Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Chronosphere
  4. API Docs
  5. LogIngestConfig
Viewing docs for Chronosphere v0.9.16
published on Friday, Jun 5, 2026 by Chronosphere
Schema (JSON)
chronosphereio/pulumi-chronosphere

chronosphere.LogIngestConfig

Viewing docs for Chronosphere v0.9.16
published on Friday, Jun 5, 2026 by Chronosphere
Schema (JSON)
chronosphereio/pulumi-chronosphere

    Singleton per-tenant parser configuration controlling how raw log payloads are parsed into structured fields and how timestamps, severities, services, and other fields are normalized.

    Example Usage

    Example coming soon!

    Example coming soon!

    Example coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.chronosphere.LogIngestConfig;
import com.pulumi.chronosphere.LogIngestConfigArgs;
import com.pulumi.chronosphere.inputs.LogIngestConfigFieldNormalizationArgs;
import com.pulumi.chronosphere.inputs.LogIngestConfigFieldNormalizationMessageArgs;
import com.pulumi.chronosphere.inputs.LogIngestConfigFieldNormalizationServiceArgs;
import com.pulumi.chronosphere.inputs.LogIngestConfigFieldNormalizationSeverityArgs;
import com.pulumi.chronosphere.inputs.LogIngestConfigFieldNormalizationTimestampArgs;
import com.pulumi.chronosphere.inputs.LogIngestConfigFieldParserArgs;
import com.pulumi.chronosphere.inputs.LogIngestConfigFieldParserParserArgs;
import com.pulumi.chronosphere.inputs.LogIngestConfigFieldParserSourceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var config = new LogIngestConfig("config", LogIngestConfigArgs.builder()        
            .fieldNormalization(LogIngestConfigFieldNormalizationArgs.builder()
                .message(LogIngestConfigFieldNormalizationMessageArgs.builder()
                    .defaultValue("no message")
                    .source(                    
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                    .build())
                .service(LogIngestConfigFieldNormalizationServiceArgs.builder()
                    .defaultValue("UNKNOWN")
                    .source(                    
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                    .build())
                .severity(LogIngestConfigFieldNormalizationSeverityArgs.builder()
                    .defaultValue("INFO")
                    .source(                    
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                    .valueMap(Map.ofEntries(
                        Map.entry("debug", "DEBUG"),
                        Map.entry("error", "ERROR"),
                        Map.entry("fatal", "CRITICAL"),
                        Map.entry("info", "INFO"),
                        Map.entry("warn", "WARNING")
                    ))
                    .build())
                .timestamp(LogIngestConfigFieldNormalizationTimestampArgs.builder()
                    .source(                    
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
                        %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                    .build())
                .build())
            .fieldParsers(LogIngestConfigFieldParserArgs.builder()
                .mode("ENABLED")
                .parser(LogIngestConfigFieldParserParserArgs.builder()
                    .parserType("JSON")
                    .build())
                .source(LogIngestConfigFieldParserSourceArgs.builder()
                    .selector("raw_message")
                    .build())
                .build())
            .build());

    }
}

    Example coming soon!

    Example coming soon!

    resources:
  config:
    type: chronosphere:LogIngestConfig
    properties:
      # Normalize common fields across heterogeneous log sources.
      fieldNormalization:
        message:
          defaultValue: no message
          source:
            - selector: message
            - selector: msg
        service:
          defaultValue: UNKNOWN
          source:
            - selector: service
            - selector: app
        severity:
          defaultValue: INFO
          source:
            - selector: level
            - selector: severity
          valueMap:
            debug: DEBUG
            error: ERROR
            fatal: CRITICAL
            info: INFO
            warn: WARNING
        timestamp:
          source:
            - selector: timestamp
            - selector: ts
            - selector: '@timestamp'
      # Parse raw JSON log lines into structured fields.
      fieldParsers:
        - mode: ENABLED
          parser:
            parserType: JSON
          source:
            selector: raw_message

    Create LogIngestConfig Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new LogIngestConfig(name: string, args?: LogIngestConfigArgs, opts?: CustomResourceOptions);
    @overload
def LogIngestConfig(resource_name: str,
                    args: Optional[LogIngestConfigArgs] = None,
                    opts: Optional[ResourceOptions] = None)

@overload
def LogIngestConfig(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    field_normalization: Optional[LogIngestConfigFieldNormalizationArgs] = None,
                    field_parsers: Optional[Sequence[LogIngestConfigFieldParserArgs]] = None,
                    plaintext_parsers: Optional[Sequence[LogIngestConfigPlaintextParserArgs]] = None)
    func NewLogIngestConfig(ctx *Context, name string, args *LogIngestConfigArgs, opts ...ResourceOption) (*LogIngestConfig, error)
    public LogIngestConfig(string name, LogIngestConfigArgs? args = null, CustomResourceOptions? opts = null)
    public LogIngestConfig(String name, LogIngestConfigArgs args)
public LogIngestConfig(String name, LogIngestConfigArgs args, CustomResourceOptions options)

    type: chronosphere:LogIngestConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "chronosphere_logingestconfig" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args LogIngestConfigArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args LogIngestConfigArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args LogIngestConfigArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args LogIngestConfigArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args LogIngestConfigArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var logIngestConfigResource = new Pulumi.LogIngestConfig("logIngestConfigResource", new()
{
    FieldNormalization = new Pulumi.Inputs.LogIngestConfigFieldNormalizationArgs
    {
        CustomFieldNormalizations = new[]
        {
            new Pulumi.Inputs.LogIngestConfigFieldNormalizationCustomFieldNormalizationArgs
            {
                Normalization = new Pulumi.Inputs.LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationArgs
                {
                    DefaultValue = "string",
                    SanitizePatterns = new[]
                    {
                        "string",
                    },
                    Sources = new[]
                    {
                        new Pulumi.Inputs.LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSourceArgs
                        {
                            Selector = "string",
                        },
                    },
                    ValueMap = 
                    {
                        { "string", "string" },
                    },
                },
                Target = "string",
            },
        },
        Message = new Pulumi.Inputs.LogIngestConfigFieldNormalizationMessageArgs
        {
            DefaultValue = "string",
            SanitizePatterns = new[]
            {
                "string",
            },
            Sources = new[]
            {
                new Pulumi.Inputs.LogIngestConfigFieldNormalizationMessageSourceArgs
                {
                    Selector = "string",
                },
            },
            ValueMap = 
            {
                { "string", "string" },
            },
        },
        Service = new Pulumi.Inputs.LogIngestConfigFieldNormalizationServiceArgs
        {
            DefaultValue = "string",
            SanitizePatterns = new[]
            {
                "string",
            },
            Sources = new[]
            {
                new Pulumi.Inputs.LogIngestConfigFieldNormalizationServiceSourceArgs
                {
                    Selector = "string",
                },
            },
            ValueMap = 
            {
                { "string", "string" },
            },
        },
        Severity = new Pulumi.Inputs.LogIngestConfigFieldNormalizationSeverityArgs
        {
            DefaultValue = "string",
            SanitizePatterns = new[]
            {
                "string",
            },
            Sources = new[]
            {
                new Pulumi.Inputs.LogIngestConfigFieldNormalizationSeveritySourceArgs
                {
                    Selector = "string",
                },
            },
            ValueMap = 
            {
                { "string", "string" },
            },
        },
        Timestamp = new Pulumi.Inputs.LogIngestConfigFieldNormalizationTimestampArgs
        {
            Sources = new[]
            {
                new Pulumi.Inputs.LogIngestConfigFieldNormalizationTimestampSourceArgs
                {
                    Selector = "string",
                },
            },
        },
    },
    FieldParsers = new[]
    {
        new Pulumi.Inputs.LogIngestConfigFieldParserArgs
        {
            Parser = new Pulumi.Inputs.LogIngestConfigFieldParserParserArgs
            {
                ParserType = "string",
                GrokParser = new Pulumi.Inputs.LogIngestConfigFieldParserParserGrokParserArgs
                {
                    Pattern = "string",
                },
                KeyValueParser = new Pulumi.Inputs.LogIngestConfigFieldParserParserKeyValueParserArgs
                {
                    Delimiter = "string",
                    PairSeparator = "string",
                    TrimSet = "string",
                },
                RegexParser = new Pulumi.Inputs.LogIngestConfigFieldParserParserRegexParserArgs
                {
                    Regex = "string",
                },
            },
            Source = new Pulumi.Inputs.LogIngestConfigFieldParserSourceArgs
            {
                Selector = "string",
            },
            Destination = new Pulumi.Inputs.LogIngestConfigFieldParserDestinationArgs
            {
                Selector = "string",
            },
            Mode = "string",
        },
    },
    PlaintextParsers = new[]
    {
        new Pulumi.Inputs.LogIngestConfigPlaintextParserArgs
        {
            Name = "string",
            Parser = new Pulumi.Inputs.LogIngestConfigPlaintextParserParserArgs
            {
                ParserType = "string",
                GrokParser = new Pulumi.Inputs.LogIngestConfigPlaintextParserParserGrokParserArgs
                {
                    Pattern = "string",
                },
                KeyValueParser = new Pulumi.Inputs.LogIngestConfigPlaintextParserParserKeyValueParserArgs
                {
                    Delimiter = "string",
                    PairSeparator = "string",
                    TrimSet = "string",
                },
                RegexParser = new Pulumi.Inputs.LogIngestConfigPlaintextParserParserRegexParserArgs
                {
                    Regex = "string",
                },
            },
            KeepOriginal = false,
            Mode = "string",
        },
    },
});

    example, err := chronosphere.NewLogIngestConfig(ctx, "logIngestConfigResource", &chronosphere.LogIngestConfigArgs{
	FieldNormalization: &chronosphere.LogIngestConfigFieldNormalizationArgs{
		CustomFieldNormalizations: chronosphere.LogIngestConfigFieldNormalizationCustomFieldNormalizationArray{
			&chronosphere.LogIngestConfigFieldNormalizationCustomFieldNormalizationArgs{
				Normalization: &chronosphere.LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationArgs{
					DefaultValue: pulumi.String("string"),
					SanitizePatterns: pulumi.StringArray{
						pulumi.String("string"),
					},
					Sources: chronosphere.LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSourceArray{
						&chronosphere.LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSourceArgs{
							Selector: pulumi.String("string"),
						},
					},
					ValueMap: pulumi.StringMap{
						"string": pulumi.String("string"),
					},
				},
				Target: pulumi.String("string"),
			},
		},
		Message: &chronosphere.LogIngestConfigFieldNormalizationMessageArgs{
			DefaultValue: pulumi.String("string"),
			SanitizePatterns: pulumi.StringArray{
				pulumi.String("string"),
			},
			Sources: chronosphere.LogIngestConfigFieldNormalizationMessageSourceArray{
				&chronosphere.LogIngestConfigFieldNormalizationMessageSourceArgs{
					Selector: pulumi.String("string"),
				},
			},
			ValueMap: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
		},
		Service: &chronosphere.LogIngestConfigFieldNormalizationServiceArgs{
			DefaultValue: pulumi.String("string"),
			SanitizePatterns: pulumi.StringArray{
				pulumi.String("string"),
			},
			Sources: chronosphere.LogIngestConfigFieldNormalizationServiceSourceArray{
				&chronosphere.LogIngestConfigFieldNormalizationServiceSourceArgs{
					Selector: pulumi.String("string"),
				},
			},
			ValueMap: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
		},
		Severity: &chronosphere.LogIngestConfigFieldNormalizationSeverityArgs{
			DefaultValue: pulumi.String("string"),
			SanitizePatterns: pulumi.StringArray{
				pulumi.String("string"),
			},
			Sources: chronosphere.LogIngestConfigFieldNormalizationSeveritySourceArray{
				&chronosphere.LogIngestConfigFieldNormalizationSeveritySourceArgs{
					Selector: pulumi.String("string"),
				},
			},
			ValueMap: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
		},
		Timestamp: &chronosphere.LogIngestConfigFieldNormalizationTimestampArgs{
			Sources: chronosphere.LogIngestConfigFieldNormalizationTimestampSourceArray{
				&chronosphere.LogIngestConfigFieldNormalizationTimestampSourceArgs{
					Selector: pulumi.String("string"),
				},
			},
		},
	},
	FieldParsers: chronosphere.LogIngestConfigFieldParserArray{
		&chronosphere.LogIngestConfigFieldParserArgs{
			Parser: &chronosphere.LogIngestConfigFieldParserParserArgs{
				ParserType: pulumi.String("string"),
				GrokParser: &chronosphere.LogIngestConfigFieldParserParserGrokParserArgs{
					Pattern: pulumi.String("string"),
				},
				KeyValueParser: &chronosphere.LogIngestConfigFieldParserParserKeyValueParserArgs{
					Delimiter:     pulumi.String("string"),
					PairSeparator: pulumi.String("string"),
					TrimSet:       pulumi.String("string"),
				},
				RegexParser: &chronosphere.LogIngestConfigFieldParserParserRegexParserArgs{
					Regex: pulumi.String("string"),
				},
			},
			Source: &chronosphere.LogIngestConfigFieldParserSourceArgs{
				Selector: pulumi.String("string"),
			},
			Destination: &chronosphere.LogIngestConfigFieldParserDestinationArgs{
				Selector: pulumi.String("string"),
			},
			Mode: pulumi.String("string"),
		},
	},
	PlaintextParsers: chronosphere.LogIngestConfigPlaintextParserArray{
		&chronosphere.LogIngestConfigPlaintextParserArgs{
			Name: pulumi.String("string"),
			Parser: &chronosphere.LogIngestConfigPlaintextParserParserArgs{
				ParserType: pulumi.String("string"),
				GrokParser: &chronosphere.LogIngestConfigPlaintextParserParserGrokParserArgs{
					Pattern: pulumi.String("string"),
				},
				KeyValueParser: &chronosphere.LogIngestConfigPlaintextParserParserKeyValueParserArgs{
					Delimiter:     pulumi.String("string"),
					PairSeparator: pulumi.String("string"),
					TrimSet:       pulumi.String("string"),
				},
				RegexParser: &chronosphere.LogIngestConfigPlaintextParserParserRegexParserArgs{
					Regex: pulumi.String("string"),
				},
			},
			KeepOriginal: pulumi.Bool(false),
			Mode:         pulumi.String("string"),
		},
	},
})

    resource "chronosphere_logingestconfig" "logIngestConfigResource" {
  field_normalization = {
    custom_field_normalizations = [{
      "normalization" = {
        "defaultValue"     = "string"
        "sanitizePatterns" = ["string"]
        "sources" = [{
          "selector" = "string"
        }]
        "valueMap" = {
          "string" = "string"
        }
      }
      "target" = "string"
    }]
    message = {
      default_value     = "string"
      sanitize_patterns = ["string"]
      sources = [{
        "selector" = "string"
      }]
      value_map = {
        "string" = "string"
      }
    }
    service = {
      default_value     = "string"
      sanitize_patterns = ["string"]
      sources = [{
        "selector" = "string"
      }]
      value_map = {
        "string" = "string"
      }
    }
    severity = {
      default_value     = "string"
      sanitize_patterns = ["string"]
      sources = [{
        "selector" = "string"
      }]
      value_map = {
        "string" = "string"
      }
    }
    timestamp = {
      sources = [{
        "selector" = "string"
      }]
    }
  }
  field_parsers {
    parser = {
      parser_type = "string"
      grok_parser = {
        pattern = "string"
      }
      key_value_parser = {
        delimiter      = "string"
        pair_separator = "string"
        trim_set       = "string"
      }
      regex_parser = {
        regex = "string"
      }
    }
    source = {
      selector = "string"
    }
    destination = {
      selector = "string"
    }
    mode = "string"
  }
  plaintext_parsers {
    name = "string"
    parser = {
      parser_type = "string"
      grok_parser = {
        pattern = "string"
      }
      key_value_parser = {
        delimiter      = "string"
        pair_separator = "string"
        trim_set       = "string"
      }
      regex_parser = {
        regex = "string"
      }
    }
    keep_original = false
    mode          = "string"
  }
}

    var logIngestConfigResource = new LogIngestConfig("logIngestConfigResource", LogIngestConfigArgs.builder()
    .fieldNormalization(LogIngestConfigFieldNormalizationArgs.builder()
        .customFieldNormalizations(LogIngestConfigFieldNormalizationCustomFieldNormalizationArgs.builder()
            .normalization(LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationArgs.builder()
                .defaultValue("string")
                .sanitizePatterns("string")
                .sources(LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSourceArgs.builder()
                    .selector("string")
                    .build())
                .valueMap(Map.of("string", "string"))
                .build())
            .target("string")
            .build())
        .message(LogIngestConfigFieldNormalizationMessageArgs.builder()
            .defaultValue("string")
            .sanitizePatterns("string")
            .sources(LogIngestConfigFieldNormalizationMessageSourceArgs.builder()
                .selector("string")
                .build())
            .valueMap(Map.of("string", "string"))
            .build())
        .service(LogIngestConfigFieldNormalizationServiceArgs.builder()
            .defaultValue("string")
            .sanitizePatterns("string")
            .sources(LogIngestConfigFieldNormalizationServiceSourceArgs.builder()
                .selector("string")
                .build())
            .valueMap(Map.of("string", "string"))
            .build())
        .severity(LogIngestConfigFieldNormalizationSeverityArgs.builder()
            .defaultValue("string")
            .sanitizePatterns("string")
            .sources(LogIngestConfigFieldNormalizationSeveritySourceArgs.builder()
                .selector("string")
                .build())
            .valueMap(Map.of("string", "string"))
            .build())
        .timestamp(LogIngestConfigFieldNormalizationTimestampArgs.builder()
            .sources(LogIngestConfigFieldNormalizationTimestampSourceArgs.builder()
                .selector("string")
                .build())
            .build())
        .build())
    .fieldParsers(LogIngestConfigFieldParserArgs.builder()
        .parser(LogIngestConfigFieldParserParserArgs.builder()
            .parserType("string")
            .grokParser(LogIngestConfigFieldParserParserGrokParserArgs.builder()
                .pattern("string")
                .build())
            .keyValueParser(LogIngestConfigFieldParserParserKeyValueParserArgs.builder()
                .delimiter("string")
                .pairSeparator("string")
                .trimSet("string")
                .build())
            .regexParser(LogIngestConfigFieldParserParserRegexParserArgs.builder()
                .regex("string")
                .build())
            .build())
        .source(LogIngestConfigFieldParserSourceArgs.builder()
            .selector("string")
            .build())
        .destination(LogIngestConfigFieldParserDestinationArgs.builder()
            .selector("string")
            .build())
        .mode("string")
        .build())
    .plaintextParsers(LogIngestConfigPlaintextParserArgs.builder()
        .name("string")
        .parser(LogIngestConfigPlaintextParserParserArgs.builder()
            .parserType("string")
            .grokParser(LogIngestConfigPlaintextParserParserGrokParserArgs.builder()
                .pattern("string")
                .build())
            .keyValueParser(LogIngestConfigPlaintextParserParserKeyValueParserArgs.builder()
                .delimiter("string")
                .pairSeparator("string")
                .trimSet("string")
                .build())
            .regexParser(LogIngestConfigPlaintextParserParserRegexParserArgs.builder()
                .regex("string")
                .build())
            .build())
        .keepOriginal(false)
        .mode("string")
        .build())
    .build());

    log_ingest_config_resource = chronosphere.LogIngestConfig("logIngestConfigResource",
    field_normalization={
        "custom_field_normalizations": [{
            "normalization": {
                "default_value": "string",
                "sanitize_patterns": ["string"],
                "sources": [{
                    "selector": "string",
                }],
                "value_map": {
                    "string": "string",
                },
            },
            "target": "string",
        }],
        "message": {
            "default_value": "string",
            "sanitize_patterns": ["string"],
            "sources": [{
                "selector": "string",
            }],
            "value_map": {
                "string": "string",
            },
        },
        "service": {
            "default_value": "string",
            "sanitize_patterns": ["string"],
            "sources": [{
                "selector": "string",
            }],
            "value_map": {
                "string": "string",
            },
        },
        "severity": {
            "default_value": "string",
            "sanitize_patterns": ["string"],
            "sources": [{
                "selector": "string",
            }],
            "value_map": {
                "string": "string",
            },
        },
        "timestamp": {
            "sources": [{
                "selector": "string",
            }],
        },
    },
    field_parsers=[{
        "parser": {
            "parser_type": "string",
            "grok_parser": {
                "pattern": "string",
            },
            "key_value_parser": {
                "delimiter": "string",
                "pair_separator": "string",
                "trim_set": "string",
            },
            "regex_parser": {
                "regex": "string",
            },
        },
        "source": {
            "selector": "string",
        },
        "destination": {
            "selector": "string",
        },
        "mode": "string",
    }],
    plaintext_parsers=[{
        "name": "string",
        "parser": {
            "parser_type": "string",
            "grok_parser": {
                "pattern": "string",
            },
            "key_value_parser": {
                "delimiter": "string",
                "pair_separator": "string",
                "trim_set": "string",
            },
            "regex_parser": {
                "regex": "string",
            },
        },
        "keep_original": False,
        "mode": "string",
    }])

    const logIngestConfigResource = new chronosphere.LogIngestConfig("logIngestConfigResource", {
    fieldNormalization: {
        customFieldNormalizations: [{
            normalization: {
                defaultValue: "string",
                sanitizePatterns: ["string"],
                sources: [{
                    selector: "string",
                }],
                valueMap: {
                    string: "string",
                },
            },
            target: "string",
        }],
        message: {
            defaultValue: "string",
            sanitizePatterns: ["string"],
            sources: [{
                selector: "string",
            }],
            valueMap: {
                string: "string",
            },
        },
        service: {
            defaultValue: "string",
            sanitizePatterns: ["string"],
            sources: [{
                selector: "string",
            }],
            valueMap: {
                string: "string",
            },
        },
        severity: {
            defaultValue: "string",
            sanitizePatterns: ["string"],
            sources: [{
                selector: "string",
            }],
            valueMap: {
                string: "string",
            },
        },
        timestamp: {
            sources: [{
                selector: "string",
            }],
        },
    },
    fieldParsers: [{
        parser: {
            parserType: "string",
            grokParser: {
                pattern: "string",
            },
            keyValueParser: {
                delimiter: "string",
                pairSeparator: "string",
                trimSet: "string",
            },
            regexParser: {
                regex: "string",
            },
        },
        source: {
            selector: "string",
        },
        destination: {
            selector: "string",
        },
        mode: "string",
    }],
    plaintextParsers: [{
        name: "string",
        parser: {
            parserType: "string",
            grokParser: {
                pattern: "string",
            },
            keyValueParser: {
                delimiter: "string",
                pairSeparator: "string",
                trimSet: "string",
            },
            regexParser: {
                regex: "string",
            },
        },
        keepOriginal: false,
        mode: "string",
    }],
});

    type: chronosphere:LogIngestConfig
properties:
    fieldNormalization:
        customFieldNormalizations:
            - normalization:
                defaultValue: string
                sanitizePatterns:
                    - string
                sources:
                    - selector: string
                valueMap:
                    string: string
              target: string
        message:
            defaultValue: string
            sanitizePatterns:
                - string
            sources:
                - selector: string
            valueMap:
                string: string
        service:
            defaultValue: string
            sanitizePatterns:
                - string
            sources:
                - selector: string
            valueMap:
                string: string
        severity:
            defaultValue: string
            sanitizePatterns:
                - string
            sources:
                - selector: string
            valueMap:
                string: string
        timestamp:
            sources:
                - selector: string
    fieldParsers:
        - destination:
            selector: string
          mode: string
          parser:
            grokParser:
                pattern: string
            keyValueParser:
                delimiter: string
                pairSeparator: string
                trimSet: string
            parserType: string
            regexParser:
                regex: string
          source:
            selector: string
    plaintextParsers:
        - keepOriginal: false
          mode: string
          name: string
          parser:
            grokParser:
                pattern: string
            keyValueParser:
                delimiter: string
                pairSeparator: string
                trimSet: string
            parserType: string
            regexParser:
                regex: string

    LogIngestConfig Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The LogIngestConfig resource accepts the following input properties:

    FieldNormalization Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalization
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    FieldParsers List<Chronosphere.Pulumi.Inputs.LogIngestConfigFieldParser>
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    PlaintextParsers List<Chronosphere.Pulumi.Inputs.LogIngestConfigPlaintextParser>
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    FieldNormalization LogIngestConfigFieldNormalizationArgs
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    FieldParsers []LogIngestConfigFieldParserArgs
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    PlaintextParsers []LogIngestConfigPlaintextParserArgs
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    field_normalization object
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    field_parsers list(object)
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintext_parsers list(object)
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    fieldNormalization LogIngestConfigFieldNormalization
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    fieldParsers List<LogIngestConfigFieldParser>
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintextParsers List<LogIngestConfigPlaintextParser>
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    fieldNormalization LogIngestConfigFieldNormalization
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    fieldParsers LogIngestConfigFieldParser[]
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintextParsers LogIngestConfigPlaintextParser[]
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    field_normalization LogIngestConfigFieldNormalizationArgs
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    field_parsers Sequence[LogIngestConfigFieldParserArgs]
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintext_parsers Sequence[LogIngestConfigPlaintextParserArgs]
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    fieldNormalization Property Map
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    fieldParsers List<Property Map>
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintextParsers List<Property Map>
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the LogIngestConfig resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing LogIngestConfig Resource

    Get an existing LogIngestConfig resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: LogIngestConfigState, opts?: CustomResourceOptions): LogIngestConfig
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        field_normalization: Optional[LogIngestConfigFieldNormalizationArgs] = None,
        field_parsers: Optional[Sequence[LogIngestConfigFieldParserArgs]] = None,
        plaintext_parsers: Optional[Sequence[LogIngestConfigPlaintextParserArgs]] = None) -> LogIngestConfig
    func GetLogIngestConfig(ctx *Context, name string, id IDInput, state *LogIngestConfigState, opts ...ResourceOption) (*LogIngestConfig, error)
    public static LogIngestConfig Get(string name, Input<string> id, LogIngestConfigState? state, CustomResourceOptions? opts = null)
    public static LogIngestConfig get(String name, Output<String> id, LogIngestConfigState state, CustomResourceOptions options)
    resources:  _:    type: chronosphere:LogIngestConfig    get:      id: ${id}
    import {
  to = chronosphere_logingestconfig.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    FieldNormalization Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalization
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    FieldParsers List<Chronosphere.Pulumi.Inputs.LogIngestConfigFieldParser>
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    PlaintextParsers List<Chronosphere.Pulumi.Inputs.LogIngestConfigPlaintextParser>
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    FieldNormalization LogIngestConfigFieldNormalizationArgs
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    FieldParsers []LogIngestConfigFieldParserArgs
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    PlaintextParsers []LogIngestConfigPlaintextParserArgs
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    field_normalization object
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    field_parsers list(object)
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintext_parsers list(object)
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    fieldNormalization LogIngestConfigFieldNormalization
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    fieldParsers List<LogIngestConfigFieldParser>
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintextParsers List<LogIngestConfigPlaintextParser>
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    fieldNormalization LogIngestConfigFieldNormalization
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    fieldParsers LogIngestConfigFieldParser[]
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintextParsers LogIngestConfigPlaintextParser[]
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    field_normalization LogIngestConfigFieldNormalizationArgs
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    field_parsers Sequence[LogIngestConfigFieldParserArgs]
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintext_parsers Sequence[LogIngestConfigPlaintextParserArgs]
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.
    fieldNormalization Property Map
    Field normalization rules that map and standardize well-known fields (timestamp, severity, message, service) across log formats. Runs after parsing.
    fieldParsers List<Property Map>
    Parsers applied to specific fields within structured logs (or to fields produced by a plaintext parser).
    plaintextParsers List<Property Map>
    Parsers applied to plaintext logs as they enter the ingest pipeline. The first parser that matches a log is used.

    Supporting Types

    LogIngestConfigFieldNormalization, LogIngestConfigFieldNormalizationArgs

    CustomFieldNormalizations List<Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationCustomFieldNormalization>
    Normalization rules for additional custom fields. These fields are not indexed; use them for things like environment, region, or user ID.
    Message Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationMessage
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    Service Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationService
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    Severity Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationSeverity
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    Timestamp Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationTimestamp
    Normalization rule for the well-known timestamp field.
    CustomFieldNormalizations []LogIngestConfigFieldNormalizationCustomFieldNormalization
    Normalization rules for additional custom fields. These fields are not indexed; use them for things like environment, region, or user ID.
    Message LogIngestConfigFieldNormalizationMessage
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    Service LogIngestConfigFieldNormalizationService
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    Severity LogIngestConfigFieldNormalizationSeverity
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    Timestamp LogIngestConfigFieldNormalizationTimestamp
    Normalization rule for the well-known timestamp field.
    custom_field_normalizations list(object)
    Normalization rules for additional custom fields. These fields are not indexed; use them for things like environment, region, or user ID.
    message object
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    service object
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    severity object
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    timestamp object
    Normalization rule for the well-known timestamp field.
    customFieldNormalizations List<LogIngestConfigFieldNormalizationCustomFieldNormalization>
    Normalization rules for additional custom fields. These fields are not indexed; use them for things like environment, region, or user ID.
    message LogIngestConfigFieldNormalizationMessage
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    service LogIngestConfigFieldNormalizationService
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    severity LogIngestConfigFieldNormalizationSeverity
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    timestamp LogIngestConfigFieldNormalizationTimestamp
    Normalization rule for the well-known timestamp field.
    customFieldNormalizations LogIngestConfigFieldNormalizationCustomFieldNormalization[]
    Normalization rules for additional custom fields. These fields are not indexed; use them for things like environment, region, or user ID.
    message LogIngestConfigFieldNormalizationMessage
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    service LogIngestConfigFieldNormalizationService
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    severity LogIngestConfigFieldNormalizationSeverity
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    timestamp LogIngestConfigFieldNormalizationTimestamp
    Normalization rule for the well-known timestamp field.
    custom_field_normalizations Sequence[LogIngestConfigFieldNormalizationCustomFieldNormalization]
    Normalization rules for additional custom fields. These fields are not indexed; use them for things like environment, region, or user ID.
    message LogIngestConfigFieldNormalizationMessage
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    service LogIngestConfigFieldNormalizationService
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    severity LogIngestConfigFieldNormalizationSeverity
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    timestamp LogIngestConfigFieldNormalizationTimestamp
    Normalization rule for the well-known timestamp field.
    customFieldNormalizations List<Property Map>
    Normalization rules for additional custom fields. These fields are not indexed; use them for things like environment, region, or user ID.
    message Property Map
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    service Property Map
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    severity Property Map
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    timestamp Property Map
    Normalization rule for the well-known timestamp field.

    LogIngestConfigFieldNormalizationCustomFieldNormalization, LogIngestConfigFieldNormalizationCustomFieldNormalizationArgs

    Normalization Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalization
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    Target string
    Name of the target field where the normalized value is stored.
    Normalization LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalization
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    Target string
    Name of the target field where the normalized value is stored.
    normalization object
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    target string
    Name of the target field where the normalized value is stored.
    normalization LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalization
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    target String
    Name of the target field where the normalized value is stored.
    normalization LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalization
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    target string
    Name of the target field where the normalized value is stored.
    normalization LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalization
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    target str
    Name of the target field where the normalized value is stored.
    normalization Property Map
    Rule that extracts and transforms a string value from a log field, with optional regex sanitization, default value, and value mapping.
    target String
    Name of the target field where the normalized value is stored.

    LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalization, LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationArgs

    DefaultValue string
    Value to use when no source field contains a value.
    SanitizePatterns List<string>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    Sources List<Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    ValueMap Dictionary<string, string>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    DefaultValue string
    Value to use when no source field contains a value.
    SanitizePatterns []string
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    Sources []LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSource
    Ordered list of field paths to check for values. The first non-empty value found is used.
    ValueMap map[string]string
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    default_value string
    Value to use when no source field contains a value.
    sanitize_patterns list(string)
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources list(object)
    Ordered list of field paths to check for values. The first non-empty value found is used.
    value_map map(string)
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue String
    Value to use when no source field contains a value.
    sanitizePatterns List<String>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources List<LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap Map<String,String>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue string
    Value to use when no source field contains a value.
    sanitizePatterns string[]
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSource[]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap {[key: string]: string}
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    default_value str
    Value to use when no source field contains a value.
    sanitize_patterns Sequence[str]
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources Sequence[LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSource]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    value_map Mapping[str, str]
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue String
    Value to use when no source field contains a value.
    sanitizePatterns List<String>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources List<Property Map>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap Map<String>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).

    LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSource, LogIngestConfigFieldNormalizationCustomFieldNormalizationNormalizationSourceArgs

    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector str
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.

    LogIngestConfigFieldNormalizationMessage, LogIngestConfigFieldNormalizationMessageArgs

    DefaultValue string
    Value to use when no source field contains a value.
    SanitizePatterns List<string>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    Sources List<Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationMessageSource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    ValueMap Dictionary<string, string>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    DefaultValue string
    Value to use when no source field contains a value.
    SanitizePatterns []string
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    Sources []LogIngestConfigFieldNormalizationMessageSource
    Ordered list of field paths to check for values. The first non-empty value found is used.
    ValueMap map[string]string
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    default_value string
    Value to use when no source field contains a value.
    sanitize_patterns list(string)
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources list(object)
    Ordered list of field paths to check for values. The first non-empty value found is used.
    value_map map(string)
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue String
    Value to use when no source field contains a value.
    sanitizePatterns List<String>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources List<LogIngestConfigFieldNormalizationMessageSource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap Map<String,String>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue string
    Value to use when no source field contains a value.
    sanitizePatterns string[]
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources LogIngestConfigFieldNormalizationMessageSource[]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap {[key: string]: string}
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    default_value str
    Value to use when no source field contains a value.
    sanitize_patterns Sequence[str]
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources Sequence[LogIngestConfigFieldNormalizationMessageSource]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    value_map Mapping[str, str]
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue String
    Value to use when no source field contains a value.
    sanitizePatterns List<String>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources List<Property Map>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap Map<String>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).

    LogIngestConfigFieldNormalizationMessageSource, LogIngestConfigFieldNormalizationMessageSourceArgs

    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector str
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.

    LogIngestConfigFieldNormalizationService, LogIngestConfigFieldNormalizationServiceArgs

    DefaultValue string
    Value to use when no source field contains a value.
    SanitizePatterns List<string>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    Sources List<Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationServiceSource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    ValueMap Dictionary<string, string>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    DefaultValue string
    Value to use when no source field contains a value.
    SanitizePatterns []string
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    Sources []LogIngestConfigFieldNormalizationServiceSource
    Ordered list of field paths to check for values. The first non-empty value found is used.
    ValueMap map[string]string
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    default_value string
    Value to use when no source field contains a value.
    sanitize_patterns list(string)
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources list(object)
    Ordered list of field paths to check for values. The first non-empty value found is used.
    value_map map(string)
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue String
    Value to use when no source field contains a value.
    sanitizePatterns List<String>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources List<LogIngestConfigFieldNormalizationServiceSource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap Map<String,String>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue string
    Value to use when no source field contains a value.
    sanitizePatterns string[]
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources LogIngestConfigFieldNormalizationServiceSource[]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap {[key: string]: string}
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    default_value str
    Value to use when no source field contains a value.
    sanitize_patterns Sequence[str]
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources Sequence[LogIngestConfigFieldNormalizationServiceSource]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    value_map Mapping[str, str]
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue String
    Value to use when no source field contains a value.
    sanitizePatterns List<String>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources List<Property Map>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap Map<String>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).

    LogIngestConfigFieldNormalizationServiceSource, LogIngestConfigFieldNormalizationServiceSourceArgs

    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector str
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.

    LogIngestConfigFieldNormalizationSeverity, LogIngestConfigFieldNormalizationSeverityArgs

    DefaultValue string
    Value to use when no source field contains a value.
    SanitizePatterns List<string>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    Sources List<Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationSeveritySource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    ValueMap Dictionary<string, string>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    DefaultValue string
    Value to use when no source field contains a value.
    SanitizePatterns []string
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    Sources []LogIngestConfigFieldNormalizationSeveritySource
    Ordered list of field paths to check for values. The first non-empty value found is used.
    ValueMap map[string]string
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    default_value string
    Value to use when no source field contains a value.
    sanitize_patterns list(string)
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources list(object)
    Ordered list of field paths to check for values. The first non-empty value found is used.
    value_map map(string)
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue String
    Value to use when no source field contains a value.
    sanitizePatterns List<String>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources List<LogIngestConfigFieldNormalizationSeveritySource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap Map<String,String>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue string
    Value to use when no source field contains a value.
    sanitizePatterns string[]
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources LogIngestConfigFieldNormalizationSeveritySource[]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap {[key: string]: string}
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    default_value str
    Value to use when no source field contains a value.
    sanitize_patterns Sequence[str]
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources Sequence[LogIngestConfigFieldNormalizationSeveritySource]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    value_map Mapping[str, str]
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).
    defaultValue String
    Value to use when no source field contains a value.
    sanitizePatterns List<String>
    Regex patterns used to extract and sanitize the value. Each pattern must have exactly one capturing group, whose contents are used as the result.
    sources List<Property Map>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    valueMap Map<String>
    Optional mapping that normalizes raw values to canonical ones (for example, warn to WARNING).

    LogIngestConfigFieldNormalizationSeveritySource, LogIngestConfigFieldNormalizationSeveritySourceArgs

    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector str
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.

    LogIngestConfigFieldNormalizationTimestamp, LogIngestConfigFieldNormalizationTimestampArgs

    Sources List<Chronosphere.Pulumi.Inputs.LogIngestConfigFieldNormalizationTimestampSource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    Sources []LogIngestConfigFieldNormalizationTimestampSource
    Ordered list of field paths to check for values. The first non-empty value found is used.
    sources list(object)
    Ordered list of field paths to check for values. The first non-empty value found is used.
    sources List<LogIngestConfigFieldNormalizationTimestampSource>
    Ordered list of field paths to check for values. The first non-empty value found is used.
    sources LogIngestConfigFieldNormalizationTimestampSource[]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    sources Sequence[LogIngestConfigFieldNormalizationTimestampSource]
    Ordered list of field paths to check for values. The first non-empty value found is used.
    sources List<Property Map>
    Ordered list of field paths to check for values. The first non-empty value found is used.

    LogIngestConfigFieldNormalizationTimestampSource, LogIngestConfigFieldNormalizationTimestampSourceArgs

    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector str
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.

    LogIngestConfigFieldParser, LogIngestConfigFieldParserArgs

    Parser Chronosphere.Pulumi.Inputs.LogIngestConfigFieldParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    Source Chronosphere.Pulumi.Inputs.LogIngestConfigFieldParserSource
    Path of the field to parse.
    Destination Chronosphere.Pulumi.Inputs.LogIngestConfigFieldParserDestination
    Path to write the parsed output to. If omitted, parsed fields are written at the root.
    Mode string
    Mode that controls when the field parser runs on incoming logs.
    Parser LogIngestConfigFieldParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    Source LogIngestConfigFieldParserSource
    Path of the field to parse.
    Destination LogIngestConfigFieldParserDestination
    Path to write the parsed output to. If omitted, parsed fields are written at the root.
    Mode string
    Mode that controls when the field parser runs on incoming logs.
    parser object
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    source object
    Path of the field to parse.
    destination object
    Path to write the parsed output to. If omitted, parsed fields are written at the root.
    mode string
    Mode that controls when the field parser runs on incoming logs.
    parser LogIngestConfigFieldParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    source LogIngestConfigFieldParserSource
    Path of the field to parse.
    destination LogIngestConfigFieldParserDestination
    Path to write the parsed output to. If omitted, parsed fields are written at the root.
    mode String
    Mode that controls when the field parser runs on incoming logs.
    parser LogIngestConfigFieldParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    source LogIngestConfigFieldParserSource
    Path of the field to parse.
    destination LogIngestConfigFieldParserDestination
    Path to write the parsed output to. If omitted, parsed fields are written at the root.
    mode string
    Mode that controls when the field parser runs on incoming logs.
    parser LogIngestConfigFieldParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    source LogIngestConfigFieldParserSource
    Path of the field to parse.
    destination LogIngestConfigFieldParserDestination
    Path to write the parsed output to. If omitted, parsed fields are written at the root.
    mode str
    Mode that controls when the field parser runs on incoming logs.
    parser Property Map
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    source Property Map
    Path of the field to parse.
    destination Property Map
    Path to write the parsed output to. If omitted, parsed fields are written at the root.
    mode String
    Mode that controls when the field parser runs on incoming logs.

    LogIngestConfigFieldParserDestination, LogIngestConfigFieldParserDestinationArgs

    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector str
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.

    LogIngestConfigFieldParserParser, LogIngestConfigFieldParserParserArgs

    ParserType string
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    GrokParser Chronosphere.Pulumi.Inputs.LogIngestConfigFieldParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    KeyValueParser Chronosphere.Pulumi.Inputs.LogIngestConfigFieldParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    RegexParser Chronosphere.Pulumi.Inputs.LogIngestConfigFieldParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    ParserType string
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    GrokParser LogIngestConfigFieldParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    KeyValueParser LogIngestConfigFieldParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    RegexParser LogIngestConfigFieldParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    parser_type string
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grok_parser object
    Grok parser configuration. Only set when parser_type is GROK.
    key_value_parser object
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regex_parser object
    Regex parser configuration. Only set when parser_type is REGEX.
    parserType String
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grokParser LogIngestConfigFieldParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    keyValueParser LogIngestConfigFieldParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regexParser LogIngestConfigFieldParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    parserType string
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grokParser LogIngestConfigFieldParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    keyValueParser LogIngestConfigFieldParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regexParser LogIngestConfigFieldParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    parser_type str
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grok_parser LogIngestConfigFieldParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    key_value_parser LogIngestConfigFieldParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regex_parser LogIngestConfigFieldParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    parserType String
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grokParser Property Map
    Grok parser configuration. Only set when parser_type is GROK.
    keyValueParser Property Map
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regexParser Property Map
    Regex parser configuration. Only set when parser_type is REGEX.

    LogIngestConfigFieldParserParserGrokParser, LogIngestConfigFieldParserParserGrokParserArgs

    Pattern string
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    Pattern string
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern string
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern String
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern string
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern str
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern String
    Grok pattern to apply. Named capture groups become named fields in the extracted log.

    LogIngestConfigFieldParserParserKeyValueParser, LogIngestConfigFieldParserParserKeyValueParserArgs

    Delimiter string
    String used to split the input into individual key/value pairs.
    PairSeparator string
    String used to split each pair into a key and value.
    TrimSet string
    Unicode code points to trim from the beginning and end of each key and value.
    Delimiter string
    String used to split the input into individual key/value pairs.
    PairSeparator string
    String used to split each pair into a key and value.
    TrimSet string
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter string
    String used to split the input into individual key/value pairs.
    pair_separator string
    String used to split each pair into a key and value.
    trim_set string
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter String
    String used to split the input into individual key/value pairs.
    pairSeparator String
    String used to split each pair into a key and value.
    trimSet String
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter string
    String used to split the input into individual key/value pairs.
    pairSeparator string
    String used to split each pair into a key and value.
    trimSet string
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter str
    String used to split the input into individual key/value pairs.
    pair_separator str
    String used to split each pair into a key and value.
    trim_set str
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter String
    String used to split the input into individual key/value pairs.
    pairSeparator String
    String used to split each pair into a key and value.
    trimSet String
    Unicode code points to trim from the beginning and end of each key and value.

    LogIngestConfigFieldParserParserRegexParser, LogIngestConfigFieldParserParserRegexParserArgs

    Regex string
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    Regex string
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex string
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex String
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex string
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex str
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex String
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.

    LogIngestConfigFieldParserSource, LogIngestConfigFieldParserSourceArgs

    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    Selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector string
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector str
    Field path selector. Use parent[child] syntax to indicate nesting.
    selector String
    Field path selector. Use parent[child] syntax to indicate nesting.

    LogIngestConfigPlaintextParser, LogIngestConfigPlaintextParserArgs

    Name string
    Name of the parser. Must be unique within the configuration.
    Parser Chronosphere.Pulumi.Inputs.LogIngestConfigPlaintextParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    KeepOriginal bool
    If true, the original log is retained after parsing and stored under the plaintext_log key. Defaults to false.
    Mode string
    Mode that controls how the parser matches incoming plaintext logs.
    Name string
    Name of the parser. Must be unique within the configuration.
    Parser LogIngestConfigPlaintextParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    KeepOriginal bool
    If true, the original log is retained after parsing and stored under the plaintext_log key. Defaults to false.
    Mode string
    Mode that controls how the parser matches incoming plaintext logs.
    name string
    Name of the parser. Must be unique within the configuration.
    parser object
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    keep_original bool
    If true, the original log is retained after parsing and stored under the plaintext_log key. Defaults to false.
    mode string
    Mode that controls how the parser matches incoming plaintext logs.
    name String
    Name of the parser. Must be unique within the configuration.
    parser LogIngestConfigPlaintextParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    keepOriginal Boolean
    If true, the original log is retained after parsing and stored under the plaintext_log key. Defaults to false.
    mode String
    Mode that controls how the parser matches incoming plaintext logs.
    name string
    Name of the parser. Must be unique within the configuration.
    parser LogIngestConfigPlaintextParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    keepOriginal boolean
    If true, the original log is retained after parsing and stored under the plaintext_log key. Defaults to false.
    mode string
    Mode that controls how the parser matches incoming plaintext logs.
    name str
    Name of the parser. Must be unique within the configuration.
    parser LogIngestConfigPlaintextParserParser
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    keep_original bool
    If true, the original log is retained after parsing and stored under the plaintext_log key. Defaults to false.
    mode str
    Mode that controls how the parser matches incoming plaintext logs.
    name String
    Name of the parser. Must be unique within the configuration.
    parser Property Map
    Parser configuration. Exactly one of regex_parser, key_value_parser, or grok_parser must be set, matching parser_type.
    keepOriginal Boolean
    If true, the original log is retained after parsing and stored under the plaintext_log key. Defaults to false.
    mode String
    Mode that controls how the parser matches incoming plaintext logs.

    LogIngestConfigPlaintextParserParser, LogIngestConfigPlaintextParserParserArgs

    ParserType string
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    GrokParser Chronosphere.Pulumi.Inputs.LogIngestConfigPlaintextParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    KeyValueParser Chronosphere.Pulumi.Inputs.LogIngestConfigPlaintextParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    RegexParser Chronosphere.Pulumi.Inputs.LogIngestConfigPlaintextParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    ParserType string
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    GrokParser LogIngestConfigPlaintextParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    KeyValueParser LogIngestConfigPlaintextParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    RegexParser LogIngestConfigPlaintextParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    parser_type string
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grok_parser object
    Grok parser configuration. Only set when parser_type is GROK.
    key_value_parser object
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regex_parser object
    Regex parser configuration. Only set when parser_type is REGEX.
    parserType String
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grokParser LogIngestConfigPlaintextParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    keyValueParser LogIngestConfigPlaintextParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regexParser LogIngestConfigPlaintextParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    parserType string
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grokParser LogIngestConfigPlaintextParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    keyValueParser LogIngestConfigPlaintextParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regexParser LogIngestConfigPlaintextParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    parser_type str
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grok_parser LogIngestConfigPlaintextParserParserGrokParser
    Grok parser configuration. Only set when parser_type is GROK.
    key_value_parser LogIngestConfigPlaintextParserParserKeyValueParser
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regex_parser LogIngestConfigPlaintextParserParserRegexParser
    Regex parser configuration. Only set when parser_type is REGEX.
    parserType String
    Type of parser to apply. Determines which of regex_parser, key_value_parser, or grok_parser must be set.
    grokParser Property Map
    Grok parser configuration. Only set when parser_type is GROK.
    keyValueParser Property Map
    Key/value parser configuration. Only set when parser_type is KEY_VALUE. Duplicate keys keep the first occurrence.
    regexParser Property Map
    Regex parser configuration. Only set when parser_type is REGEX.

    LogIngestConfigPlaintextParserParserGrokParser, LogIngestConfigPlaintextParserParserGrokParserArgs

    Pattern string
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    Pattern string
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern string
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern String
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern string
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern str
    Grok pattern to apply. Named capture groups become named fields in the extracted log.
    pattern String
    Grok pattern to apply. Named capture groups become named fields in the extracted log.

    LogIngestConfigPlaintextParserParserKeyValueParser, LogIngestConfigPlaintextParserParserKeyValueParserArgs

    Delimiter string
    String used to split the input into individual key/value pairs.
    PairSeparator string
    String used to split each pair into a key and value.
    TrimSet string
    Unicode code points to trim from the beginning and end of each key and value.
    Delimiter string
    String used to split the input into individual key/value pairs.
    PairSeparator string
    String used to split each pair into a key and value.
    TrimSet string
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter string
    String used to split the input into individual key/value pairs.
    pair_separator string
    String used to split each pair into a key and value.
    trim_set string
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter String
    String used to split the input into individual key/value pairs.
    pairSeparator String
    String used to split each pair into a key and value.
    trimSet String
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter string
    String used to split the input into individual key/value pairs.
    pairSeparator string
    String used to split each pair into a key and value.
    trimSet string
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter str
    String used to split the input into individual key/value pairs.
    pair_separator str
    String used to split each pair into a key and value.
    trim_set str
    Unicode code points to trim from the beginning and end of each key and value.
    delimiter String
    String used to split the input into individual key/value pairs.
    pairSeparator String
    String used to split each pair into a key and value.
    trimSet String
    Unicode code points to trim from the beginning and end of each key and value.

    LogIngestConfigPlaintextParserParserRegexParser, LogIngestConfigPlaintextParserParserRegexParserArgs

    Regex string
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    Regex string
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex string
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex String
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex string
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex str
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.
    regex String
    RE2 regular expression pattern. Named capturing groups become named fields in the extracted log.

    Package Details

    Repository
    chronosphere chronosphereio/pulumi-chronosphere
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the chronosphere Terraform Provider.
    Viewing docs for Chronosphere v0.9.16
    published on Friday, Jun 5, 2026 by Chronosphere
    Schema (JSON)
    chronosphereio/pulumi-chronosphere

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial