new()
{
LogGroupArn = "string",
TransformerConfigs = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigArgs
{
AddKeys = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigAddKeysArgs
{
Entries = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigAddKeysEntryArgs
{
Key = "string",
Value = "string",
OverwriteIfExists = false,
},
},
},
CopyValue = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigCopyValueArgs
{
Entries = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigCopyValueEntryArgs
{
Source = "string",
Target = "string",
OverwriteIfExists = false,
},
},
},
Csvs = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigCsvArgs
{
Columns = new[]
{
"string",
},
Delimiter = "string",
QuoteCharacter = "string",
Source = "string",
},
},
DateTimeConverters = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigDateTimeConverterArgs
{
MatchPatterns = new[]
{
"string",
},
Source = "string",
Target = "string",
Locale = "string",
SourceTimezone = "string",
TargetFormat = "string",
TargetTimezone = "string",
},
},
DeleteKeys = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigDeleteKeyArgs
{
WithKeys = new[]
{
"string",
},
},
},
Grok = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigGrokArgs
{
Match = "string",
Source = "string",
},
ListToMaps = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigListToMapArgs
{
Key = "string",
Source = "string",
Flatten = false,
FlattenedElement = "string",
Target = "string",
ValueKey = "string",
},
},
LowerCaseStrings = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigLowerCaseStringArgs
{
WithKeys = new[]
{
"string",
},
},
},
MoveKeys = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigMoveKeyArgs
{
Entries = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigMoveKeyEntryArgs
{
Source = "string",
Target = "string",
OverwriteIfExists = false,
},
},
},
},
ParseCloudfront = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigParseCloudfrontArgs
{
Source = "string",
},
ParseJsons = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigParseJsonArgs
{
Destination = "string",
Source = "string",
},
},
ParseKeyValues = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigParseKeyValueArgs
{
Destination = "string",
FieldDelimiter = "string",
KeyPrefix = "string",
KeyValueDelimiter = "string",
NonMatchValue = "string",
OverwriteIfExists = false,
Source = "string",
},
},
ParsePostgres = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigParsePostgresArgs
{
Source = "string",
},
ParseRoute53 = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigParseRoute53Args
{
Source = "string",
},
ParseToOcsf = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigParseToOcsfArgs
{
EventSource = "string",
OcsfVersion = "string",
Source = "string",
},
ParseVpc = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigParseVpcArgs
{
Source = "string",
},
ParseWaf = new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigParseWafArgs
{
Source = "string",
},
RenameKeys = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigRenameKeyArgs
{
Entries = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigRenameKeyEntryArgs
{
Key = "string",
RenameTo = "string",
OverwriteIfExists = false,
},
},
},
},
SplitStrings = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigSplitStringArgs
{
Entries = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigSplitStringEntryArgs
{
Delimiter = "string",
Source = "string",
},
},
},
},
SubstituteStrings = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigSubstituteStringArgs
{
Entries = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigSubstituteStringEntryArgs
{
From = "string",
Source = "string",
To = "string",
},
},
},
},
TrimStrings = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigTrimStringArgs
{
WithKeys = new[]
{
"string",
},
},
},
TypeConverters = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigTypeConverterArgs
{
Entries = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigTypeConverterEntryArgs
{
Key = "string",
Type = "string",
},
},
},
},
UpperCaseStrings = new[]
{
new Aws.CloudWatch.Inputs.LogTransformerTransformerConfigUpperCaseStringArgs
{
WithKeys = new[]
{
"string",
},
},
},
},
},
Region = "string",
});
example, err := cloudwatch.NewLogTransformer(ctx, "logTransformerResource", &cloudwatch.LogTransformerArgs{
LogGroupArn: pulumi.String("string"),
TransformerConfigs: cloudwatch.LogTransformerTransformerConfigArray{
&cloudwatch.LogTransformerTransformerConfigArgs{
AddKeys: &cloudwatch.LogTransformerTransformerConfigAddKeysArgs{
Entries: cloudwatch.LogTransformerTransformerConfigAddKeysEntryArray{
&cloudwatch.LogTransformerTransformerConfigAddKeysEntryArgs{
Key: pulumi.String("string"),
Value: pulumi.String("string"),
OverwriteIfExists: pulumi.Bool(false),
},
},
},
CopyValue: &cloudwatch.LogTransformerTransformerConfigCopyValueArgs{
Entries: cloudwatch.LogTransformerTransformerConfigCopyValueEntryArray{
&cloudwatch.LogTransformerTransformerConfigCopyValueEntryArgs{
Source: pulumi.String("string"),
Target: pulumi.String("string"),
OverwriteIfExists: pulumi.Bool(false),
},
},
},
Csvs: cloudwatch.LogTransformerTransformerConfigCsvArray{
&cloudwatch.LogTransformerTransformerConfigCsvArgs{
Columns: pulumi.StringArray{
pulumi.String("string"),
},
Delimiter: pulumi.String("string"),
QuoteCharacter: pulumi.String("string"),
Source: pulumi.String("string"),
},
},
DateTimeConverters: cloudwatch.LogTransformerTransformerConfigDateTimeConverterArray{
&cloudwatch.LogTransformerTransformerConfigDateTimeConverterArgs{
MatchPatterns: pulumi.StringArray{
pulumi.String("string"),
},
Source: pulumi.String("string"),
Target: pulumi.String("string"),
Locale: pulumi.String("string"),
SourceTimezone: pulumi.String("string"),
TargetFormat: pulumi.String("string"),
TargetTimezone: pulumi.String("string"),
},
},
DeleteKeys: cloudwatch.LogTransformerTransformerConfigDeleteKeyArray{
&cloudwatch.LogTransformerTransformerConfigDeleteKeyArgs{
WithKeys: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Grok: &cloudwatch.LogTransformerTransformerConfigGrokArgs{
Match: pulumi.String("string"),
Source: pulumi.String("string"),
},
ListToMaps: cloudwatch.LogTransformerTransformerConfigListToMapArray{
&cloudwatch.LogTransformerTransformerConfigListToMapArgs{
Key: pulumi.String("string"),
Source: pulumi.String("string"),
Flatten: pulumi.Bool(false),
FlattenedElement: pulumi.String("string"),
Target: pulumi.String("string"),
ValueKey: pulumi.String("string"),
},
},
LowerCaseStrings: cloudwatch.LogTransformerTransformerConfigLowerCaseStringArray{
&cloudwatch.LogTransformerTransformerConfigLowerCaseStringArgs{
WithKeys: pulumi.StringArray{
pulumi.String("string"),
},
},
},
MoveKeys: cloudwatch.LogTransformerTransformerConfigMoveKeyArray{
&cloudwatch.LogTransformerTransformerConfigMoveKeyArgs{
Entries: cloudwatch.LogTransformerTransformerConfigMoveKeyEntryArray{
&cloudwatch.LogTransformerTransformerConfigMoveKeyEntryArgs{
Source: pulumi.String("string"),
Target: pulumi.String("string"),
OverwriteIfExists: pulumi.Bool(false),
},
},
},
},
ParseCloudfront: &cloudwatch.LogTransformerTransformerConfigParseCloudfrontArgs{
Source: pulumi.String("string"),
},
ParseJsons: cloudwatch.LogTransformerTransformerConfigParseJsonArray{
&cloudwatch.LogTransformerTransformerConfigParseJsonArgs{
Destination: pulumi.String("string"),
Source: pulumi.String("string"),
},
},
ParseKeyValues: cloudwatch.LogTransformerTransformerConfigParseKeyValueArray{
&cloudwatch.LogTransformerTransformerConfigParseKeyValueArgs{
Destination: pulumi.String("string"),
FieldDelimiter: pulumi.String("string"),
KeyPrefix: pulumi.String("string"),
KeyValueDelimiter: pulumi.String("string"),
NonMatchValue: pulumi.String("string"),
OverwriteIfExists: pulumi.Bool(false),
Source: pulumi.String("string"),
},
},
ParsePostgres: &cloudwatch.LogTransformerTransformerConfigParsePostgresArgs{
Source: pulumi.String("string"),
},
ParseRoute53: &cloudwatch.LogTransformerTransformerConfigParseRoute53Args{
Source: pulumi.String("string"),
},
ParseToOcsf: &cloudwatch.LogTransformerTransformerConfigParseToOcsfArgs{
EventSource: pulumi.String("string"),
OcsfVersion: pulumi.String("string"),
Source: pulumi.String("string"),
},
ParseVpc: &cloudwatch.LogTransformerTransformerConfigParseVpcArgs{
Source: pulumi.String("string"),
},
ParseWaf: &cloudwatch.LogTransformerTransformerConfigParseWafArgs{
Source: pulumi.String("string"),
},
RenameKeys: cloudwatch.LogTransformerTransformerConfigRenameKeyArray{
&cloudwatch.LogTransformerTransformerConfigRenameKeyArgs{
Entries: cloudwatch.LogTransformerTransformerConfigRenameKeyEntryArray{
&cloudwatch.LogTransformerTransformerConfigRenameKeyEntryArgs{
Key: pulumi.String("string"),
RenameTo: pulumi.String("string"),
OverwriteIfExists: pulumi.Bool(false),
},
},
},
},
SplitStrings: cloudwatch.LogTransformerTransformerConfigSplitStringArray{
&cloudwatch.LogTransformerTransformerConfigSplitStringArgs{
Entries: cloudwatch.LogTransformerTransformerConfigSplitStringEntryArray{
&cloudwatch.LogTransformerTransformerConfigSplitStringEntryArgs{
Delimiter: pulumi.String("string"),
Source: pulumi.String("string"),
},
},
},
},
SubstituteStrings: cloudwatch.LogTransformerTransformerConfigSubstituteStringArray{
&cloudwatch.LogTransformerTransformerConfigSubstituteStringArgs{
Entries: cloudwatch.LogTransformerTransformerConfigSubstituteStringEntryArray{
&cloudwatch.LogTransformerTransformerConfigSubstituteStringEntryArgs{
From: pulumi.String("string"),
Source: pulumi.String("string"),
To: pulumi.String("string"),
},
},
},
},
TrimStrings: cloudwatch.LogTransformerTransformerConfigTrimStringArray{
&cloudwatch.LogTransformerTransformerConfigTrimStringArgs{
WithKeys: pulumi.StringArray{
pulumi.String("string"),
},
},
},
TypeConverters: cloudwatch.LogTransformerTransformerConfigTypeConverterArray{
&cloudwatch.LogTransformerTransformerConfigTypeConverterArgs{
Entries: cloudwatch.LogTransformerTransformerConfigTypeConverterEntryArray{
&cloudwatch.LogTransformerTransformerConfigTypeConverterEntryArgs{
Key: pulumi.String("string"),
Type: pulumi.String("string"),
},
},
},
},
UpperCaseStrings: cloudwatch.LogTransformerTransformerConfigUpperCaseStringArray{
&cloudwatch.LogTransformerTransformerConfigUpperCaseStringArgs{
WithKeys: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
Region: pulumi.String("string"),
})
var logTransformerResource = new LogTransformer("logTransformerResource", LogTransformerArgs.builder()
.logGroupArn("string")
.transformerConfigs(LogTransformerTransformerConfigArgs.builder()
.addKeys(LogTransformerTransformerConfigAddKeysArgs.builder()
.entries(LogTransformerTransformerConfigAddKeysEntryArgs.builder()
.key("string")
.value("string")
.overwriteIfExists(false)
.build())
.build())
.copyValue(LogTransformerTransformerConfigCopyValueArgs.builder()
.entries(LogTransformerTransformerConfigCopyValueEntryArgs.builder()
.source("string")
.target("string")
.overwriteIfExists(false)
.build())
.build())
.csvs(LogTransformerTransformerConfigCsvArgs.builder()
.columns("string")
.delimiter("string")
.quoteCharacter("string")
.source("string")
.build())
.dateTimeConverters(LogTransformerTransformerConfigDateTimeConverterArgs.builder()
.matchPatterns("string")
.source("string")
.target("string")
.locale("string")
.sourceTimezone("string")
.targetFormat("string")
.targetTimezone("string")
.build())
.deleteKeys(LogTransformerTransformerConfigDeleteKeyArgs.builder()
.withKeys("string")
.build())
.grok(LogTransformerTransformerConfigGrokArgs.builder()
.match("string")
.source("string")
.build())
.listToMaps(LogTransformerTransformerConfigListToMapArgs.builder()
.key("string")
.source("string")
.flatten(false)
.flattenedElement("string")
.target("string")
.valueKey("string")
.build())
.lowerCaseStrings(LogTransformerTransformerConfigLowerCaseStringArgs.builder()
.withKeys("string")
.build())
.moveKeys(LogTransformerTransformerConfigMoveKeyArgs.builder()
.entries(LogTransformerTransformerConfigMoveKeyEntryArgs.builder()
.source("string")
.target("string")
.overwriteIfExists(false)
.build())
.build())
.parseCloudfront(LogTransformerTransformerConfigParseCloudfrontArgs.builder()
.source("string")
.build())
.parseJsons(LogTransformerTransformerConfigParseJsonArgs.builder()
.destination("string")
.source("string")
.build())
.parseKeyValues(LogTransformerTransformerConfigParseKeyValueArgs.builder()
.destination("string")
.fieldDelimiter("string")
.keyPrefix("string")
.keyValueDelimiter("string")
.nonMatchValue("string")
.overwriteIfExists(false)
.source("string")
.build())
.parsePostgres(LogTransformerTransformerConfigParsePostgresArgs.builder()
.source("string")
.build())
.parseRoute53(LogTransformerTransformerConfigParseRoute53Args.builder()
.source("string")
.build())
.parseToOcsf(LogTransformerTransformerConfigParseToOcsfArgs.builder()
.eventSource("string")
.ocsfVersion("string")
.source("string")
.build())
.parseVpc(LogTransformerTransformerConfigParseVpcArgs.builder()
.source("string")
.build())
.parseWaf(LogTransformerTransformerConfigParseWafArgs.builder()
.source("string")
.build())
.renameKeys(LogTransformerTransformerConfigRenameKeyArgs.builder()
.entries(LogTransformerTransformerConfigRenameKeyEntryArgs.builder()
.key("string")
.renameTo("string")
.overwriteIfExists(false)
.build())
.build())
.splitStrings(LogTransformerTransformerConfigSplitStringArgs.builder()
.entries(LogTransformerTransformerConfigSplitStringEntryArgs.builder()
.delimiter("string")
.source("string")
.build())
.build())
.substituteStrings(LogTransformerTransformerConfigSubstituteStringArgs.builder()
.entries(LogTransformerTransformerConfigSubstituteStringEntryArgs.builder()
.from("string")
.source("string")
.to("string")
.build())
.build())
.trimStrings(LogTransformerTransformerConfigTrimStringArgs.builder()
.withKeys("string")
.build())
.typeConverters(LogTransformerTransformerConfigTypeConverterArgs.builder()
.entries(LogTransformerTransformerConfigTypeConverterEntryArgs.builder()
.key("string")
.type("string")
.build())
.build())
.upperCaseStrings(LogTransformerTransformerConfigUpperCaseStringArgs.builder()
.withKeys("string")
.build())
.build())
.region("string")
.build());
log_transformer_resource = aws.cloudwatch.LogTransformer("logTransformerResource",
log_group_arn="string",
transformer_configs=[{
"add_keys": {
"entries": [{
"key": "string",
"value": "string",
"overwrite_if_exists": False,
}],
},
"copy_value": {
"entries": [{
"source": "string",
"target": "string",
"overwrite_if_exists": False,
}],
},
"csvs": [{
"columns": ["string"],
"delimiter": "string",
"quote_character": "string",
"source": "string",
}],
"date_time_converters": [{
"match_patterns": ["string"],
"source": "string",
"target": "string",
"locale": "string",
"source_timezone": "string",
"target_format": "string",
"target_timezone": "string",
}],
"delete_keys": [{
"with_keys": ["string"],
}],
"grok": {
"match": "string",
"source": "string",
},
"list_to_maps": [{
"key": "string",
"source": "string",
"flatten": False,
"flattened_element": "string",
"target": "string",
"value_key": "string",
}],
"lower_case_strings": [{
"with_keys": ["string"],
}],
"move_keys": [{
"entries": [{
"source": "string",
"target": "string",
"overwrite_if_exists": False,
}],
}],
"parse_cloudfront": {
"source": "string",
},
"parse_jsons": [{
"destination": "string",
"source": "string",
}],
"parse_key_values": [{
"destination": "string",
"field_delimiter": "string",
"key_prefix": "string",
"key_value_delimiter": "string",
"non_match_value": "string",
"overwrite_if_exists": False,
"source": "string",
}],
"parse_postgres": {
"source": "string",
},
"parse_route53": {
"source": "string",
},
"parse_to_ocsf": {
"event_source": "string",
"ocsf_version": "string",
"source": "string",
},
"parse_vpc": {
"source": "string",
},
"parse_waf": {
"source": "string",
},
"rename_keys": [{
"entries": [{
"key": "string",
"rename_to": "string",
"overwrite_if_exists": False,
}],
}],
"split_strings": [{
"entries": [{
"delimiter": "string",
"source": "string",
}],
}],
"substitute_strings": [{
"entries": [{
"from_": "string",
"source": "string",
"to": "string",
}],
}],
"trim_strings": [{
"with_keys": ["string"],
}],
"type_converters": [{
"entries": [{
"key": "string",
"type": "string",
}],
}],
"upper_case_strings": [{
"with_keys": ["string"],
}],
}],
region="string")
const logTransformerResource = new aws.cloudwatch.LogTransformer("logTransformerResource", {
logGroupArn: "string",
transformerConfigs: [{
addKeys: {
entries: [{
key: "string",
value: "string",
overwriteIfExists: false,
}],
},
copyValue: {
entries: [{
source: "string",
target: "string",
overwriteIfExists: false,
}],
},
csvs: [{
columns: ["string"],
delimiter: "string",
quoteCharacter: "string",
source: "string",
}],
dateTimeConverters: [{
matchPatterns: ["string"],
source: "string",
target: "string",
locale: "string",
sourceTimezone: "string",
targetFormat: "string",
targetTimezone: "string",
}],
deleteKeys: [{
withKeys: ["string"],
}],
grok: {
match: "string",
source: "string",
},
listToMaps: [{
key: "string",
source: "string",
flatten: false,
flattenedElement: "string",
target: "string",
valueKey: "string",
}],
lowerCaseStrings: [{
withKeys: ["string"],
}],
moveKeys: [{
entries: [{
source: "string",
target: "string",
overwriteIfExists: false,
}],
}],
parseCloudfront: {
source: "string",
},
parseJsons: [{
destination: "string",
source: "string",
}],
parseKeyValues: [{
destination: "string",
fieldDelimiter: "string",
keyPrefix: "string",
keyValueDelimiter: "string",
nonMatchValue: "string",
overwriteIfExists: false,
source: "string",
}],
parsePostgres: {
source: "string",
},
parseRoute53: {
source: "string",
},
parseToOcsf: {
eventSource: "string",
ocsfVersion: "string",
source: "string",
},
parseVpc: {
source: "string",
},
parseWaf: {
source: "string",
},
renameKeys: [{
entries: [{
key: "string",
renameTo: "string",
overwriteIfExists: false,
}],
}],
splitStrings: [{
entries: [{
delimiter: "string",
source: "string",
}],
}],
substituteStrings: [{
entries: [{
from: "string",
source: "string",
to: "string",
}],
}],
trimStrings: [{
withKeys: ["string"],
}],
typeConverters: [{
entries: [{
key: "string",
type: "string",
}],
}],
upperCaseStrings: [{
withKeys: ["string"],
}],
}],
region: "string",
});
type: aws:cloudwatch:LogTransformer
properties:
logGroupArn: string
region: string
transformerConfigs:
- addKeys:
entries:
- key: string
overwriteIfExists: false
value: string
copyValue:
entries:
- overwriteIfExists: false
source: string
target: string
csvs:
- columns:
- string
delimiter: string
quoteCharacter: string
source: string
dateTimeConverters:
- locale: string
matchPatterns:
- string
source: string
sourceTimezone: string
target: string
targetFormat: string
targetTimezone: string
deleteKeys:
- withKeys:
- string
grok:
match: string
source: string
listToMaps:
- flatten: false
flattenedElement: string
key: string
source: string
target: string
valueKey: string
lowerCaseStrings:
- withKeys:
- string
moveKeys:
- entries:
- overwriteIfExists: false
source: string
target: string
parseCloudfront:
source: string
parseJsons:
- destination: string
source: string
parseKeyValues:
- destination: string
fieldDelimiter: string
keyPrefix: string
keyValueDelimiter: string
nonMatchValue: string
overwriteIfExists: false
source: string
parsePostgres:
source: string
parseRoute53:
source: string
parseToOcsf:
eventSource: string
ocsfVersion: string
source: string
parseVpc:
source: string
parseWaf:
source: string
renameKeys:
- entries:
- key: string
overwriteIfExists: false
renameTo: string
splitStrings:
- entries:
- delimiter: string
source: string
substituteStrings:
- entries:
- from: string
source: string
to: string
trimStrings:
- withKeys:
- string
typeConverters:
- entries:
- key: string
type: string
upperCaseStrings:
- withKeys:
- string
LogTransformer Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The LogTransformer resource accepts the following input properties:
- Log
Group stringArn - Log group ARN to set the transformer for.
- Transformer
Configs List<LogTransformer Transformer Config> - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details. - Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Log
Group stringArn - Log group ARN to set the transformer for.
- Transformer
Configs []LogTransformer Transformer Config Args - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details. - Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- log
Group StringArn - Log group ARN to set the transformer for.
- transformer
Configs List<LogTransformer Transformer Config> - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details. - region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- log
Group stringArn - Log group ARN to set the transformer for.
- transformer
Configs LogTransformer Transformer Config[] - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details. - region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- log_
group_ strarn - Log group ARN to set the transformer for.
- transformer_
configs Sequence[LogTransformer Transformer Config Args] - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details. - region str
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- log
Group StringArn - Log group ARN to set the transformer for.
- transformer
Configs List<Property Map> - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details. - region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
Outputs
All input properties are implicitly available as output properties. Additionally, the LogTransformer resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing LogTransformer Resource
Get an existing LogTransformer resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: LogTransformerState, opts?: CustomResourceOptions): LogTransformer@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
log_group_arn: Optional[str] = None,
region: Optional[str] = None,
transformer_configs: Optional[Sequence[LogTransformerTransformerConfigArgs]] = None) -> LogTransformerfunc GetLogTransformer(ctx *Context, name string, id IDInput, state *LogTransformerState, opts ...ResourceOption) (*LogTransformer, error)public static LogTransformer Get(string name, Input<string> id, LogTransformerState? state, CustomResourceOptions? opts = null)public static LogTransformer get(String name, Output<String> id, LogTransformerState state, CustomResourceOptions options)resources: _: type: aws:cloudwatch:LogTransformer get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Log
Group stringArn - Log group ARN to set the transformer for.
- Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Transformer
Configs List<LogTransformer Transformer Config> - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details.
- Log
Group stringArn - Log group ARN to set the transformer for.
- Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Transformer
Configs []LogTransformer Transformer Config Args - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details.
- log
Group StringArn - Log group ARN to set the transformer for.
- region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- transformer
Configs List<LogTransformer Transformer Config> - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details.
- log
Group stringArn - Log group ARN to set the transformer for.
- region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- transformer
Configs LogTransformer Transformer Config[] - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details.
- log_
group_ strarn - Log group ARN to set the transformer for.
- region str
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- transformer_
configs Sequence[LogTransformer Transformer Config Args] - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details.
- log
Group StringArn - Log group ARN to set the transformer for.
- region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- transformer
Configs List<Property Map> - Specifies the configuration of the transformer. You must include at least one configuration, and 20 at most. See
transformer_configbelow for details.
Supporting Types
LogTransformerTransformerConfig, LogTransformerTransformerConfigArgs
- Add
Keys LogTransformer Transformer Config Add Keys - Adds new key-value pairs to the log event. See
add_keysbelow for details. - Copy
Value LogTransformer Transformer Config Copy Value - Copies values within a log event. See
copy_valuebelow for details. - Csvs
List<Log
Transformer Transformer Config Csv> - Parses comma-separated values (CSV) from the log events into columns. See
csvbelow for details. - Date
Time List<LogConverters Transformer Transformer Config Date Time Converter> - Converts a datetime string into a format that you specify. See
date_time_converterbelow for details. - Delete
Keys List<LogTransformer Transformer Config Delete Key> - Deletes entry from a log event. See
delete_keysbelow for details. - Grok
Log
Transformer Transformer Config Grok - Parses and structures unstructured data by using pattern matching. See
grokbelow for details. - List
To List<LogMaps Transformer Transformer Config List To Map> - Converts list of objects that contain key fields into a map of target keys. See
list_to_mapbelow for details. - Lower
Case List<LogStrings Transformer Transformer Config Lower Case String> - Converts a string to lowercase. See
lower_case_stringbelow for details. - Move
Keys List<LogTransformer Transformer Config Move Key> - Moves a key from one field to another. See
move_keysbelow for details. - Parse
Cloudfront LogTransformer Transformer Config Parse Cloudfront - Parses CloudFront vended logs, extracts fields, and converts them into JSON format. See
parse_cloudfrontbelow for details. - Parse
Jsons List<LogTransformer Transformer Config Parse Json> - Parses log events that are in JSON format. See
parse_jsonbelow for details. - Parse
Key List<LogValues Transformer Transformer Config Parse Key Value> - Parses a specified field in the original log event into key-value pairs. See
parse_key_valuebelow for details. - Parse
Postgres LogTransformer Transformer Config Parse Postgres - Parses RDS for PostgreSQL vended logs, extracts fields, and and convert them into a JSON format. See
parse_postgresbelow for details. - Parse
Route53 LogTransformer Transformer Config Parse Route53 - Parses Route 53 vended logs, extracts fields, and converts them into JSON format. See
parse_route53below for details. - Parse
To LogOcsf Transformer Transformer Config Parse To Ocsf - Parses logs events and converts them into Open Cybersecurity Schema Framework (OCSF) events. See
parse_to_ocsfbelow for details. - Parse
Vpc LogTransformer Transformer Config Parse Vpc - Parses Amazon VPC vended logs, extracts fields, and converts them into JSON format. See
parse_vpcbelow for details. - Parse
Waf LogTransformer Transformer Config Parse Waf - Parses AWS WAF vended logs, extracts fields, and converts them into JSON format. See
parse_wafbelow for details. - Rename
Keys List<LogTransformer Transformer Config Rename Key> - Renames keys in a log event. See
rename_keysbelow for details. - Split
Strings List<LogTransformer Transformer Config Split String> - Splits a field into an array of strings using a delimiting character. See
split_stringbelow for details. - Substitute
Strings List<LogTransformer Transformer Config Substitute String> - Matches a key’s value against a regular expression and replaces all matches with a replacement string. See
substitute_stringbelow for details. - Trim
Strings List<LogTransformer Transformer Config Trim String> - Removes leading and trailing whitespace from a string. See
trim_stringbelow for details. - Type
Converters List<LogTransformer Transformer Config Type Converter> - Converts a value type associated with the specified key to the specified type. See
type_converterbelow for details. - Upper
Case List<LogStrings Transformer Transformer Config Upper Case String> - Converts a string to uppercase. See
upper_case_stringbelow for details.
- Add
Keys LogTransformer Transformer Config Add Keys - Adds new key-value pairs to the log event. See
add_keysbelow for details. - Copy
Value LogTransformer Transformer Config Copy Value - Copies values within a log event. See
copy_valuebelow for details. - Csvs
[]Log
Transformer Transformer Config Csv - Parses comma-separated values (CSV) from the log events into columns. See
csvbelow for details. - Date
Time []LogConverters Transformer Transformer Config Date Time Converter - Converts a datetime string into a format that you specify. See
date_time_converterbelow for details. - Delete
Keys []LogTransformer Transformer Config Delete Key - Deletes entry from a log event. See
delete_keysbelow for details. - Grok
Log
Transformer Transformer Config Grok - Parses and structures unstructured data by using pattern matching. See
grokbelow for details. - List
To []LogMaps Transformer Transformer Config List To Map - Converts list of objects that contain key fields into a map of target keys. See
list_to_mapbelow for details. - Lower
Case []LogStrings Transformer Transformer Config Lower Case String - Converts a string to lowercase. See
lower_case_stringbelow for details. - Move
Keys []LogTransformer Transformer Config Move Key - Moves a key from one field to another. See
move_keysbelow for details. - Parse
Cloudfront LogTransformer Transformer Config Parse Cloudfront - Parses CloudFront vended logs, extracts fields, and converts them into JSON format. See
parse_cloudfrontbelow for details. - Parse
Jsons []LogTransformer Transformer Config Parse Json - Parses log events that are in JSON format. See
parse_jsonbelow for details. - Parse
Key []LogValues Transformer Transformer Config Parse Key Value - Parses a specified field in the original log event into key-value pairs. See
parse_key_valuebelow for details. - Parse
Postgres LogTransformer Transformer Config Parse Postgres - Parses RDS for PostgreSQL vended logs, extracts fields, and and convert them into a JSON format. See
parse_postgresbelow for details. - Parse
Route53 LogTransformer Transformer Config Parse Route53 - Parses Route 53 vended logs, extracts fields, and converts them into JSON format. See
parse_route53below for details. - Parse
To LogOcsf Transformer Transformer Config Parse To Ocsf - Parses logs events and converts them into Open Cybersecurity Schema Framework (OCSF) events. See
parse_to_ocsfbelow for details. - Parse
Vpc LogTransformer Transformer Config Parse Vpc - Parses Amazon VPC vended logs, extracts fields, and converts them into JSON format. See
parse_vpcbelow for details. - Parse
Waf LogTransformer Transformer Config Parse Waf - Parses AWS WAF vended logs, extracts fields, and converts them into JSON format. See
parse_wafbelow for details. - Rename
Keys []LogTransformer Transformer Config Rename Key - Renames keys in a log event. See
rename_keysbelow for details. - Split
Strings []LogTransformer Transformer Config Split String - Splits a field into an array of strings using a delimiting character. See
split_stringbelow for details. - Substitute
Strings []LogTransformer Transformer Config Substitute String - Matches a key’s value against a regular expression and replaces all matches with a replacement string. See
substitute_stringbelow for details. - Trim
Strings []LogTransformer Transformer Config Trim String - Removes leading and trailing whitespace from a string. See
trim_stringbelow for details. - Type
Converters []LogTransformer Transformer Config Type Converter - Converts a value type associated with the specified key to the specified type. See
type_converterbelow for details. - Upper
Case []LogStrings Transformer Transformer Config Upper Case String - Converts a string to uppercase. See
upper_case_stringbelow for details.
- add
Keys LogTransformer Transformer Config Add Keys - Adds new key-value pairs to the log event. See
add_keysbelow for details. - copy
Value LogTransformer Transformer Config Copy Value - Copies values within a log event. See
copy_valuebelow for details. - csvs
List<Log
Transformer Transformer Config Csv> - Parses comma-separated values (CSV) from the log events into columns. See
csvbelow for details. - date
Time List<LogConverters Transformer Transformer Config Date Time Converter> - Converts a datetime string into a format that you specify. See
date_time_converterbelow for details. - delete
Keys List<LogTransformer Transformer Config Delete Key> - Deletes entry from a log event. See
delete_keysbelow for details. - grok
Log
Transformer Transformer Config Grok - Parses and structures unstructured data by using pattern matching. See
grokbelow for details. - list
To List<LogMaps Transformer Transformer Config List To Map> - Converts list of objects that contain key fields into a map of target keys. See
list_to_mapbelow for details. - lower
Case List<LogStrings Transformer Transformer Config Lower Case String> - Converts a string to lowercase. See
lower_case_stringbelow for details. - move
Keys List<LogTransformer Transformer Config Move Key> - Moves a key from one field to another. See
move_keysbelow for details. - parse
Cloudfront LogTransformer Transformer Config Parse Cloudfront - Parses CloudFront vended logs, extracts fields, and converts them into JSON format. See
parse_cloudfrontbelow for details. - parse
Jsons List<LogTransformer Transformer Config Parse Json> - Parses log events that are in JSON format. See
parse_jsonbelow for details. - parse
Key List<LogValues Transformer Transformer Config Parse Key Value> - Parses a specified field in the original log event into key-value pairs. See
parse_key_valuebelow for details. - parse
Postgres LogTransformer Transformer Config Parse Postgres - Parses RDS for PostgreSQL vended logs, extracts fields, and and convert them into a JSON format. See
parse_postgresbelow for details. - parse
Route53 LogTransformer Transformer Config Parse Route53 - Parses Route 53 vended logs, extracts fields, and converts them into JSON format. See
parse_route53below for details. - parse
To LogOcsf Transformer Transformer Config Parse To Ocsf - Parses logs events and converts them into Open Cybersecurity Schema Framework (OCSF) events. See
parse_to_ocsfbelow for details. - parse
Vpc LogTransformer Transformer Config Parse Vpc - Parses Amazon VPC vended logs, extracts fields, and converts them into JSON format. See
parse_vpcbelow for details. - parse
Waf LogTransformer Transformer Config Parse Waf - Parses AWS WAF vended logs, extracts fields, and converts them into JSON format. See
parse_wafbelow for details. - rename
Keys List<LogTransformer Transformer Config Rename Key> - Renames keys in a log event. See
rename_keysbelow for details. - split
Strings List<LogTransformer Transformer Config Split String> - Splits a field into an array of strings using a delimiting character. See
split_stringbelow for details. - substitute
Strings List<LogTransformer Transformer Config Substitute String> - Matches a key’s value against a regular expression and replaces all matches with a replacement string. See
substitute_stringbelow for details. - trim
Strings List<LogTransformer Transformer Config Trim String> - Removes leading and trailing whitespace from a string. See
trim_stringbelow for details. - type
Converters List<LogTransformer Transformer Config Type Converter> - Converts a value type associated with the specified key to the specified type. See
type_converterbelow for details. - upper
Case List<LogStrings Transformer Transformer Config Upper Case String> - Converts a string to uppercase. See
upper_case_stringbelow for details.
- add
Keys LogTransformer Transformer Config Add Keys - Adds new key-value pairs to the log event. See
add_keysbelow for details. - copy
Value LogTransformer Transformer Config Copy Value - Copies values within a log event. See
copy_valuebelow for details. - csvs
Log
Transformer Transformer Config Csv[] - Parses comma-separated values (CSV) from the log events into columns. See
csvbelow for details. - date
Time LogConverters Transformer Transformer Config Date Time Converter[] - Converts a datetime string into a format that you specify. See
date_time_converterbelow for details. - delete
Keys LogTransformer Transformer Config Delete Key[] - Deletes entry from a log event. See
delete_keysbelow for details. - grok
Log
Transformer Transformer Config Grok - Parses and structures unstructured data by using pattern matching. See
grokbelow for details. - list
To LogMaps Transformer Transformer Config List To Map[] - Converts list of objects that contain key fields into a map of target keys. See
list_to_mapbelow for details. - lower
Case LogStrings Transformer Transformer Config Lower Case String[] - Converts a string to lowercase. See
lower_case_stringbelow for details. - move
Keys LogTransformer Transformer Config Move Key[] - Moves a key from one field to another. See
move_keysbelow for details. - parse
Cloudfront LogTransformer Transformer Config Parse Cloudfront - Parses CloudFront vended logs, extracts fields, and converts them into JSON format. See
parse_cloudfrontbelow for details. - parse
Jsons LogTransformer Transformer Config Parse Json[] - Parses log events that are in JSON format. See
parse_jsonbelow for details. - parse
Key LogValues Transformer Transformer Config Parse Key Value[] - Parses a specified field in the original log event into key-value pairs. See
parse_key_valuebelow for details. - parse
Postgres LogTransformer Transformer Config Parse Postgres - Parses RDS for PostgreSQL vended logs, extracts fields, and and convert them into a JSON format. See
parse_postgresbelow for details. - parse
Route53 LogTransformer Transformer Config Parse Route53 - Parses Route 53 vended logs, extracts fields, and converts them into JSON format. See
parse_route53below for details. - parse
To LogOcsf Transformer Transformer Config Parse To Ocsf - Parses logs events and converts them into Open Cybersecurity Schema Framework (OCSF) events. See
parse_to_ocsfbelow for details. - parse
Vpc LogTransformer Transformer Config Parse Vpc - Parses Amazon VPC vended logs, extracts fields, and converts them into JSON format. See
parse_vpcbelow for details. - parse
Waf LogTransformer Transformer Config Parse Waf - Parses AWS WAF vended logs, extracts fields, and converts them into JSON format. See
parse_wafbelow for details. - rename
Keys LogTransformer Transformer Config Rename Key[] - Renames keys in a log event. See
rename_keysbelow for details. - split
Strings LogTransformer Transformer Config Split String[] - Splits a field into an array of strings using a delimiting character. See
split_stringbelow for details. - substitute
Strings LogTransformer Transformer Config Substitute String[] - Matches a key’s value against a regular expression and replaces all matches with a replacement string. See
substitute_stringbelow for details. - trim
Strings LogTransformer Transformer Config Trim String[] - Removes leading and trailing whitespace from a string. See
trim_stringbelow for details. - type
Converters LogTransformer Transformer Config Type Converter[] - Converts a value type associated with the specified key to the specified type. See
type_converterbelow for details. - upper
Case LogStrings Transformer Transformer Config Upper Case String[] - Converts a string to uppercase. See
upper_case_stringbelow for details.
- add_
keys LogTransformer Transformer Config Add Keys - Adds new key-value pairs to the log event. See
add_keysbelow for details. - copy_
value LogTransformer Transformer Config Copy Value - Copies values within a log event. See
copy_valuebelow for details. - csvs
Sequence[Log
Transformer Transformer Config Csv] - Parses comma-separated values (CSV) from the log events into columns. See
csvbelow for details. - date_
time_ Sequence[Logconverters Transformer Transformer Config Date Time Converter] - Converts a datetime string into a format that you specify. See
date_time_converterbelow for details. - delete_
keys Sequence[LogTransformer Transformer Config Delete Key] - Deletes entry from a log event. See
delete_keysbelow for details. - grok
Log
Transformer Transformer Config Grok - Parses and structures unstructured data by using pattern matching. See
grokbelow for details. - list_
to_ Sequence[Logmaps Transformer Transformer Config List To Map] - Converts list of objects that contain key fields into a map of target keys. See
list_to_mapbelow for details. - lower_
case_ Sequence[Logstrings Transformer Transformer Config Lower Case String] - Converts a string to lowercase. See
lower_case_stringbelow for details. - move_
keys Sequence[LogTransformer Transformer Config Move Key] - Moves a key from one field to another. See
move_keysbelow for details. - parse_
cloudfront LogTransformer Transformer Config Parse Cloudfront - Parses CloudFront vended logs, extracts fields, and converts them into JSON format. See
parse_cloudfrontbelow for details. - parse_
jsons Sequence[LogTransformer Transformer Config Parse Json] - Parses log events that are in JSON format. See
parse_jsonbelow for details. - parse_
key_ Sequence[Logvalues Transformer Transformer Config Parse Key Value] - Parses a specified field in the original log event into key-value pairs. See
parse_key_valuebelow for details. - parse_
postgres LogTransformer Transformer Config Parse Postgres - Parses RDS for PostgreSQL vended logs, extracts fields, and and convert them into a JSON format. See
parse_postgresbelow for details. - parse_
route53 LogTransformer Transformer Config Parse Route53 - Parses Route 53 vended logs, extracts fields, and converts them into JSON format. See
parse_route53below for details. - parse_
to_ Logocsf Transformer Transformer Config Parse To Ocsf - Parses logs events and converts them into Open Cybersecurity Schema Framework (OCSF) events. See
parse_to_ocsfbelow for details. - parse_
vpc LogTransformer Transformer Config Parse Vpc - Parses Amazon VPC vended logs, extracts fields, and converts them into JSON format. See
parse_vpcbelow for details. - parse_
waf LogTransformer Transformer Config Parse Waf - Parses AWS WAF vended logs, extracts fields, and converts them into JSON format. See
parse_wafbelow for details. - rename_
keys Sequence[LogTransformer Transformer Config Rename Key] - Renames keys in a log event. See
rename_keysbelow for details. - split_
strings Sequence[LogTransformer Transformer Config Split String] - Splits a field into an array of strings using a delimiting character. See
split_stringbelow for details. - substitute_
strings Sequence[LogTransformer Transformer Config Substitute String] - Matches a key’s value against a regular expression and replaces all matches with a replacement string. See
substitute_stringbelow for details. - trim_
strings Sequence[LogTransformer Transformer Config Trim String] - Removes leading and trailing whitespace from a string. See
trim_stringbelow for details. - type_
converters Sequence[LogTransformer Transformer Config Type Converter] - Converts a value type associated with the specified key to the specified type. See
type_converterbelow for details. - upper_
case_ Sequence[Logstrings Transformer Transformer Config Upper Case String] - Converts a string to uppercase. See
upper_case_stringbelow for details.
- add
Keys Property Map - Adds new key-value pairs to the log event. See
add_keysbelow for details. - copy
Value Property Map - Copies values within a log event. See
copy_valuebelow for details. - csvs List<Property Map>
- Parses comma-separated values (CSV) from the log events into columns. See
csvbelow for details. - date
Time List<Property Map>Converters - Converts a datetime string into a format that you specify. See
date_time_converterbelow for details. - delete
Keys List<Property Map> - Deletes entry from a log event. See
delete_keysbelow for details. - grok Property Map
- Parses and structures unstructured data by using pattern matching. See
grokbelow for details. - list
To List<Property Map>Maps - Converts list of objects that contain key fields into a map of target keys. See
list_to_mapbelow for details. - lower
Case List<Property Map>Strings - Converts a string to lowercase. See
lower_case_stringbelow for details. - move
Keys List<Property Map> - Moves a key from one field to another. See
move_keysbelow for details. - parse
Cloudfront Property Map - Parses CloudFront vended logs, extracts fields, and converts them into JSON format. See
parse_cloudfrontbelow for details. - parse
Jsons List<Property Map> - Parses log events that are in JSON format. See
parse_jsonbelow for details. - parse
Key List<Property Map>Values - Parses a specified field in the original log event into key-value pairs. See
parse_key_valuebelow for details. - parse
Postgres Property Map - Parses RDS for PostgreSQL vended logs, extracts fields, and and convert them into a JSON format. See
parse_postgresbelow for details. - parse
Route53 Property Map - Parses Route 53 vended logs, extracts fields, and converts them into JSON format. See
parse_route53below for details. - parse
To Property MapOcsf - Parses logs events and converts them into Open Cybersecurity Schema Framework (OCSF) events. See
parse_to_ocsfbelow for details. - parse
Vpc Property Map - Parses Amazon VPC vended logs, extracts fields, and converts them into JSON format. See
parse_vpcbelow for details. - parse
Waf Property Map - Parses AWS WAF vended logs, extracts fields, and converts them into JSON format. See
parse_wafbelow for details. - rename
Keys List<Property Map> - Renames keys in a log event. See
rename_keysbelow for details. - split
Strings List<Property Map> - Splits a field into an array of strings using a delimiting character. See
split_stringbelow for details. - substitute
Strings List<Property Map> - Matches a key’s value against a regular expression and replaces all matches with a replacement string. See
substitute_stringbelow for details. - trim
Strings List<Property Map> - Removes leading and trailing whitespace from a string. See
trim_stringbelow for details. - type
Converters List<Property Map> - Converts a value type associated with the specified key to the specified type. See
type_converterbelow for details. - upper
Case List<Property Map>Strings - Converts a string to uppercase. See
upper_case_stringbelow for details.
LogTransformerTransformerConfigAddKeys, LogTransformerTransformerConfigAddKeysArgs
- Entries
List<Log
Transformer Transformer Config Add Keys Entry> - Objects containing the information about the keys to add to the log event. You must include at least one entry, and five at most. See
add_keysentrybelow for details.
- Entries
[]Log
Transformer Transformer Config Add Keys Entry - Objects containing the information about the keys to add to the log event. You must include at least one entry, and five at most. See
add_keysentrybelow for details.
- entries
List<Log
Transformer Transformer Config Add Keys Entry> - Objects containing the information about the keys to add to the log event. You must include at least one entry, and five at most. See
add_keysentrybelow for details.
- entries
Log
Transformer Transformer Config Add Keys Entry[] - Objects containing the information about the keys to add to the log event. You must include at least one entry, and five at most. See
add_keysentrybelow for details.
- entries
Sequence[Log
Transformer Transformer Config Add Keys Entry] - Objects containing the information about the keys to add to the log event. You must include at least one entry, and five at most. See
add_keysentrybelow for details.
- entries List<Property Map>
- Objects containing the information about the keys to add to the log event. You must include at least one entry, and five at most. See
add_keysentrybelow for details.
LogTransformerTransformerConfigAddKeysEntry, LogTransformerTransformerConfigAddKeysEntryArgs
- Key string
- Specifies the key with the value that will be converted to a different type.
- Value string
- Specifies the value of the new entry to be added to the log event.
- Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- Key string
- Specifies the key with the value that will be converted to a different type.
- Value string
- Specifies the value of the new entry to be added to the log event.
- Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- key String
- Specifies the key with the value that will be converted to a different type.
- value String
- Specifies the value of the new entry to be added to the log event.
- overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- key string
- Specifies the key with the value that will be converted to a different type.
- value string
- Specifies the value of the new entry to be added to the log event.
- overwrite
If booleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- key str
- Specifies the key with the value that will be converted to a different type.
- value str
- Specifies the value of the new entry to be added to the log event.
- overwrite_
if_ boolexists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- key String
- Specifies the key with the value that will be converted to a different type.
- value String
- Specifies the value of the new entry to be added to the log event.
- overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
LogTransformerTransformerConfigCopyValue, LogTransformerTransformerConfigCopyValueArgs
- Entries
List<Log
Transformer Transformer Config Copy Value Entry> - Objects containing the information about the values to copy to the log event. You must include at least one entry, and five at most. See
copy_valueentrybelow for details.
- Entries
[]Log
Transformer Transformer Config Copy Value Entry - Objects containing the information about the values to copy to the log event. You must include at least one entry, and five at most. See
copy_valueentrybelow for details.
- entries
List<Log
Transformer Transformer Config Copy Value Entry> - Objects containing the information about the values to copy to the log event. You must include at least one entry, and five at most. See
copy_valueentrybelow for details.
- entries
Log
Transformer Transformer Config Copy Value Entry[] - Objects containing the information about the values to copy to the log event. You must include at least one entry, and five at most. See
copy_valueentrybelow for details.
- entries
Sequence[Log
Transformer Transformer Config Copy Value Entry] - Objects containing the information about the values to copy to the log event. You must include at least one entry, and five at most. See
copy_valueentrybelow for details.
- entries List<Property Map>
- Objects containing the information about the values to copy to the log event. You must include at least one entry, and five at most. See
copy_valueentrybelow for details.
LogTransformerTransformerConfigCopyValueEntry, LogTransformerTransformerConfigCopyValueEntryArgs
- Source string
- Specifies the key to modify.
- Target string
- Specifies the key to move to.
- Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- Source string
- Specifies the key to modify.
- Target string
- Specifies the key to move to.
- Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- source String
- Specifies the key to modify.
- target String
- Specifies the key to move to.
- overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- source string
- Specifies the key to modify.
- target string
- Specifies the key to move to.
- overwrite
If booleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- source str
- Specifies the key to modify.
- target str
- Specifies the key to move to.
- overwrite_
if_ boolexists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- source String
- Specifies the key to modify.
- target String
- Specifies the key to move to.
- overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
LogTransformerTransformerConfigCsv, LogTransformerTransformerConfigCsvArgs
- Columns List<string>
- Specifies the names to use for the columns in the transformed log event. If not specified, default column names (
[column_1,<span pulumi-lang-nodejs=" column2 " pulumi-lang-dotnet=" Column2 " pulumi-lang-go=" column2 " pulumi-lang-python=" column_2 " pulumi-lang-yaml=" column2 " pulumi-lang-java=" column2 "> column_2 </span>...]) are used. - Delimiter string
- Specifies the character used to separate each column in the original comma-separated value log event. Defaults to the comma
,character. - Quote
Character string - Specifies the character used as a text qualifier for a single column of data. Defaults to the double quotation mark
"character. - Source string
- Specifies the path to the field in the log event that has the comma separated values to be parsed. If omitted, the whole log message is processed.
- Columns []string
- Specifies the names to use for the columns in the transformed log event. If not specified, default column names (
[column_1,<span pulumi-lang-nodejs=" column2 " pulumi-lang-dotnet=" Column2 " pulumi-lang-go=" column2 " pulumi-lang-python=" column_2 " pulumi-lang-yaml=" column2 " pulumi-lang-java=" column2 "> column_2 </span>...]) are used. - Delimiter string
- Specifies the character used to separate each column in the original comma-separated value log event. Defaults to the comma
,character. - Quote
Character string - Specifies the character used as a text qualifier for a single column of data. Defaults to the double quotation mark
"character. - Source string
- Specifies the path to the field in the log event that has the comma separated values to be parsed. If omitted, the whole log message is processed.
- columns List<String>
- Specifies the names to use for the columns in the transformed log event. If not specified, default column names (
[column_1,<span pulumi-lang-nodejs=" column2 " pulumi-lang-dotnet=" Column2 " pulumi-lang-go=" column2 " pulumi-lang-python=" column_2 " pulumi-lang-yaml=" column2 " pulumi-lang-java=" column2 "> column_2 </span>...]) are used. - delimiter String
- Specifies the character used to separate each column in the original comma-separated value log event. Defaults to the comma
,character. - quote
Character String - Specifies the character used as a text qualifier for a single column of data. Defaults to the double quotation mark
"character. - source String
- Specifies the path to the field in the log event that has the comma separated values to be parsed. If omitted, the whole log message is processed.
- columns string[]
- Specifies the names to use for the columns in the transformed log event. If not specified, default column names (
[column_1,<span pulumi-lang-nodejs=" column2 " pulumi-lang-dotnet=" Column2 " pulumi-lang-go=" column2 " pulumi-lang-python=" column_2 " pulumi-lang-yaml=" column2 " pulumi-lang-java=" column2 "> column_2 </span>...]) are used. - delimiter string
- Specifies the character used to separate each column in the original comma-separated value log event. Defaults to the comma
,character. - quote
Character string - Specifies the character used as a text qualifier for a single column of data. Defaults to the double quotation mark
"character. - source string
- Specifies the path to the field in the log event that has the comma separated values to be parsed. If omitted, the whole log message is processed.
- columns Sequence[str]
- Specifies the names to use for the columns in the transformed log event. If not specified, default column names (
[column_1,<span pulumi-lang-nodejs=" column2 " pulumi-lang-dotnet=" Column2 " pulumi-lang-go=" column2 " pulumi-lang-python=" column_2 " pulumi-lang-yaml=" column2 " pulumi-lang-java=" column2 "> column_2 </span>...]) are used. - delimiter str
- Specifies the character used to separate each column in the original comma-separated value log event. Defaults to the comma
,character. - quote_
character str - Specifies the character used as a text qualifier for a single column of data. Defaults to the double quotation mark
"character. - source str
- Specifies the path to the field in the log event that has the comma separated values to be parsed. If omitted, the whole log message is processed.
- columns List<String>
- Specifies the names to use for the columns in the transformed log event. If not specified, default column names (
[column_1,<span pulumi-lang-nodejs=" column2 " pulumi-lang-dotnet=" Column2 " pulumi-lang-go=" column2 " pulumi-lang-python=" column_2 " pulumi-lang-yaml=" column2 " pulumi-lang-java=" column2 "> column_2 </span>...]) are used. - delimiter String
- Specifies the character used to separate each column in the original comma-separated value log event. Defaults to the comma
,character. - quote
Character String - Specifies the character used as a text qualifier for a single column of data. Defaults to the double quotation mark
"character. - source String
- Specifies the path to the field in the log event that has the comma separated values to be parsed. If omitted, the whole log message is processed.
LogTransformerTransformerConfigDateTimeConverter, LogTransformerTransformerConfigDateTimeConverterArgs
- Match
Patterns List<string> - Specifies the list of patterns to match against the
sourcefield. - Source string
- Specifies the key to apply the date conversion to.
- Target string
- Specifies the JSON field to store the result in.
- Locale string
- Specifies the locale of the source field. Defaults to
locale.ROOT. - Source
Timezone string - Specifies the time zone of the source field. Defaults to
UTC. - Target
Format string - Specifies the datetime format to use for the converted data in the target field. Defaults to
yyyy-MM-dd'T'HH:mm:ss.SSS'Z. - Target
Timezone string - Specifies the time zone of the target field. Defaults to
UTC.
- Match
Patterns []string - Specifies the list of patterns to match against the
sourcefield. - Source string
- Specifies the key to apply the date conversion to.
- Target string
- Specifies the JSON field to store the result in.
- Locale string
- Specifies the locale of the source field. Defaults to
locale.ROOT. - Source
Timezone string - Specifies the time zone of the source field. Defaults to
UTC. - Target
Format string - Specifies the datetime format to use for the converted data in the target field. Defaults to
yyyy-MM-dd'T'HH:mm:ss.SSS'Z. - Target
Timezone string - Specifies the time zone of the target field. Defaults to
UTC.
- match
Patterns List<String> - Specifies the list of patterns to match against the
sourcefield. - source String
- Specifies the key to apply the date conversion to.
- target String
- Specifies the JSON field to store the result in.
- locale String
- Specifies the locale of the source field. Defaults to
locale.ROOT. - source
Timezone String - Specifies the time zone of the source field. Defaults to
UTC. - target
Format String - Specifies the datetime format to use for the converted data in the target field. Defaults to
yyyy-MM-dd'T'HH:mm:ss.SSS'Z. - target
Timezone String - Specifies the time zone of the target field. Defaults to
UTC.
- match
Patterns string[] - Specifies the list of patterns to match against the
sourcefield. - source string
- Specifies the key to apply the date conversion to.
- target string
- Specifies the JSON field to store the result in.
- locale string
- Specifies the locale of the source field. Defaults to
locale.ROOT. - source
Timezone string - Specifies the time zone of the source field. Defaults to
UTC. - target
Format string - Specifies the datetime format to use for the converted data in the target field. Defaults to
yyyy-MM-dd'T'HH:mm:ss.SSS'Z. - target
Timezone string - Specifies the time zone of the target field. Defaults to
UTC.
- match_
patterns Sequence[str] - Specifies the list of patterns to match against the
sourcefield. - source str
- Specifies the key to apply the date conversion to.
- target str
- Specifies the JSON field to store the result in.
- locale str
- Specifies the locale of the source field. Defaults to
locale.ROOT. - source_
timezone str - Specifies the time zone of the source field. Defaults to
UTC. - target_
format str - Specifies the datetime format to use for the converted data in the target field. Defaults to
yyyy-MM-dd'T'HH:mm:ss.SSS'Z. - target_
timezone str - Specifies the time zone of the target field. Defaults to
UTC.
- match
Patterns List<String> - Specifies the list of patterns to match against the
sourcefield. - source String
- Specifies the key to apply the date conversion to.
- target String
- Specifies the JSON field to store the result in.
- locale String
- Specifies the locale of the source field. Defaults to
locale.ROOT. - source
Timezone String - Specifies the time zone of the source field. Defaults to
UTC. - target
Format String - Specifies the datetime format to use for the converted data in the target field. Defaults to
yyyy-MM-dd'T'HH:mm:ss.SSS'Z. - target
Timezone String - Specifies the time zone of the target field. Defaults to
UTC.
LogTransformerTransformerConfigDeleteKey, LogTransformerTransformerConfigDeleteKeyArgs
- With
Keys List<string> - Specifies the keys to be deleted.
- With
Keys []string - Specifies the keys to be deleted.
- with
Keys List<String> - Specifies the keys to be deleted.
- with
Keys string[] - Specifies the keys to be deleted.
- with_
keys Sequence[str] - Specifies the keys to be deleted.
- with
Keys List<String> - Specifies the keys to be deleted.
LogTransformerTransformerConfigGrok, LogTransformerTransformerConfigGrokArgs
LogTransformerTransformerConfigListToMap, LogTransformerTransformerConfigListToMapArgs
- Key string
- Specifies the key of the field to be extracted as keys in the generated map.
- Source string
- Specifies the key in the log event that has a list of objects that will be converted to a map.
- Flatten bool
- Specifies whether the list will be flattened into single items. Defaults to
false. - Flattened
Element string - Required if
flattenis set to true. Specifies the element to keep. Allowed values arefirstandlast. - Target string
- Specifies the key of the field that will hold the generated map.
- Value
Key string - Specifies the values that will be extracted from the source objects and put into the values of the generated map. If omitted, original objects in the source list will be put into the values of the generated map.
- Key string
- Specifies the key of the field to be extracted as keys in the generated map.
- Source string
- Specifies the key in the log event that has a list of objects that will be converted to a map.
- Flatten bool
- Specifies whether the list will be flattened into single items. Defaults to
false. - Flattened
Element string - Required if
flattenis set to true. Specifies the element to keep. Allowed values arefirstandlast. - Target string
- Specifies the key of the field that will hold the generated map.
- Value
Key string - Specifies the values that will be extracted from the source objects and put into the values of the generated map. If omitted, original objects in the source list will be put into the values of the generated map.
- key String
- Specifies the key of the field to be extracted as keys in the generated map.
- source String
- Specifies the key in the log event that has a list of objects that will be converted to a map.
- flatten Boolean
- Specifies whether the list will be flattened into single items. Defaults to
false. - flattened
Element String - Required if
flattenis set to true. Specifies the element to keep. Allowed values arefirstandlast. - target String
- Specifies the key of the field that will hold the generated map.
- value
Key String - Specifies the values that will be extracted from the source objects and put into the values of the generated map. If omitted, original objects in the source list will be put into the values of the generated map.
- key string
- Specifies the key of the field to be extracted as keys in the generated map.
- source string
- Specifies the key in the log event that has a list of objects that will be converted to a map.
- flatten boolean
- Specifies whether the list will be flattened into single items. Defaults to
false. - flattened
Element string - Required if
flattenis set to true. Specifies the element to keep. Allowed values arefirstandlast. - target string
- Specifies the key of the field that will hold the generated map.
- value
Key string - Specifies the values that will be extracted from the source objects and put into the values of the generated map. If omitted, original objects in the source list will be put into the values of the generated map.
- key str
- Specifies the key of the field to be extracted as keys in the generated map.
- source str
- Specifies the key in the log event that has a list of objects that will be converted to a map.
- flatten bool
- Specifies whether the list will be flattened into single items. Defaults to
false. - flattened_
element str - Required if
flattenis set to true. Specifies the element to keep. Allowed values arefirstandlast. - target str
- Specifies the key of the field that will hold the generated map.
- value_
key str - Specifies the values that will be extracted from the source objects and put into the values of the generated map. If omitted, original objects in the source list will be put into the values of the generated map.
- key String
- Specifies the key of the field to be extracted as keys in the generated map.
- source String
- Specifies the key in the log event that has a list of objects that will be converted to a map.
- flatten Boolean
- Specifies whether the list will be flattened into single items. Defaults to
false. - flattened
Element String - Required if
flattenis set to true. Specifies the element to keep. Allowed values arefirstandlast. - target String
- Specifies the key of the field that will hold the generated map.
- value
Key String - Specifies the values that will be extracted from the source objects and put into the values of the generated map. If omitted, original objects in the source list will be put into the values of the generated map.
LogTransformerTransformerConfigLowerCaseString, LogTransformerTransformerConfigLowerCaseStringArgs
- With
Keys List<string> - Specifies the keys of the fields to convert to lowercase.
- With
Keys []string - Specifies the keys of the fields to convert to lowercase.
- with
Keys List<String> - Specifies the keys of the fields to convert to lowercase.
- with
Keys string[] - Specifies the keys of the fields to convert to lowercase.
- with_
keys Sequence[str] - Specifies the keys of the fields to convert to lowercase.
- with
Keys List<String> - Specifies the keys of the fields to convert to lowercase.
LogTransformerTransformerConfigMoveKey, LogTransformerTransformerConfigMoveKeyArgs
- Entries
List<Log
Transformer Transformer Config Move Key Entry> - Objects containing the information about the keys to move to the log event. You must include at least one entry, and five at most. See
move_keysentrybelow for details.
- Entries
[]Log
Transformer Transformer Config Move Key Entry - Objects containing the information about the keys to move to the log event. You must include at least one entry, and five at most. See
move_keysentrybelow for details.
- entries
List<Log
Transformer Transformer Config Move Key Entry> - Objects containing the information about the keys to move to the log event. You must include at least one entry, and five at most. See
move_keysentrybelow for details.
- entries
Log
Transformer Transformer Config Move Key Entry[] - Objects containing the information about the keys to move to the log event. You must include at least one entry, and five at most. See
move_keysentrybelow for details.
- entries
Sequence[Log
Transformer Transformer Config Move Key Entry] - Objects containing the information about the keys to move to the log event. You must include at least one entry, and five at most. See
move_keysentrybelow for details.
- entries List<Property Map>
- Objects containing the information about the keys to move to the log event. You must include at least one entry, and five at most. See
move_keysentrybelow for details.
LogTransformerTransformerConfigMoveKeyEntry, LogTransformerTransformerConfigMoveKeyEntryArgs
- Source string
- Specifies the key to modify.
- Target string
- Specifies the key to move to.
- Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- Source string
- Specifies the key to modify.
- Target string
- Specifies the key to move to.
- Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- source String
- Specifies the key to modify.
- target String
- Specifies the key to move to.
- overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- source string
- Specifies the key to modify.
- target string
- Specifies the key to move to.
- overwrite
If booleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- source str
- Specifies the key to modify.
- target str
- Specifies the key to move to.
- overwrite_
if_ boolexists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- source String
- Specifies the key to modify.
- target String
- Specifies the key to move to.
- overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
LogTransformerTransformerConfigParseCloudfront, LogTransformerTransformerConfigParseCloudfrontArgs
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source str
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
LogTransformerTransformerConfigParseJson, LogTransformerTransformerConfigParseJsonArgs
- Destination string
- Specifies the location to put the parsed key value pair into. If omitted, it will be placed under the root node.
- Source string
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- Destination string
- Specifies the location to put the parsed key value pair into. If omitted, it will be placed under the root node.
- Source string
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- destination String
- Specifies the location to put the parsed key value pair into. If omitted, it will be placed under the root node.
- source String
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- destination string
- Specifies the location to put the parsed key value pair into. If omitted, it will be placed under the root node.
- source string
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- destination str
- Specifies the location to put the parsed key value pair into. If omitted, it will be placed under the root node.
- source str
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- destination String
- Specifies the location to put the parsed key value pair into. If omitted, it will be placed under the root node.
- source String
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
LogTransformerTransformerConfigParseKeyValue, LogTransformerTransformerConfigParseKeyValueArgs
- Destination string
- Specifies the destination field to put the extracted key-value pairs into.
- Field
Delimiter string - Specifies the field delimiter string that is used between key-value pairs in the original log events. Defaults to the ampersand
&character. - Key
Prefix string - Specifies a prefix that will be added to all transformed keys.
- Key
Value stringDelimiter - Specifies the delimiter string to use between the key and value in each pair in the transformed log event. Defaults to the equal
=character. - Non
Match stringValue - Specifies a value to insert into the value field in the result if a key-value pair is not successfully split.
- Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false. - Source string
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- Destination string
- Specifies the destination field to put the extracted key-value pairs into.
- Field
Delimiter string - Specifies the field delimiter string that is used between key-value pairs in the original log events. Defaults to the ampersand
&character. - Key
Prefix string - Specifies a prefix that will be added to all transformed keys.
- Key
Value stringDelimiter - Specifies the delimiter string to use between the key and value in each pair in the transformed log event. Defaults to the equal
=character. - Non
Match stringValue - Specifies a value to insert into the value field in the result if a key-value pair is not successfully split.
- Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false. - Source string
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- destination String
- Specifies the destination field to put the extracted key-value pairs into.
- field
Delimiter String - Specifies the field delimiter string that is used between key-value pairs in the original log events. Defaults to the ampersand
&character. - key
Prefix String - Specifies a prefix that will be added to all transformed keys.
- key
Value StringDelimiter - Specifies the delimiter string to use between the key and value in each pair in the transformed log event. Defaults to the equal
=character. - non
Match StringValue - Specifies a value to insert into the value field in the result if a key-value pair is not successfully split.
- overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false. - source String
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- destination string
- Specifies the destination field to put the extracted key-value pairs into.
- field
Delimiter string - Specifies the field delimiter string that is used between key-value pairs in the original log events. Defaults to the ampersand
&character. - key
Prefix string - Specifies a prefix that will be added to all transformed keys.
- key
Value stringDelimiter - Specifies the delimiter string to use between the key and value in each pair in the transformed log event. Defaults to the equal
=character. - non
Match stringValue - Specifies a value to insert into the value field in the result if a key-value pair is not successfully split.
- overwrite
If booleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false. - source string
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- destination str
- Specifies the destination field to put the extracted key-value pairs into.
- field_
delimiter str - Specifies the field delimiter string that is used between key-value pairs in the original log events. Defaults to the ampersand
&character. - key_
prefix str - Specifies a prefix that will be added to all transformed keys.
- key_
value_ strdelimiter - Specifies the delimiter string to use between the key and value in each pair in the transformed log event. Defaults to the equal
=character. - non_
match_ strvalue - Specifies a value to insert into the value field in the result if a key-value pair is not successfully split.
- overwrite_
if_ boolexists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false. - source str
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
- destination String
- Specifies the destination field to put the extracted key-value pairs into.
- field
Delimiter String - Specifies the field delimiter string that is used between key-value pairs in the original log events. Defaults to the ampersand
&character. - key
Prefix String - Specifies a prefix that will be added to all transformed keys.
- key
Value StringDelimiter - Specifies the delimiter string to use between the key and value in each pair in the transformed log event. Defaults to the equal
=character. - non
Match StringValue - Specifies a value to insert into the value field in the result if a key-value pair is not successfully split.
- overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false. - source String
- Specifies the path to the field in the log event that will be parsed. Defaults to
@message.
LogTransformerTransformerConfigParsePostgres, LogTransformerTransformerConfigParsePostgresArgs
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source str
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
LogTransformerTransformerConfigParseRoute53, LogTransformerTransformerConfigParseRoute53Args
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source str
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
LogTransformerTransformerConfigParseToOcsf, LogTransformerTransformerConfigParseToOcsfArgs
- Event
Source string - Ocsf
Version string - Specifies the version of the OCSF schema to use for the transformed log events. The only allowed value is
V1.1. - Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- Event
Source string - Ocsf
Version string - Specifies the version of the OCSF schema to use for the transformed log events. The only allowed value is
V1.1. - Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- event
Source String - ocsf
Version String - Specifies the version of the OCSF schema to use for the transformed log events. The only allowed value is
V1.1. - source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- event
Source string - ocsf
Version string - Specifies the version of the OCSF schema to use for the transformed log events. The only allowed value is
V1.1. - source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- event_
source str - ocsf_
version str - Specifies the version of the OCSF schema to use for the transformed log events. The only allowed value is
V1.1. - source str
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- event
Source String - ocsf
Version String - Specifies the version of the OCSF schema to use for the transformed log events. The only allowed value is
V1.1. - source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
LogTransformerTransformerConfigParseVpc, LogTransformerTransformerConfigParseVpcArgs
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source str
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
LogTransformerTransformerConfigParseWaf, LogTransformerTransformerConfigParseWafArgs
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- Source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source string
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source str
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
- source String
- Specifies the source field to be parsed. The only allowed value is
@message. If omitted, the whole log message is processed.
LogTransformerTransformerConfigRenameKey, LogTransformerTransformerConfigRenameKeyArgs
- Entries
List<Log
Transformer Transformer Config Rename Key Entry> - Objects containing the information about the keys to rename. You must include at least one entry, and five at most. See
rename_keysentrybelow for details.
- Entries
[]Log
Transformer Transformer Config Rename Key Entry - Objects containing the information about the keys to rename. You must include at least one entry, and five at most. See
rename_keysentrybelow for details.
- entries
List<Log
Transformer Transformer Config Rename Key Entry> - Objects containing the information about the keys to rename. You must include at least one entry, and five at most. See
rename_keysentrybelow for details.
- entries
Log
Transformer Transformer Config Rename Key Entry[] - Objects containing the information about the keys to rename. You must include at least one entry, and five at most. See
rename_keysentrybelow for details.
- entries
Sequence[Log
Transformer Transformer Config Rename Key Entry] - Objects containing the information about the keys to rename. You must include at least one entry, and five at most. See
rename_keysentrybelow for details.
- entries List<Property Map>
- Objects containing the information about the keys to rename. You must include at least one entry, and five at most. See
rename_keysentrybelow for details.
LogTransformerTransformerConfigRenameKeyEntry, LogTransformerTransformerConfigRenameKeyEntryArgs
- Key string
- Specifies the key with the value that will be converted to a different type.
- Rename
To string - Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- Key string
- Specifies the key with the value that will be converted to a different type.
- Rename
To string - Overwrite
If boolExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- key String
- Specifies the key with the value that will be converted to a different type.
- rename
To String - overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- key string
- Specifies the key with the value that will be converted to a different type.
- rename
To string - overwrite
If booleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- key str
- Specifies the key with the value that will be converted to a different type.
- rename_
to str - overwrite_
if_ boolexists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
- key String
- Specifies the key with the value that will be converted to a different type.
- rename
To String - overwrite
If BooleanExists - Specifies whether to overwrite the value if the destination key already exists. Defaults to
false.renameTo- (Required) Specifies the new name of the key.
LogTransformerTransformerConfigSplitString, LogTransformerTransformerConfigSplitStringArgs
- Entries
List<Log
Transformer Transformer Config Split String Entry> - Objects containing the information about the fields to split. You must include at least one entry, and ten at most. See
split_stringentrybelow for details.
- Entries
[]Log
Transformer Transformer Config Split String Entry - Objects containing the information about the fields to split. You must include at least one entry, and ten at most. See
split_stringentrybelow for details.
- entries
List<Log
Transformer Transformer Config Split String Entry> - Objects containing the information about the fields to split. You must include at least one entry, and ten at most. See
split_stringentrybelow for details.
- entries
Log
Transformer Transformer Config Split String Entry[] - Objects containing the information about the fields to split. You must include at least one entry, and ten at most. See
split_stringentrybelow for details.
- entries
Sequence[Log
Transformer Transformer Config Split String Entry] - Objects containing the information about the fields to split. You must include at least one entry, and ten at most. See
split_stringentrybelow for details.
- entries List<Property Map>
- Objects containing the information about the fields to split. You must include at least one entry, and ten at most. See
split_stringentrybelow for details.
LogTransformerTransformerConfigSplitStringEntry, LogTransformerTransformerConfigSplitStringEntryArgs
LogTransformerTransformerConfigSubstituteString, LogTransformerTransformerConfigSubstituteStringArgs
- Entries
List<Log
Transformer Transformer Config Substitute String Entry> - Objects containing the information about the fields to substitute. You must include at least one entry, and ten at most. See
substitute_stringentrybelow for details.
- Entries
[]Log
Transformer Transformer Config Substitute String Entry - Objects containing the information about the fields to substitute. You must include at least one entry, and ten at most. See
substitute_stringentrybelow for details.
- entries
List<Log
Transformer Transformer Config Substitute String Entry> - Objects containing the information about the fields to substitute. You must include at least one entry, and ten at most. See
substitute_stringentrybelow for details.
- entries
Log
Transformer Transformer Config Substitute String Entry[] - Objects containing the information about the fields to substitute. You must include at least one entry, and ten at most. See
substitute_stringentrybelow for details.
- entries
Sequence[Log
Transformer Transformer Config Substitute String Entry] - Objects containing the information about the fields to substitute. You must include at least one entry, and ten at most. See
substitute_stringentrybelow for details.
- entries List<Property Map>
- Objects containing the information about the fields to substitute. You must include at least one entry, and ten at most. See
substitute_stringentrybelow for details.
LogTransformerTransformerConfigSubstituteStringEntry, LogTransformerTransformerConfigSubstituteStringEntryArgs
LogTransformerTransformerConfigTrimString, LogTransformerTransformerConfigTrimStringArgs
- With
Keys List<string> - Specifies the keys of the fields to trim.
- With
Keys []string - Specifies the keys of the fields to trim.
- with
Keys List<String> - Specifies the keys of the fields to trim.
- with
Keys string[] - Specifies the keys of the fields to trim.
- with_
keys Sequence[str] - Specifies the keys of the fields to trim.
- with
Keys List<String> - Specifies the keys of the fields to trim.
LogTransformerTransformerConfigTypeConverter, LogTransformerTransformerConfigTypeConverterArgs
- Entries
List<Log
Transformer Transformer Config Type Converter Entry> - Objects containing the information about the fields to change the type of. You must include at least one entry, and five at most. See
type_converterentrybelow for details.
- Entries
[]Log
Transformer Transformer Config Type Converter Entry - Objects containing the information about the fields to change the type of. You must include at least one entry, and five at most. See
type_converterentrybelow for details.
- entries
List<Log
Transformer Transformer Config Type Converter Entry> - Objects containing the information about the fields to change the type of. You must include at least one entry, and five at most. See
type_converterentrybelow for details.
- entries
Log
Transformer Transformer Config Type Converter Entry[] - Objects containing the information about the fields to change the type of. You must include at least one entry, and five at most. See
type_converterentrybelow for details.
- entries
Sequence[Log
Transformer Transformer Config Type Converter Entry] - Objects containing the information about the fields to change the type of. You must include at least one entry, and five at most. See
type_converterentrybelow for details.
- entries List<Property Map>
- Objects containing the information about the fields to change the type of. You must include at least one entry, and five at most. See
type_converterentrybelow for details.
LogTransformerTransformerConfigTypeConverterEntry, LogTransformerTransformerConfigTypeConverterEntryArgs
LogTransformerTransformerConfigUpperCaseString, LogTransformerTransformerConfigUpperCaseStringArgs
- With
Keys List<string> - Specifies the keys of the fields to convert to uppercase.
- With
Keys []string - Specifies the keys of the fields to convert to uppercase.
- with
Keys List<String> - Specifies the keys of the fields to convert to uppercase.
- with
Keys string[] - Specifies the keys of the fields to convert to uppercase.
- with_
keys Sequence[str] - Specifies the keys of the fields to convert to uppercase.
- with
Keys List<String> - Specifies the keys of the fields to convert to uppercase.
Import
Using pulumi import, import CloudWatch Logs Transformer using the log_group_arn. For example:
$ pulumi import aws:cloudwatch/logTransformer:LogTransformer example arn:aws:logs:us-west-2:123456789012:log-group:example
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- AWS Classic pulumi/pulumi-aws
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
awsTerraform Provider.
