Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Google Cloud (GCP) Classic
  4. API Docs
  5. chronicle
  6. DataExport
Viewing docs for Google Cloud v9.33.0
published on Wednesday, Aug 5, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

gcp.chronicle.DataExport

gcp logo
Viewing docs for Google Cloud v9.33.0
published on Wednesday, Aug 5, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

    DataExport resource represents a request to export data from Chronicle to a GCS bucket.

    To get more information about DataExport, see:

    Example Usage

    Chronicle Data Export Basic

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const project = gcp.organizations.getProject({
    projectId: "my-project-name",
});
const testBucket = new gcp.storage.Bucket("test_bucket", {
    name: "chronicle-test-bucket-my-project-name-_56730",
    project: "my-project-name",
    location: "us",
    forceDestroy: true,
});
const example = new gcp.chronicle.DataExport("example", {
    location: "us",
    instance: "00000000-0000-0000-0000-000000000000",
    gcsBucket: pulumi.all([project, testBucket.name]).apply(([project, name]) => `projects/${project.number}/buckets/${name}`),
    startTime: "2025-01-01T00:00:00Z",
    endTime: "2025-01-01T12:00:00Z",
});

    import pulumi
import pulumi_gcp as gcp

project = gcp.organizations.get_project(project_id="my-project-name")
test_bucket = gcp.storage.Bucket("test_bucket",
    name="chronicle-test-bucket-my-project-name-_56730",
    project="my-project-name",
    location="us",
    force_destroy=True)
example = gcp.chronicle.DataExport("example",
    location="us",
    instance="00000000-0000-0000-0000-000000000000",
    gcs_bucket=test_bucket.name.apply(lambda name: f"projects/{project.number}/buckets/{name}"),
    start_time="2025-01-01T00:00:00Z",
    end_time="2025-01-01T12:00:00Z")

    package main

import (
	"fmt"

	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/chronicle"
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/organizations"
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/storage"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		project, err := organizations.LookupProject(ctx, &organizations.LookupProjectArgs{
			ProjectId: pulumi.StringRef("my-project-name"),
		}, nil)
		if err != nil {
			return err
		}
		testBucket, err := storage.NewBucket(ctx, "test_bucket", &storage.BucketArgs{
			Name:         pulumi.String("chronicle-test-bucket-my-project-name-_56730"),
			Project:      pulumi.String("my-project-name"),
			Location:     pulumi.String("us"),
			ForceDestroy: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = chronicle.NewDataExport(ctx, "example", &chronicle.DataExportArgs{
			Location: pulumi.String("us"),
			Instance: pulumi.String("00000000-0000-0000-0000-000000000000"),
			GcsBucket: testBucket.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("projects/%v/buckets/%v", project.Number, name), nil
			}).(pulumi.StringOutput),
			StartTime: pulumi.String("2025-01-01T00:00:00Z"),
			EndTime:   pulumi.String("2025-01-01T12:00:00Z"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var project = Gcp.Organizations.GetProject.Invoke(new()
    {
        ProjectId = "my-project-name",
    });

    var testBucket = new Gcp.Storage.Bucket("test_bucket", new()
    {
        Name = "chronicle-test-bucket-my-project-name-_56730",
        Project = "my-project-name",
        Location = "us",
        ForceDestroy = true,
    });

    var example = new Gcp.Chronicle.DataExport("example", new()
    {
        Location = "us",
        Instance = "00000000-0000-0000-0000-000000000000",
        GcsBucket = Output.Tuple(project, testBucket.Name).Apply(values =>
        {
            var project = values.Item1;
            var name = values.Item2;
            return $"projects/{project.Apply(getProjectResult => getProjectResult.Number)}/buckets/{name}";
        }),
        StartTime = "2025-01-01T00:00:00Z",
        EndTime = "2025-01-01T12:00:00Z",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetProjectArgs;
import com.pulumi.gcp.storage.Bucket;
import com.pulumi.gcp.storage.BucketArgs;
import com.pulumi.gcp.chronicle.DataExport;
import com.pulumi.gcp.chronicle.DataExportArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var project = OrganizationsFunctions.getProject(GetProjectArgs.builder()
            .projectId("my-project-name")
            .build());

        var testBucket = new Bucket("testBucket", BucketArgs.builder()
            .name("chronicle-test-bucket-my-project-name-_56730")
            .project("my-project-name")
            .location("us")
            .forceDestroy(true)
            .build());

        var example = new DataExport("example", DataExportArgs.builder()
            .location("us")
            .instance("00000000-0000-0000-0000-000000000000")
            .gcsBucket(testBucket.name().applyValue(_name -> String.format("projects/%s/buckets/%s", project.number(),_name)))
            .startTime("2025-01-01T00:00:00Z")
            .endTime("2025-01-01T12:00:00Z")
            .build());

    }
}

    resources:
  testBucket:
    type: gcp:storage:Bucket
    name: test_bucket
    properties:
      name: chronicle-test-bucket-my-project-name-_56730
      project: my-project-name
      location: us
      forceDestroy: true
  example:
    type: gcp:chronicle:DataExport
    properties:
      location: us
      instance: 00000000-0000-0000-0000-000000000000
      gcsBucket: projects/${project.number}/buckets/${testBucket.name}
      startTime: 2025-01-01T00:00:00Z
      endTime: 2025-01-01T12:00:00Z
variables:
  project:
    fn::invoke:
      function: gcp:organizations:getProject
      arguments:
        projectId: my-project-name

    pulumi {
  required_providers {
    gcp = {
      source = "pulumi/gcp"
    }
  }
}

data "gcp_organizations_getproject" "project" {
  project_id = "my-project-name"
}

resource "gcp_storage_bucket" "test_bucket" {
  name          = "chronicle-test-bucket-my-project-name-_56730"
  project       = "my-project-name"
  location      = "us"
  force_destroy = true
}
resource "gcp_chronicle_dataexport" "example" {
  location   = "us"
  instance   = "00000000-0000-0000-0000-000000000000"
  gcs_bucket ="projects/${data.gcp_organizations_getproject.project.number}/buckets/${gcp_storage_bucket.test_bucket.name}"
  start_time = "2025-01-01T00:00:00Z"
  end_time   = "2025-01-01T12:00:00Z"
}

    Chronicle Data Export Full

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const project = gcp.organizations.getProject({
    projectId: "my-project-name",
});
const testBucket = new gcp.storage.Bucket("test_bucket", {
    name: "chronicle-test-bucket-my-project-name-_95154",
    project: "my-project-name",
    location: "us",
    forceDestroy: true,
});
const example = new gcp.chronicle.DataExport("example", {
    location: "us",
    instance: "00000000-0000-0000-0000-000000000000",
    gcsBucket: pulumi.all([project, testBucket.name]).apply(([project, name]) => `projects/${project.number}/buckets/${name}`),
    startTime: "2025-01-01T00:00:00Z",
    endTime: "2025-01-01T12:00:00Z",
    includeLogTypes: ["projects/my-project-name/locations/us/instances/00000000-0000-0000-0000-000000000000/logTypes/GCP_CLOUDAUDIT"],
    ingestionLabels: [{
        key: "key1",
        value: "val1",
    }],
    namespaces: ["my-namespace"],
});

    import pulumi
import pulumi_gcp as gcp

project = gcp.organizations.get_project(project_id="my-project-name")
test_bucket = gcp.storage.Bucket("test_bucket",
    name="chronicle-test-bucket-my-project-name-_95154",
    project="my-project-name",
    location="us",
    force_destroy=True)
example = gcp.chronicle.DataExport("example",
    location="us",
    instance="00000000-0000-0000-0000-000000000000",
    gcs_bucket=test_bucket.name.apply(lambda name: f"projects/{project.number}/buckets/{name}"),
    start_time="2025-01-01T00:00:00Z",
    end_time="2025-01-01T12:00:00Z",
    include_log_types=["projects/my-project-name/locations/us/instances/00000000-0000-0000-0000-000000000000/logTypes/GCP_CLOUDAUDIT"],
    ingestion_labels=[{
        "key": "key1",
        "value": "val1",
    }],
    namespaces=["my-namespace"])

    package main

import (
	"fmt"

	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/chronicle"
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/organizations"
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/storage"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		project, err := organizations.LookupProject(ctx, &organizations.LookupProjectArgs{
			ProjectId: pulumi.StringRef("my-project-name"),
		}, nil)
		if err != nil {
			return err
		}
		testBucket, err := storage.NewBucket(ctx, "test_bucket", &storage.BucketArgs{
			Name:         pulumi.String("chronicle-test-bucket-my-project-name-_95154"),
			Project:      pulumi.String("my-project-name"),
			Location:     pulumi.String("us"),
			ForceDestroy: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = chronicle.NewDataExport(ctx, "example", &chronicle.DataExportArgs{
			Location: pulumi.String("us"),
			Instance: pulumi.String("00000000-0000-0000-0000-000000000000"),
			GcsBucket: testBucket.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("projects/%v/buckets/%v", project.Number, name), nil
			}).(pulumi.StringOutput),
			StartTime: pulumi.String("2025-01-01T00:00:00Z"),
			EndTime:   pulumi.String("2025-01-01T12:00:00Z"),
			IncludeLogTypes: pulumi.StringArray{
				pulumi.String("projects/my-project-name/locations/us/instances/00000000-0000-0000-0000-000000000000/logTypes/GCP_CLOUDAUDIT"),
			},
			IngestionLabels: chronicle.DataExportIngestionLabelArray{
				&chronicle.DataExportIngestionLabelArgs{
					Key:   pulumi.String("key1"),
					Value: pulumi.String("val1"),
				},
			},
			Namespaces: pulumi.StringArray{
				pulumi.String("my-namespace"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var project = Gcp.Organizations.GetProject.Invoke(new()
    {
        ProjectId = "my-project-name",
    });

    var testBucket = new Gcp.Storage.Bucket("test_bucket", new()
    {
        Name = "chronicle-test-bucket-my-project-name-_95154",
        Project = "my-project-name",
        Location = "us",
        ForceDestroy = true,
    });

    var example = new Gcp.Chronicle.DataExport("example", new()
    {
        Location = "us",
        Instance = "00000000-0000-0000-0000-000000000000",
        GcsBucket = Output.Tuple(project, testBucket.Name).Apply(values =>
        {
            var project = values.Item1;
            var name = values.Item2;
            return $"projects/{project.Apply(getProjectResult => getProjectResult.Number)}/buckets/{name}";
        }),
        StartTime = "2025-01-01T00:00:00Z",
        EndTime = "2025-01-01T12:00:00Z",
        IncludeLogTypes = new[]
        {
            "projects/my-project-name/locations/us/instances/00000000-0000-0000-0000-000000000000/logTypes/GCP_CLOUDAUDIT",
        },
        IngestionLabels = new[]
        {
            new Gcp.Chronicle.Inputs.DataExportIngestionLabelArgs
            {
                Key = "key1",
                Value = "val1",
            },
        },
        Namespaces = new[]
        {
            "my-namespace",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetProjectArgs;
import com.pulumi.gcp.storage.Bucket;
import com.pulumi.gcp.storage.BucketArgs;
import com.pulumi.gcp.chronicle.DataExport;
import com.pulumi.gcp.chronicle.DataExportArgs;
import com.pulumi.gcp.chronicle.inputs.DataExportIngestionLabelArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var project = OrganizationsFunctions.getProject(GetProjectArgs.builder()
            .projectId("my-project-name")
            .build());

        var testBucket = new Bucket("testBucket", BucketArgs.builder()
            .name("chronicle-test-bucket-my-project-name-_95154")
            .project("my-project-name")
            .location("us")
            .forceDestroy(true)
            .build());

        var example = new DataExport("example", DataExportArgs.builder()
            .location("us")
            .instance("00000000-0000-0000-0000-000000000000")
            .gcsBucket(testBucket.name().applyValue(_name -> String.format("projects/%s/buckets/%s", project.number(),_name)))
            .startTime("2025-01-01T00:00:00Z")
            .endTime("2025-01-01T12:00:00Z")
            .includeLogTypes("projects/my-project-name/locations/us/instances/00000000-0000-0000-0000-000000000000/logTypes/GCP_CLOUDAUDIT")
            .ingestionLabels(DataExportIngestionLabelArgs.builder()
                .key("key1")
                .value("val1")
                .build())
            .namespaces("my-namespace")
            .build());

    }
}

    resources:
  testBucket:
    type: gcp:storage:Bucket
    name: test_bucket
    properties:
      name: chronicle-test-bucket-my-project-name-_95154
      project: my-project-name
      location: us
      forceDestroy: true
  example:
    type: gcp:chronicle:DataExport
    properties:
      location: us
      instance: 00000000-0000-0000-0000-000000000000
      gcsBucket: projects/${project.number}/buckets/${testBucket.name}
      startTime: 2025-01-01T00:00:00Z
      endTime: 2025-01-01T12:00:00Z
      includeLogTypes:
        - projects/my-project-name/locations/us/instances/00000000-0000-0000-0000-000000000000/logTypes/GCP_CLOUDAUDIT
      ingestionLabels:
        - key: key1
          value: val1
      namespaces:
        - my-namespace
variables:
  project:
    fn::invoke:
      function: gcp:organizations:getProject
      arguments:
        projectId: my-project-name

    pulumi {
  required_providers {
    gcp = {
      source = "pulumi/gcp"
    }
  }
}

data "gcp_organizations_getproject" "project" {
  project_id = "my-project-name"
}

resource "gcp_storage_bucket" "test_bucket" {
  name          = "chronicle-test-bucket-my-project-name-_95154"
  project       = "my-project-name"
  location      = "us"
  force_destroy = true
}
resource "gcp_chronicle_dataexport" "example" {
  location          = "us"
  instance          = "00000000-0000-0000-0000-000000000000"
  gcs_bucket        ="projects/${data.gcp_organizations_getproject.project.number}/buckets/${gcp_storage_bucket.test_bucket.name}"
  start_time        = "2025-01-01T00:00:00Z"
  end_time          = "2025-01-01T12:00:00Z"
  include_log_types = ["projects/my-project-name/locations/us/instances/00000000-0000-0000-0000-000000000000/logTypes/GCP_CLOUDAUDIT"]
  ingestion_labels {
    key   = "key1"
    value = "val1"
  }
  namespaces = ["my-namespace"]
}

    Create DataExport Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DataExport(name: string, args: DataExportArgs, opts?: CustomResourceOptions);
    @overload
def DataExport(resource_name: str,
               args: DataExportArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def DataExport(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               end_time: Optional[str] = None,
               gcs_bucket: Optional[str] = None,
               instance: Optional[str] = None,
               location: Optional[str] = None,
               start_time: Optional[str] = None,
               include_log_types: Optional[Sequence[str]] = None,
               ingestion_labels: Optional[Sequence[DataExportIngestionLabelArgs]] = None,
               namespaces: Optional[Sequence[str]] = None,
               project: Optional[str] = None)
    func NewDataExport(ctx *Context, name string, args DataExportArgs, opts ...ResourceOption) (*DataExport, error)
    public DataExport(string name, DataExportArgs args, CustomResourceOptions? opts = null)
    public DataExport(String name, DataExportArgs args)
public DataExport(String name, DataExportArgs args, CustomResourceOptions options)

    type: gcp:chronicle:DataExport
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "gcp_chronicle_data_export" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args DataExportArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DataExportArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DataExportArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DataExportArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DataExportArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var dataExportResource = new Gcp.Chronicle.DataExport("dataExportResource", new()
{
    EndTime = "string",
    GcsBucket = "string",
    Instance = "string",
    Location = "string",
    StartTime = "string",
    IncludeLogTypes = new[]
    {
        "string",
    },
    IngestionLabels = new[]
    {
        new Gcp.Chronicle.Inputs.DataExportIngestionLabelArgs
        {
            Key = "string",
            Value = "string",
        },
    },
    Namespaces = new[]
    {
        "string",
    },
    Project = "string",
});

    example, err := chronicle.NewDataExport(ctx, "dataExportResource", &chronicle.DataExportArgs{
	EndTime:   pulumi.String("string"),
	GcsBucket: pulumi.String("string"),
	Instance:  pulumi.String("string"),
	Location:  pulumi.String("string"),
	StartTime: pulumi.String("string"),
	IncludeLogTypes: pulumi.StringArray{
		pulumi.String("string"),
	},
	IngestionLabels: chronicle.DataExportIngestionLabelArray{
		&chronicle.DataExportIngestionLabelArgs{
			Key:   pulumi.String("string"),
			Value: pulumi.String("string"),
		},
	},
	Namespaces: pulumi.StringArray{
		pulumi.String("string"),
	},
	Project: pulumi.String("string"),
})

    resource "gcp_chronicle_data_export" "dataExportResource" {
  lifecycle {
    create_before_destroy = true
  }
  end_time          = "string"
  gcs_bucket        = "string"
  instance          = "string"
  location          = "string"
  start_time        = "string"
  include_log_types = ["string"]
  ingestion_labels {
    key   = "string"
    value = "string"
  }
  namespaces = ["string"]
  project    = "string"
}

    var dataExportResource = new DataExport("dataExportResource", DataExportArgs.builder()
    .endTime("string")
    .gcsBucket("string")
    .instance("string")
    .location("string")
    .startTime("string")
    .includeLogTypes("string")
    .ingestionLabels(DataExportIngestionLabelArgs.builder()
        .key("string")
        .value("string")
        .build())
    .namespaces("string")
    .project("string")
    .build());

    data_export_resource = gcp.chronicle.DataExport("dataExportResource",
    end_time="string",
    gcs_bucket="string",
    instance="string",
    location="string",
    start_time="string",
    include_log_types=["string"],
    ingestion_labels=[{
        "key": "string",
        "value": "string",
    }],
    namespaces=["string"],
    project="string")

    const dataExportResource = new gcp.chronicle.DataExport("dataExportResource", {
    endTime: "string",
    gcsBucket: "string",
    instance: "string",
    location: "string",
    startTime: "string",
    includeLogTypes: ["string"],
    ingestionLabels: [{
        key: "string",
        value: "string",
    }],
    namespaces: ["string"],
    project: "string",
});

    type: gcp:chronicle:DataExport
properties:
    endTime: string
    gcsBucket: string
    includeLogTypes:
        - string
    ingestionLabels:
        - key: string
          value: string
    instance: string
    location: string
    namespaces:
        - string
    project: string
    startTime: string

    DataExport Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DataExport resource accepts the following input properties:

    EndTime string
    Last, exclusive time from the range.
    GcsBucket string
    Link to the destination Cloud Storage bucket.
    Instance string
    The unique identifier for the Chronicle instance.
    Location string
    The location of the resource.
    StartTime string
    Start, inclusive time from the range.
    IncludeLogTypes List<string>
    The specific log types to include in the Data Export request.
    IngestionLabels List<DataExportIngestionLabel>
    The ingestion labels used to filter the export. Structure is documented below.
    Namespaces List<string>
    The namespaces used to filter the export.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    EndTime string
    Last, exclusive time from the range.
    GcsBucket string
    Link to the destination Cloud Storage bucket.
    Instance string
    The unique identifier for the Chronicle instance.
    Location string
    The location of the resource.
    StartTime string
    Start, inclusive time from the range.
    IncludeLogTypes []string
    The specific log types to include in the Data Export request.
    IngestionLabels []DataExportIngestionLabelArgs
    The ingestion labels used to filter the export. Structure is documented below.
    Namespaces []string
    The namespaces used to filter the export.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    end_time string
    Last, exclusive time from the range.
    gcs_bucket string
    Link to the destination Cloud Storage bucket.
    instance string
    The unique identifier for the Chronicle instance.
    location string
    The location of the resource.
    start_time string
    Start, inclusive time from the range.
    include_log_types list(string)
    The specific log types to include in the Data Export request.
    ingestion_labels list(object)
    The ingestion labels used to filter the export. Structure is documented below.
    namespaces list(string)
    The namespaces used to filter the export.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    endTime String
    Last, exclusive time from the range.
    gcsBucket String
    Link to the destination Cloud Storage bucket.
    instance String
    The unique identifier for the Chronicle instance.
    location String
    The location of the resource.
    startTime String
    Start, inclusive time from the range.
    includeLogTypes List<String>
    The specific log types to include in the Data Export request.
    ingestionLabels List<DataExportIngestionLabel>
    The ingestion labels used to filter the export. Structure is documented below.
    namespaces List<String>
    The namespaces used to filter the export.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    endTime string
    Last, exclusive time from the range.
    gcsBucket string
    Link to the destination Cloud Storage bucket.
    instance string
    The unique identifier for the Chronicle instance.
    location string
    The location of the resource.
    startTime string
    Start, inclusive time from the range.
    includeLogTypes string[]
    The specific log types to include in the Data Export request.
    ingestionLabels DataExportIngestionLabel[]
    The ingestion labels used to filter the export. Structure is documented below.
    namespaces string[]
    The namespaces used to filter the export.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    end_time str
    Last, exclusive time from the range.
    gcs_bucket str
    Link to the destination Cloud Storage bucket.
    instance str
    The unique identifier for the Chronicle instance.
    location str
    The location of the resource.
    start_time str
    Start, inclusive time from the range.
    include_log_types Sequence[str]
    The specific log types to include in the Data Export request.
    ingestion_labels Sequence[DataExportIngestionLabelArgs]
    The ingestion labels used to filter the export. Structure is documented below.
    namespaces Sequence[str]
    The namespaces used to filter the export.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    endTime String
    Last, exclusive time from the range.
    gcsBucket String
    Link to the destination Cloud Storage bucket.
    instance String
    The unique identifier for the Chronicle instance.
    location String
    The location of the resource.
    startTime String
    Start, inclusive time from the range.
    includeLogTypes List<String>
    The specific log types to include in the Data Export request.
    ingestionLabels List<Property Map>
    The ingestion labels used to filter the export. Structure is documented below.
    namespaces List<String>
    The namespaces used to filter the export.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DataExport resource produces the following output properties:

    CreateTime string
    Timestamp indicating when the DataExport resource was created.
    DataExportId string
    The unique identifier for the data export.
    DataExportStatuses List<DataExportDataExportStatus>
    Status of the current export. Structure is documented below.
    EstimatedVolume int
    The estimated export volume in bytes.
    ExportedVolume int
    Actual volume of data exported.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The resource name of the data export.
    UpdateTime string
    Timestamp indicating the last time the DataExport resource was updated.
    CreateTime string
    Timestamp indicating when the DataExport resource was created.
    DataExportId string
    The unique identifier for the data export.
    DataExportStatuses []DataExportDataExportStatus
    Status of the current export. Structure is documented below.
    EstimatedVolume int
    The estimated export volume in bytes.
    ExportedVolume int
    Actual volume of data exported.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The resource name of the data export.
    UpdateTime string
    Timestamp indicating the last time the DataExport resource was updated.
    create_time string
    Timestamp indicating when the DataExport resource was created.
    data_export_id string
    The unique identifier for the data export.
    data_export_statuses list(object)
    Status of the current export. Structure is documented below.
    estimated_volume number
    The estimated export volume in bytes.
    exported_volume number
    Actual volume of data exported.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The resource name of the data export.
    update_time string
    Timestamp indicating the last time the DataExport resource was updated.
    createTime String
    Timestamp indicating when the DataExport resource was created.
    dataExportId String
    The unique identifier for the data export.
    dataExportStatuses List<DataExportDataExportStatus>
    Status of the current export. Structure is documented below.
    estimatedVolume Integer
    The estimated export volume in bytes.
    exportedVolume Integer
    Actual volume of data exported.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The resource name of the data export.
    updateTime String
    Timestamp indicating the last time the DataExport resource was updated.
    createTime string
    Timestamp indicating when the DataExport resource was created.
    dataExportId string
    The unique identifier for the data export.
    dataExportStatuses DataExportDataExportStatus[]
    Status of the current export. Structure is documented below.
    estimatedVolume number
    The estimated export volume in bytes.
    exportedVolume number
    Actual volume of data exported.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The resource name of the data export.
    updateTime string
    Timestamp indicating the last time the DataExport resource was updated.
    create_time str
    Timestamp indicating when the DataExport resource was created.
    data_export_id str
    The unique identifier for the data export.
    data_export_statuses Sequence[DataExportDataExportStatus]
    Status of the current export. Structure is documented below.
    estimated_volume int
    The estimated export volume in bytes.
    exported_volume int
    Actual volume of data exported.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    The resource name of the data export.
    update_time str
    Timestamp indicating the last time the DataExport resource was updated.
    createTime String
    Timestamp indicating when the DataExport resource was created.
    dataExportId String
    The unique identifier for the data export.
    dataExportStatuses List<Property Map>
    Status of the current export. Structure is documented below.
    estimatedVolume Number
    The estimated export volume in bytes.
    exportedVolume Number
    Actual volume of data exported.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The resource name of the data export.
    updateTime String
    Timestamp indicating the last time the DataExport resource was updated.

    Look up Existing DataExport Resource

    Get an existing DataExport resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DataExportState, opts?: CustomResourceOptions): DataExport
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        create_time: Optional[str] = None,
        data_export_id: Optional[str] = None,
        data_export_statuses: Optional[Sequence[DataExportDataExportStatusArgs]] = None,
        end_time: Optional[str] = None,
        estimated_volume: Optional[int] = None,
        exported_volume: Optional[int] = None,
        gcs_bucket: Optional[str] = None,
        include_log_types: Optional[Sequence[str]] = None,
        ingestion_labels: Optional[Sequence[DataExportIngestionLabelArgs]] = None,
        instance: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        namespaces: Optional[Sequence[str]] = None,
        project: Optional[str] = None,
        start_time: Optional[str] = None,
        update_time: Optional[str] = None) -> DataExport
    func GetDataExport(ctx *Context, name string, id IDInput, state *DataExportState, opts ...ResourceOption) (*DataExport, error)
    public static DataExport Get(string name, Input<string> id, DataExportState? state, CustomResourceOptions? opts = null)
    public static DataExport get(String name, Output<String> id, DataExportState state, CustomResourceOptions options)
    resources:  _:    type: gcp:chronicle:DataExport    get:      id: ${id}
    import {
  to = gcp_chronicle_data_export.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CreateTime string
    Timestamp indicating when the DataExport resource was created.
    DataExportId string
    The unique identifier for the data export.
    DataExportStatuses List<DataExportDataExportStatus>
    Status of the current export. Structure is documented below.
    EndTime string
    Last, exclusive time from the range.
    EstimatedVolume int
    The estimated export volume in bytes.
    ExportedVolume int
    Actual volume of data exported.
    GcsBucket string
    Link to the destination Cloud Storage bucket.
    IncludeLogTypes List<string>
    The specific log types to include in the Data Export request.
    IngestionLabels List<DataExportIngestionLabel>
    The ingestion labels used to filter the export. Structure is documented below.
    Instance string
    The unique identifier for the Chronicle instance.
    Location string
    The location of the resource.
    Name string
    The resource name of the data export.
    Namespaces List<string>
    The namespaces used to filter the export.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    StartTime string
    Start, inclusive time from the range.
    UpdateTime string
    Timestamp indicating the last time the DataExport resource was updated.
    CreateTime string
    Timestamp indicating when the DataExport resource was created.
    DataExportId string
    The unique identifier for the data export.
    DataExportStatuses []DataExportDataExportStatusArgs
    Status of the current export. Structure is documented below.
    EndTime string
    Last, exclusive time from the range.
    EstimatedVolume int
    The estimated export volume in bytes.
    ExportedVolume int
    Actual volume of data exported.
    GcsBucket string
    Link to the destination Cloud Storage bucket.
    IncludeLogTypes []string
    The specific log types to include in the Data Export request.
    IngestionLabels []DataExportIngestionLabelArgs
    The ingestion labels used to filter the export. Structure is documented below.
    Instance string
    The unique identifier for the Chronicle instance.
    Location string
    The location of the resource.
    Name string
    The resource name of the data export.
    Namespaces []string
    The namespaces used to filter the export.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    StartTime string
    Start, inclusive time from the range.
    UpdateTime string
    Timestamp indicating the last time the DataExport resource was updated.
    create_time string
    Timestamp indicating when the DataExport resource was created.
    data_export_id string
    The unique identifier for the data export.
    data_export_statuses list(object)
    Status of the current export. Structure is documented below.
    end_time string
    Last, exclusive time from the range.
    estimated_volume number
    The estimated export volume in bytes.
    exported_volume number
    Actual volume of data exported.
    gcs_bucket string
    Link to the destination Cloud Storage bucket.
    include_log_types list(string)
    The specific log types to include in the Data Export request.
    ingestion_labels list(object)
    The ingestion labels used to filter the export. Structure is documented below.
    instance string
    The unique identifier for the Chronicle instance.
    location string
    The location of the resource.
    name string
    The resource name of the data export.
    namespaces list(string)
    The namespaces used to filter the export.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    start_time string
    Start, inclusive time from the range.
    update_time string
    Timestamp indicating the last time the DataExport resource was updated.
    createTime String
    Timestamp indicating when the DataExport resource was created.
    dataExportId String
    The unique identifier for the data export.
    dataExportStatuses List<DataExportDataExportStatus>
    Status of the current export. Structure is documented below.
    endTime String
    Last, exclusive time from the range.
    estimatedVolume Integer
    The estimated export volume in bytes.
    exportedVolume Integer
    Actual volume of data exported.
    gcsBucket String
    Link to the destination Cloud Storage bucket.
    includeLogTypes List<String>
    The specific log types to include in the Data Export request.
    ingestionLabels List<DataExportIngestionLabel>
    The ingestion labels used to filter the export. Structure is documented below.
    instance String
    The unique identifier for the Chronicle instance.
    location String
    The location of the resource.
    name String
    The resource name of the data export.
    namespaces List<String>
    The namespaces used to filter the export.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    startTime String
    Start, inclusive time from the range.
    updateTime String
    Timestamp indicating the last time the DataExport resource was updated.
    createTime string
    Timestamp indicating when the DataExport resource was created.
    dataExportId string
    The unique identifier for the data export.
    dataExportStatuses DataExportDataExportStatus[]
    Status of the current export. Structure is documented below.
    endTime string
    Last, exclusive time from the range.
    estimatedVolume number
    The estimated export volume in bytes.
    exportedVolume number
    Actual volume of data exported.
    gcsBucket string
    Link to the destination Cloud Storage bucket.
    includeLogTypes string[]
    The specific log types to include in the Data Export request.
    ingestionLabels DataExportIngestionLabel[]
    The ingestion labels used to filter the export. Structure is documented below.
    instance string
    The unique identifier for the Chronicle instance.
    location string
    The location of the resource.
    name string
    The resource name of the data export.
    namespaces string[]
    The namespaces used to filter the export.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    startTime string
    Start, inclusive time from the range.
    updateTime string
    Timestamp indicating the last time the DataExport resource was updated.
    create_time str
    Timestamp indicating when the DataExport resource was created.
    data_export_id str
    The unique identifier for the data export.
    data_export_statuses Sequence[DataExportDataExportStatusArgs]
    Status of the current export. Structure is documented below.
    end_time str
    Last, exclusive time from the range.
    estimated_volume int
    The estimated export volume in bytes.
    exported_volume int
    Actual volume of data exported.
    gcs_bucket str
    Link to the destination Cloud Storage bucket.
    include_log_types Sequence[str]
    The specific log types to include in the Data Export request.
    ingestion_labels Sequence[DataExportIngestionLabelArgs]
    The ingestion labels used to filter the export. Structure is documented below.
    instance str
    The unique identifier for the Chronicle instance.
    location str
    The location of the resource.
    name str
    The resource name of the data export.
    namespaces Sequence[str]
    The namespaces used to filter the export.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    start_time str
    Start, inclusive time from the range.
    update_time str
    Timestamp indicating the last time the DataExport resource was updated.
    createTime String
    Timestamp indicating when the DataExport resource was created.
    dataExportId String
    The unique identifier for the data export.
    dataExportStatuses List<Property Map>
    Status of the current export. Structure is documented below.
    endTime String
    Last, exclusive time from the range.
    estimatedVolume Number
    The estimated export volume in bytes.
    exportedVolume Number
    Actual volume of data exported.
    gcsBucket String
    Link to the destination Cloud Storage bucket.
    includeLogTypes List<String>
    The specific log types to include in the Data Export request.
    ingestionLabels List<Property Map>
    The ingestion labels used to filter the export. Structure is documented below.
    instance String
    The unique identifier for the Chronicle instance.
    location String
    The location of the resource.
    name String
    The resource name of the data export.
    namespaces List<String>
    The namespaces used to filter the export.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    startTime String
    Start, inclusive time from the range.
    updateTime String
    Timestamp indicating the last time the DataExport resource was updated.

    Supporting Types

    DataExportDataExportStatus, DataExportDataExportStatusArgs

    DataRbacFiltered bool
    (Output) Indicates whether the data export is filtered by RBAC.
    Error string
    (Output) The error message if the stage is FINISHED_FAILURE.
    ExportedGlobPatterns List<string>
    (Output) List of exported glob patterns.
    Stage string
    (Output) The stage/status of a given data export request.
    DataRbacFiltered bool
    (Output) Indicates whether the data export is filtered by RBAC.
    Error string
    (Output) The error message if the stage is FINISHED_FAILURE.
    ExportedGlobPatterns []string
    (Output) List of exported glob patterns.
    Stage string
    (Output) The stage/status of a given data export request.
    data_rbac_filtered bool
    (Output) Indicates whether the data export is filtered by RBAC.
    error string
    (Output) The error message if the stage is FINISHED_FAILURE.
    exported_glob_patterns list(string)
    (Output) List of exported glob patterns.
    stage string
    (Output) The stage/status of a given data export request.
    dataRbacFiltered Boolean
    (Output) Indicates whether the data export is filtered by RBAC.
    error String
    (Output) The error message if the stage is FINISHED_FAILURE.
    exportedGlobPatterns List<String>
    (Output) List of exported glob patterns.
    stage String
    (Output) The stage/status of a given data export request.
    dataRbacFiltered boolean
    (Output) Indicates whether the data export is filtered by RBAC.
    error string
    (Output) The error message if the stage is FINISHED_FAILURE.
    exportedGlobPatterns string[]
    (Output) List of exported glob patterns.
    stage string
    (Output) The stage/status of a given data export request.
    data_rbac_filtered bool
    (Output) Indicates whether the data export is filtered by RBAC.
    error str
    (Output) The error message if the stage is FINISHED_FAILURE.
    exported_glob_patterns Sequence[str]
    (Output) List of exported glob patterns.
    stage str
    (Output) The stage/status of a given data export request.
    dataRbacFiltered Boolean
    (Output) Indicates whether the data export is filtered by RBAC.
    error String
    (Output) The error message if the stage is FINISHED_FAILURE.
    exportedGlobPatterns List<String>
    (Output) List of exported glob patterns.
    stage String
    (Output) The stage/status of a given data export request.

    DataExportIngestionLabel, DataExportIngestionLabelArgs

    Key string
    The key.
    Value string
    The value.
    Key string
    The key.
    Value string
    The value.
    key string
    The key.
    value string
    The value.
    key String
    The key.
    value String
    The value.
    key string
    The key.
    value string
    The value.
    key str
    The key.
    value str
    The value.
    key String
    The key.
    value String
    The value.

    Import

    DataExport can be imported using any of these accepted formats:

    • projects/{{project}}/locations/{{location}}/instances/{{instance}}/dataExports/{{data_export_id}}
    • {{project}}/{{location}}/{{instance}}/{{data_export_id}}
    • {{location}}/{{instance}}/{{data_export_id}}

    When using the pulumi import command, DataExport can be imported using one of the formats above. For example:

    $ pulumi import gcp:chronicle/dataExport:DataExport default projects/{{project}}/locations/{{location}}/instances/{{instance}}/dataExports/{{data_export_id}}
$ pulumi import gcp:chronicle/dataExport:DataExport default {{project}}/{{location}}/{{instance}}/{{data_export_id}}
$ pulumi import gcp:chronicle/dataExport:DataExport default {{location}}/{{instance}}/{{data_export_id}}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Viewing docs for Google Cloud v9.33.0
    published on Wednesday, Aug 5, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-gcp

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial