Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Ibm Provider
  3. API Docs
  4. LogsRuleGroup
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

ibm.LogsRuleGroup

Explore with Pulumi AI

ibm logo
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

    Create, update, and delete logs_rule_groups with this resource.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";

const logsRuleGroupInstance = new ibm.LogsRuleGroup("logsRuleGroupInstance", {
    instanceId: ibm_resource_instance.logs_instance.guid,
    region: ibm_resource_instance.logs_instance.location,
    description: "example rule group decription",
    enabled: false,
    ruleMatchers: [{
        subsystemName: {
            value: "mysql",
        },
    }],
    ruleSubgroups: [{
        rules: [{
            name: "mysql-parse",
            sourceField: "text",
            parameters: {
                parseParameters: {
                    destinationField: "text",
                    rule: "(?P<timestamp>[^,]+),(?P<hostname>[^,]+),(?P<username>[^,]+),(?P<ip>[^,]+),(?P<connectionId>[0-9]+),(?P<queryId>[0-9]+),(?P<operation>[^,]+),(?P<database>[^,]+),'?(?P<object>.*)'?,(?P<returnCode>[0-9]+)",
                },
            },
            enabled: true,
            order: 1,
        }],
        enabled: true,
        order: 1,
    }],
    order: 4294967,
});

    import pulumi
import pulumi_ibm as ibm

logs_rule_group_instance = ibm.LogsRuleGroup("logsRuleGroupInstance",
    instance_id=ibm_resource_instance["logs_instance"]["guid"],
    region=ibm_resource_instance["logs_instance"]["location"],
    description="example rule group decription",
    enabled=False,
    rule_matchers=[{
        "subsystem_name": {
            "value": "mysql",
        },
    }],
    rule_subgroups=[{
        "rules": [{
            "name": "mysql-parse",
            "source_field": "text",
            "parameters": {
                "parse_parameters": {
                    "destination_field": "text",
                    "rule": "(?P<timestamp>[^,]+),(?P<hostname>[^,]+),(?P<username>[^,]+),(?P<ip>[^,]+),(?P<connectionId>[0-9]+),(?P<queryId>[0-9]+),(?P<operation>[^,]+),(?P<database>[^,]+),'?(?P<object>.*)'?,(?P<returnCode>[0-9]+)",
                },
            },
            "enabled": True,
            "order": 1,
        }],
        "enabled": True,
        "order": 1,
    }],
    order=4294967)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ibm.NewLogsRuleGroup(ctx, "logsRuleGroupInstance", &ibm.LogsRuleGroupArgs{
			InstanceId:  pulumi.Any(ibm_resource_instance.Logs_instance.Guid),
			Region:      pulumi.Any(ibm_resource_instance.Logs_instance.Location),
			Description: pulumi.String("example rule group decription"),
			Enabled:     pulumi.Bool(false),
			RuleMatchers: ibm.LogsRuleGroupRuleMatcherArray{
				&ibm.LogsRuleGroupRuleMatcherArgs{
					SubsystemName: &ibm.LogsRuleGroupRuleMatcherSubsystemNameArgs{
						Value: pulumi.String("mysql"),
					},
				},
			},
			RuleSubgroups: ibm.LogsRuleGroupRuleSubgroupArray{
				&ibm.LogsRuleGroupRuleSubgroupArgs{
					Rules: ibm.LogsRuleGroupRuleSubgroupRuleArray{
						&ibm.LogsRuleGroupRuleSubgroupRuleArgs{
							Name:        pulumi.String("mysql-parse"),
							SourceField: pulumi.String("text"),
							Parameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersArgs{
								ParseParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersParseParametersArgs{
									DestinationField: pulumi.String("text"),
									Rule:             pulumi.String("(?P<timestamp>[^,]+),(?P<hostname>[^,]+),(?P<username>[^,]+),(?P<ip>[^,]+),(?P<connectionId>[0-9]+),(?P<queryId>[0-9]+),(?P<operation>[^,]+),(?P<database>[^,]+),'?(?P<object>.*)'?,(?P<returnCode>[0-9]+)"),
								},
							},
							Enabled: pulumi.Bool(true),
							Order:   pulumi.Float64(1),
						},
					},
					Enabled: pulumi.Bool(true),
					Order:   pulumi.Float64(1),
				},
			},
			Order: pulumi.Float64(4294967),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;

return await Deployment.RunAsync(() => 
{
    var logsRuleGroupInstance = new Ibm.LogsRuleGroup("logsRuleGroupInstance", new()
    {
        InstanceId = ibm_resource_instance.Logs_instance.Guid,
        Region = ibm_resource_instance.Logs_instance.Location,
        Description = "example rule group decription",
        Enabled = false,
        RuleMatchers = new[]
        {
            new Ibm.Inputs.LogsRuleGroupRuleMatcherArgs
            {
                SubsystemName = new Ibm.Inputs.LogsRuleGroupRuleMatcherSubsystemNameArgs
                {
                    Value = "mysql",
                },
            },
        },
        RuleSubgroups = new[]
        {
            new Ibm.Inputs.LogsRuleGroupRuleSubgroupArgs
            {
                Rules = new[]
                {
                    new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleArgs
                    {
                        Name = "mysql-parse",
                        SourceField = "text",
                        Parameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersArgs
                        {
                            ParseParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersParseParametersArgs
                            {
                                DestinationField = "text",
                                Rule = "(?P<timestamp>[^,]+),(?P<hostname>[^,]+),(?P<username>[^,]+),(?P<ip>[^,]+),(?P<connectionId>[0-9]+),(?P<queryId>[0-9]+),(?P<operation>[^,]+),(?P<database>[^,]+),'?(?P<object>.*)'?,(?P<returnCode>[0-9]+)",
                            },
                        },
                        Enabled = true,
                        Order = 1,
                    },
                },
                Enabled = true,
                Order = 1,
            },
        },
        Order = 4294967,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.LogsRuleGroup;
import com.pulumi.ibm.LogsRuleGroupArgs;
import com.pulumi.ibm.inputs.LogsRuleGroupRuleMatcherArgs;
import com.pulumi.ibm.inputs.LogsRuleGroupRuleMatcherSubsystemNameArgs;
import com.pulumi.ibm.inputs.LogsRuleGroupRuleSubgroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var logsRuleGroupInstance = new LogsRuleGroup("logsRuleGroupInstance", LogsRuleGroupArgs.builder()
            .instanceId(ibm_resource_instance.logs_instance().guid())
            .region(ibm_resource_instance.logs_instance().location())
            .description("example rule group decription")
            .enabled(false)
            .ruleMatchers(LogsRuleGroupRuleMatcherArgs.builder()
                .subsystemName(LogsRuleGroupRuleMatcherSubsystemNameArgs.builder()
                    .value("mysql")
                    .build())
                .build())
            .ruleSubgroups(LogsRuleGroupRuleSubgroupArgs.builder()
                .rules(LogsRuleGroupRuleSubgroupRuleArgs.builder()
                    .name("mysql-parse")
                    .sourceField("text")
                    .parameters(LogsRuleGroupRuleSubgroupRuleParametersArgs.builder()
                        .parseParameters(LogsRuleGroupRuleSubgroupRuleParametersParseParametersArgs.builder()
                            .destinationField("text")
                            .rule("(?P<timestamp>[^,]+),(?P<hostname>[^,]+),(?P<username>[^,]+),(?P<ip>[^,]+),(?P<connectionId>[0-9]+),(?P<queryId>[0-9]+),(?P<operation>[^,]+),(?P<database>[^,]+),'?(?P<object>.*)'?,(?P<returnCode>[0-9]+)")
                            .build())
                        .build())
                    .enabled(true)
                    .order(1)
                    .build())
                .enabled(true)
                .order(1)
                .build())
            .order(4294967)
            .build());

    }
}

    resources:
  logsRuleGroupInstance:
    type: ibm:LogsRuleGroup
    properties:
      instanceId: ${ibm_resource_instance.logs_instance.guid}
      region: ${ibm_resource_instance.logs_instance.location}
      description: example rule group decription
      enabled: false
      ruleMatchers:
        - subsystemName:
            value: mysql
      ruleSubgroups:
        - rules:
            - name: mysql-parse
              sourceField: text
              parameters:
                parseParameters:
                  destinationField: text
                  rule: (?P<timestamp>[^,]+),(?P<hostname>[^,]+),(?P<username>[^,]+),(?P<ip>[^,]+),(?P<connectionId>[0-9]+),(?P<queryId>[0-9]+),(?P<operation>[^,]+),(?P<database>[^,]+),'?(?P<object>.*)'?,(?P<returnCode>[0-9]+)
              enabled: true
              order: 1
          enabled: true
          order: 1
      order: 4.294967e+06

    Create LogsRuleGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new LogsRuleGroup(name: string, args: LogsRuleGroupArgs, opts?: CustomResourceOptions);
    @overload
def LogsRuleGroup(resource_name: str,
                  args: LogsRuleGroupArgs,
                  opts: Optional[ResourceOptions] = None)

@overload
def LogsRuleGroup(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  instance_id: Optional[str] = None,
                  rule_subgroups: Optional[Sequence[LogsRuleGroupRuleSubgroupArgs]] = None,
                  description: Optional[str] = None,
                  enabled: Optional[bool] = None,
                  endpoint_type: Optional[str] = None,
                  logs_rule_group_id: Optional[str] = None,
                  name: Optional[str] = None,
                  order: Optional[float] = None,
                  region: Optional[str] = None,
                  rule_matchers: Optional[Sequence[LogsRuleGroupRuleMatcherArgs]] = None)
    func NewLogsRuleGroup(ctx *Context, name string, args LogsRuleGroupArgs, opts ...ResourceOption) (*LogsRuleGroup, error)
    public LogsRuleGroup(string name, LogsRuleGroupArgs args, CustomResourceOptions? opts = null)
    public LogsRuleGroup(String name, LogsRuleGroupArgs args)
public LogsRuleGroup(String name, LogsRuleGroupArgs args, CustomResourceOptions options)

    type: ibm:LogsRuleGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args LogsRuleGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args LogsRuleGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args LogsRuleGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args LogsRuleGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args LogsRuleGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var logsRuleGroupResource = new Ibm.LogsRuleGroup("logsRuleGroupResource", new()
{
    InstanceId = "string",
    RuleSubgroups = new[]
    {
        new Ibm.Inputs.LogsRuleGroupRuleSubgroupArgs
        {
            Order = 0,
            Rules = new[]
            {
                new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleArgs
                {
                    Enabled = false,
                    Name = "string",
                    Order = 0,
                    Parameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersArgs
                    {
                        AllowParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersAllowParametersArgs
                        {
                            KeepBlockedLogs = false,
                            Rule = "string",
                        },
                        BlockParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersBlockParametersArgs
                        {
                            KeepBlockedLogs = false,
                            Rule = "string",
                        },
                        ExtractParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersExtractParametersArgs
                        {
                            Rule = "string",
                        },
                        ExtractTimestampParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParametersArgs
                        {
                            Format = "string",
                            Standard = "string",
                        },
                        JsonExtractParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParametersArgs
                        {
                            DestinationField = "string",
                        },
                        JsonParseParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersJsonParseParametersArgs
                        {
                            DestinationField = "string",
                            OverrideDest = false,
                            DeleteSource = false,
                        },
                        JsonStringifyParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParametersArgs
                        {
                            DestinationField = "string",
                            DeleteSource = false,
                        },
                        ParseParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersParseParametersArgs
                        {
                            DestinationField = "string",
                            Rule = "string",
                        },
                        RemoveFieldsParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParametersArgs
                        {
                            Fields = new[]
                            {
                                "string",
                            },
                        },
                        ReplaceParameters = new Ibm.Inputs.LogsRuleGroupRuleSubgroupRuleParametersReplaceParametersArgs
                        {
                            DestinationField = "string",
                            ReplaceNewVal = "string",
                            Rule = "string",
                        },
                    },
                    SourceField = "string",
                    Description = "string",
                    Id = "string",
                },
            },
            Enabled = false,
            Id = "string",
        },
    },
    Description = "string",
    Enabled = false,
    EndpointType = "string",
    LogsRuleGroupId = "string",
    Name = "string",
    Order = 0,
    Region = "string",
    RuleMatchers = new[]
    {
        new Ibm.Inputs.LogsRuleGroupRuleMatcherArgs
        {
            ApplicationName = new Ibm.Inputs.LogsRuleGroupRuleMatcherApplicationNameArgs
            {
                Value = "string",
            },
            Severity = new Ibm.Inputs.LogsRuleGroupRuleMatcherSeverityArgs
            {
                Value = "string",
            },
            SubsystemName = new Ibm.Inputs.LogsRuleGroupRuleMatcherSubsystemNameArgs
            {
                Value = "string",
            },
        },
    },
});

    example, err := ibm.NewLogsRuleGroup(ctx, "logsRuleGroupResource", &ibm.LogsRuleGroupArgs{
	InstanceId: pulumi.String("string"),
	RuleSubgroups: ibm.LogsRuleGroupRuleSubgroupArray{
		&ibm.LogsRuleGroupRuleSubgroupArgs{
			Order: pulumi.Float64(0),
			Rules: ibm.LogsRuleGroupRuleSubgroupRuleArray{
				&ibm.LogsRuleGroupRuleSubgroupRuleArgs{
					Enabled: pulumi.Bool(false),
					Name:    pulumi.String("string"),
					Order:   pulumi.Float64(0),
					Parameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersArgs{
						AllowParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersAllowParametersArgs{
							KeepBlockedLogs: pulumi.Bool(false),
							Rule:            pulumi.String("string"),
						},
						BlockParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersBlockParametersArgs{
							KeepBlockedLogs: pulumi.Bool(false),
							Rule:            pulumi.String("string"),
						},
						ExtractParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersExtractParametersArgs{
							Rule: pulumi.String("string"),
						},
						ExtractTimestampParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParametersArgs{
							Format:   pulumi.String("string"),
							Standard: pulumi.String("string"),
						},
						JsonExtractParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParametersArgs{
							DestinationField: pulumi.String("string"),
						},
						JsonParseParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersJsonParseParametersArgs{
							DestinationField: pulumi.String("string"),
							OverrideDest:     pulumi.Bool(false),
							DeleteSource:     pulumi.Bool(false),
						},
						JsonStringifyParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParametersArgs{
							DestinationField: pulumi.String("string"),
							DeleteSource:     pulumi.Bool(false),
						},
						ParseParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersParseParametersArgs{
							DestinationField: pulumi.String("string"),
							Rule:             pulumi.String("string"),
						},
						RemoveFieldsParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParametersArgs{
							Fields: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
						ReplaceParameters: &ibm.LogsRuleGroupRuleSubgroupRuleParametersReplaceParametersArgs{
							DestinationField: pulumi.String("string"),
							ReplaceNewVal:    pulumi.String("string"),
							Rule:             pulumi.String("string"),
						},
					},
					SourceField: pulumi.String("string"),
					Description: pulumi.String("string"),
					Id:          pulumi.String("string"),
				},
			},
			Enabled: pulumi.Bool(false),
			Id:      pulumi.String("string"),
		},
	},
	Description:     pulumi.String("string"),
	Enabled:         pulumi.Bool(false),
	EndpointType:    pulumi.String("string"),
	LogsRuleGroupId: pulumi.String("string"),
	Name:            pulumi.String("string"),
	Order:           pulumi.Float64(0),
	Region:          pulumi.String("string"),
	RuleMatchers: ibm.LogsRuleGroupRuleMatcherArray{
		&ibm.LogsRuleGroupRuleMatcherArgs{
			ApplicationName: &ibm.LogsRuleGroupRuleMatcherApplicationNameArgs{
				Value: pulumi.String("string"),
			},
			Severity: &ibm.LogsRuleGroupRuleMatcherSeverityArgs{
				Value: pulumi.String("string"),
			},
			SubsystemName: &ibm.LogsRuleGroupRuleMatcherSubsystemNameArgs{
				Value: pulumi.String("string"),
			},
		},
	},
})

    var logsRuleGroupResource = new LogsRuleGroup("logsRuleGroupResource", LogsRuleGroupArgs.builder()
    .instanceId("string")
    .ruleSubgroups(LogsRuleGroupRuleSubgroupArgs.builder()
        .order(0)
        .rules(LogsRuleGroupRuleSubgroupRuleArgs.builder()
            .enabled(false)
            .name("string")
            .order(0)
            .parameters(LogsRuleGroupRuleSubgroupRuleParametersArgs.builder()
                .allowParameters(LogsRuleGroupRuleSubgroupRuleParametersAllowParametersArgs.builder()
                    .keepBlockedLogs(false)
                    .rule("string")
                    .build())
                .blockParameters(LogsRuleGroupRuleSubgroupRuleParametersBlockParametersArgs.builder()
                    .keepBlockedLogs(false)
                    .rule("string")
                    .build())
                .extractParameters(LogsRuleGroupRuleSubgroupRuleParametersExtractParametersArgs.builder()
                    .rule("string")
                    .build())
                .extractTimestampParameters(LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParametersArgs.builder()
                    .format("string")
                    .standard("string")
                    .build())
                .jsonExtractParameters(LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParametersArgs.builder()
                    .destinationField("string")
                    .build())
                .jsonParseParameters(LogsRuleGroupRuleSubgroupRuleParametersJsonParseParametersArgs.builder()
                    .destinationField("string")
                    .overrideDest(false)
                    .deleteSource(false)
                    .build())
                .jsonStringifyParameters(LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParametersArgs.builder()
                    .destinationField("string")
                    .deleteSource(false)
                    .build())
                .parseParameters(LogsRuleGroupRuleSubgroupRuleParametersParseParametersArgs.builder()
                    .destinationField("string")
                    .rule("string")
                    .build())
                .removeFieldsParameters(LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParametersArgs.builder()
                    .fields("string")
                    .build())
                .replaceParameters(LogsRuleGroupRuleSubgroupRuleParametersReplaceParametersArgs.builder()
                    .destinationField("string")
                    .replaceNewVal("string")
                    .rule("string")
                    .build())
                .build())
            .sourceField("string")
            .description("string")
            .id("string")
            .build())
        .enabled(false)
        .id("string")
        .build())
    .description("string")
    .enabled(false)
    .endpointType("string")
    .logsRuleGroupId("string")
    .name("string")
    .order(0)
    .region("string")
    .ruleMatchers(LogsRuleGroupRuleMatcherArgs.builder()
        .applicationName(LogsRuleGroupRuleMatcherApplicationNameArgs.builder()
            .value("string")
            .build())
        .severity(LogsRuleGroupRuleMatcherSeverityArgs.builder()
            .value("string")
            .build())
        .subsystemName(LogsRuleGroupRuleMatcherSubsystemNameArgs.builder()
            .value("string")
            .build())
        .build())
    .build());

    logs_rule_group_resource = ibm.LogsRuleGroup("logsRuleGroupResource",
    instance_id="string",
    rule_subgroups=[{
        "order": 0,
        "rules": [{
            "enabled": False,
            "name": "string",
            "order": 0,
            "parameters": {
                "allow_parameters": {
                    "keep_blocked_logs": False,
                    "rule": "string",
                },
                "block_parameters": {
                    "keep_blocked_logs": False,
                    "rule": "string",
                },
                "extract_parameters": {
                    "rule": "string",
                },
                "extract_timestamp_parameters": {
                    "format": "string",
                    "standard": "string",
                },
                "json_extract_parameters": {
                    "destination_field": "string",
                },
                "json_parse_parameters": {
                    "destination_field": "string",
                    "override_dest": False,
                    "delete_source": False,
                },
                "json_stringify_parameters": {
                    "destination_field": "string",
                    "delete_source": False,
                },
                "parse_parameters": {
                    "destination_field": "string",
                    "rule": "string",
                },
                "remove_fields_parameters": {
                    "fields": ["string"],
                },
                "replace_parameters": {
                    "destination_field": "string",
                    "replace_new_val": "string",
                    "rule": "string",
                },
            },
            "source_field": "string",
            "description": "string",
            "id": "string",
        }],
        "enabled": False,
        "id": "string",
    }],
    description="string",
    enabled=False,
    endpoint_type="string",
    logs_rule_group_id="string",
    name="string",
    order=0,
    region="string",
    rule_matchers=[{
        "application_name": {
            "value": "string",
        },
        "severity": {
            "value": "string",
        },
        "subsystem_name": {
            "value": "string",
        },
    }])

    const logsRuleGroupResource = new ibm.LogsRuleGroup("logsRuleGroupResource", {
    instanceId: "string",
    ruleSubgroups: [{
        order: 0,
        rules: [{
            enabled: false,
            name: "string",
            order: 0,
            parameters: {
                allowParameters: {
                    keepBlockedLogs: false,
                    rule: "string",
                },
                blockParameters: {
                    keepBlockedLogs: false,
                    rule: "string",
                },
                extractParameters: {
                    rule: "string",
                },
                extractTimestampParameters: {
                    format: "string",
                    standard: "string",
                },
                jsonExtractParameters: {
                    destinationField: "string",
                },
                jsonParseParameters: {
                    destinationField: "string",
                    overrideDest: false,
                    deleteSource: false,
                },
                jsonStringifyParameters: {
                    destinationField: "string",
                    deleteSource: false,
                },
                parseParameters: {
                    destinationField: "string",
                    rule: "string",
                },
                removeFieldsParameters: {
                    fields: ["string"],
                },
                replaceParameters: {
                    destinationField: "string",
                    replaceNewVal: "string",
                    rule: "string",
                },
            },
            sourceField: "string",
            description: "string",
            id: "string",
        }],
        enabled: false,
        id: "string",
    }],
    description: "string",
    enabled: false,
    endpointType: "string",
    logsRuleGroupId: "string",
    name: "string",
    order: 0,
    region: "string",
    ruleMatchers: [{
        applicationName: {
            value: "string",
        },
        severity: {
            value: "string",
        },
        subsystemName: {
            value: "string",
        },
    }],
});

    type: ibm:LogsRuleGroup
properties:
    description: string
    enabled: false
    endpointType: string
    instanceId: string
    logsRuleGroupId: string
    name: string
    order: 0
    region: string
    ruleMatchers:
        - applicationName:
            value: string
          severity:
            value: string
          subsystemName:
            value: string
    ruleSubgroups:
        - enabled: false
          id: string
          order: 0
          rules:
            - description: string
              enabled: false
              id: string
              name: string
              order: 0
              parameters:
                allowParameters:
                    keepBlockedLogs: false
                    rule: string
                blockParameters:
                    keepBlockedLogs: false
                    rule: string
                extractParameters:
                    rule: string
                extractTimestampParameters:
                    format: string
                    standard: string
                jsonExtractParameters:
                    destinationField: string
                jsonParseParameters:
                    deleteSource: false
                    destinationField: string
                    overrideDest: false
                jsonStringifyParameters:
                    deleteSource: false
                    destinationField: string
                parseParameters:
                    destinationField: string
                    rule: string
                removeFieldsParameters:
                    fields:
                        - string
                replaceParameters:
                    destinationField: string
                    replaceNewVal: string
                    rule: string
              sourceField: string

    LogsRuleGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The LogsRuleGroup resource accepts the following input properties:

    InstanceId string
    Cloud Logs Instance GUID.
    RuleSubgroups List<LogsRuleGroupRuleSubgroup>
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    Description string
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Enabled bool
    Whether or not the rule is enabled.
    EndpointType string
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    LogsRuleGroupId string
    The unique identifier of the logs_rule_group resource.
    Name string
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Order double
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    Region string
    Cloud Logs Instance Region.
    RuleMatchers List<LogsRuleGroupRuleMatcher>
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    InstanceId string
    Cloud Logs Instance GUID.
    RuleSubgroups []LogsRuleGroupRuleSubgroupArgs
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    Description string
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Enabled bool
    Whether or not the rule is enabled.
    EndpointType string
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    LogsRuleGroupId string
    The unique identifier of the logs_rule_group resource.
    Name string
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Order float64
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    Region string
    Cloud Logs Instance Region.
    RuleMatchers []LogsRuleGroupRuleMatcherArgs
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    instanceId String
    Cloud Logs Instance GUID.
    ruleSubgroups List<LogsRuleGroupRuleSubgroup>
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    description String
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    enabled Boolean
    Whether or not the rule is enabled.
    endpointType String
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    logsRuleGroupId String
    The unique identifier of the logs_rule_group resource.
    name String
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order Double
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    region String
    Cloud Logs Instance Region.
    ruleMatchers List<LogsRuleGroupRuleMatcher>
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    instanceId string
    Cloud Logs Instance GUID.
    ruleSubgroups LogsRuleGroupRuleSubgroup[]
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    description string
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    enabled boolean
    Whether or not the rule is enabled.
    endpointType string
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    logsRuleGroupId string
    The unique identifier of the logs_rule_group resource.
    name string
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order number
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    region string
    Cloud Logs Instance Region.
    ruleMatchers LogsRuleGroupRuleMatcher[]
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    instance_id str
    Cloud Logs Instance GUID.
    rule_subgroups Sequence[LogsRuleGroupRuleSubgroupArgs]
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    description str
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    enabled bool
    Whether or not the rule is enabled.
    endpoint_type str
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    logs_rule_group_id str
    The unique identifier of the logs_rule_group resource.
    name str
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order float
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    region str
    Cloud Logs Instance Region.
    rule_matchers Sequence[LogsRuleGroupRuleMatcherArgs]
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    instanceId String
    Cloud Logs Instance GUID.
    ruleSubgroups List<Property Map>
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    description String
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    enabled Boolean
    Whether or not the rule is enabled.
    endpointType String
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    logsRuleGroupId String
    The unique identifier of the logs_rule_group resource.
    name String
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order Number
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    region String
    Cloud Logs Instance Region.
    ruleMatchers List<Property Map>
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:

    Outputs

    All input properties are implicitly available as output properties. Additionally, the LogsRuleGroup resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    RuleGroupId string
    The unique identifier of the logs_rule_group.
    Id string
    The provider-assigned unique ID for this managed resource.
    RuleGroupId string
    The unique identifier of the logs_rule_group.
    id String
    The provider-assigned unique ID for this managed resource.
    ruleGroupId String
    The unique identifier of the logs_rule_group.
    id string
    The provider-assigned unique ID for this managed resource.
    ruleGroupId string
    The unique identifier of the logs_rule_group.
    id str
    The provider-assigned unique ID for this managed resource.
    rule_group_id str
    The unique identifier of the logs_rule_group.
    id String
    The provider-assigned unique ID for this managed resource.
    ruleGroupId String
    The unique identifier of the logs_rule_group.

    Look up Existing LogsRuleGroup Resource

    Get an existing LogsRuleGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: LogsRuleGroupState, opts?: CustomResourceOptions): LogsRuleGroup
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        endpoint_type: Optional[str] = None,
        instance_id: Optional[str] = None,
        logs_rule_group_id: Optional[str] = None,
        name: Optional[str] = None,
        order: Optional[float] = None,
        region: Optional[str] = None,
        rule_group_id: Optional[str] = None,
        rule_matchers: Optional[Sequence[LogsRuleGroupRuleMatcherArgs]] = None,
        rule_subgroups: Optional[Sequence[LogsRuleGroupRuleSubgroupArgs]] = None) -> LogsRuleGroup
    func GetLogsRuleGroup(ctx *Context, name string, id IDInput, state *LogsRuleGroupState, opts ...ResourceOption) (*LogsRuleGroup, error)
    public static LogsRuleGroup Get(string name, Input<string> id, LogsRuleGroupState? state, CustomResourceOptions? opts = null)
    public static LogsRuleGroup get(String name, Output<String> id, LogsRuleGroupState state, CustomResourceOptions options)
    resources:  _:    type: ibm:LogsRuleGroup    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Description string
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Enabled bool
    Whether or not the rule is enabled.
    EndpointType string
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    InstanceId string
    Cloud Logs Instance GUID.
    LogsRuleGroupId string
    The unique identifier of the logs_rule_group resource.
    Name string
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Order double
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    Region string
    Cloud Logs Instance Region.
    RuleGroupId string
    The unique identifier of the logs_rule_group.
    RuleMatchers List<LogsRuleGroupRuleMatcher>
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    RuleSubgroups List<LogsRuleGroupRuleSubgroup>
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    Description string
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Enabled bool
    Whether or not the rule is enabled.
    EndpointType string
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    InstanceId string
    Cloud Logs Instance GUID.
    LogsRuleGroupId string
    The unique identifier of the logs_rule_group resource.
    Name string
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Order float64
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    Region string
    Cloud Logs Instance Region.
    RuleGroupId string
    The unique identifier of the logs_rule_group.
    RuleMatchers []LogsRuleGroupRuleMatcherArgs
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    RuleSubgroups []LogsRuleGroupRuleSubgroupArgs
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    description String
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    enabled Boolean
    Whether or not the rule is enabled.
    endpointType String
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    instanceId String
    Cloud Logs Instance GUID.
    logsRuleGroupId String
    The unique identifier of the logs_rule_group resource.
    name String
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order Double
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    region String
    Cloud Logs Instance Region.
    ruleGroupId String
    The unique identifier of the logs_rule_group.
    ruleMatchers List<LogsRuleGroupRuleMatcher>
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    ruleSubgroups List<LogsRuleGroupRuleSubgroup>
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    description string
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    enabled boolean
    Whether or not the rule is enabled.
    endpointType string
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    instanceId string
    Cloud Logs Instance GUID.
    logsRuleGroupId string
    The unique identifier of the logs_rule_group resource.
    name string
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order number
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    region string
    Cloud Logs Instance Region.
    ruleGroupId string
    The unique identifier of the logs_rule_group.
    ruleMatchers LogsRuleGroupRuleMatcher[]
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    ruleSubgroups LogsRuleGroupRuleSubgroup[]
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    description str
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    enabled bool
    Whether or not the rule is enabled.
    endpoint_type str
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    instance_id str
    Cloud Logs Instance GUID.
    logs_rule_group_id str
    The unique identifier of the logs_rule_group resource.
    name str
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order float
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    region str
    Cloud Logs Instance Region.
    rule_group_id str
    The unique identifier of the logs_rule_group.
    rule_matchers Sequence[LogsRuleGroupRuleMatcherArgs]
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    rule_subgroups Sequence[LogsRuleGroupRuleSubgroupArgs]
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:
    description String
    A description for the rule group, should express what is the rule group purpose.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    enabled Boolean
    Whether or not the rule is enabled.
    endpointType String
    Cloud Logs Instance Endpoint type. Allowed values public and private.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    instanceId String
    Cloud Logs Instance GUID.
    logsRuleGroupId String
    The unique identifier of the logs_rule_group resource.
    name String
    The name of the rule group.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order Number
    // The order in which the rule group will be evaluated. The lower the order, the more priority the group will have. Not providing the order will by default create a group with the last order.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    region String
    Cloud Logs Instance Region.
    ruleGroupId String
    The unique identifier of the logs_rule_group.
    ruleMatchers List<Property Map>
    // Optional rule matchers which if matched will make the rule go through the rule group.

    • Constraints: The maximum length is 4096 items. The minimum length is 0 items. Nested schema for rule_matchers:
    ruleSubgroups List<Property Map>
    Rule subgroups. Will try to execute the first rule subgroup, and if not matched will try to match the next one in order.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rule_subgroups:

    Supporting Types

    LogsRuleGroupRuleMatcher, LogsRuleGroupRuleMatcherArgs

    ApplicationName LogsRuleGroupRuleMatcherApplicationName
    ApplicationName constraint. Nested schema for application_name:
    Severity LogsRuleGroupRuleMatcherSeverity
    Severity constraint. Nested schema for severity:
    SubsystemName LogsRuleGroupRuleMatcherSubsystemName
    SubsystemName constraint. Nested schema for subsystem_name:
    ApplicationName LogsRuleGroupRuleMatcherApplicationName
    ApplicationName constraint. Nested schema for application_name:
    Severity LogsRuleGroupRuleMatcherSeverity
    Severity constraint. Nested schema for severity:
    SubsystemName LogsRuleGroupRuleMatcherSubsystemName
    SubsystemName constraint. Nested schema for subsystem_name:
    applicationName LogsRuleGroupRuleMatcherApplicationName
    ApplicationName constraint. Nested schema for application_name:
    severity LogsRuleGroupRuleMatcherSeverity
    Severity constraint. Nested schema for severity:
    subsystemName LogsRuleGroupRuleMatcherSubsystemName
    SubsystemName constraint. Nested schema for subsystem_name:
    applicationName LogsRuleGroupRuleMatcherApplicationName
    ApplicationName constraint. Nested schema for application_name:
    severity LogsRuleGroupRuleMatcherSeverity
    Severity constraint. Nested schema for severity:
    subsystemName LogsRuleGroupRuleMatcherSubsystemName
    SubsystemName constraint. Nested schema for subsystem_name:
    application_name LogsRuleGroupRuleMatcherApplicationName
    ApplicationName constraint. Nested schema for application_name:
    severity LogsRuleGroupRuleMatcherSeverity
    Severity constraint. Nested schema for severity:
    subsystem_name LogsRuleGroupRuleMatcherSubsystemName
    SubsystemName constraint. Nested schema for subsystem_name:
    applicationName Property Map
    ApplicationName constraint. Nested schema for application_name:
    severity Property Map
    Severity constraint. Nested schema for severity:
    subsystemName Property Map
    SubsystemName constraint. Nested schema for subsystem_name:

    LogsRuleGroupRuleMatcherApplicationName, LogsRuleGroupRuleMatcherApplicationNameArgs

    Value string
    Only logs with this ApplicationName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Value string
    Only logs with this ApplicationName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    value String
    Only logs with this ApplicationName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    value string
    Only logs with this ApplicationName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    value str
    Only logs with this ApplicationName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    value String
    Only logs with this ApplicationName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.

    LogsRuleGroupRuleMatcherSeverity, LogsRuleGroupRuleMatcherSeverityArgs

    Value string
    Only logs with this severity value will match.

    • Constraints: Allowable values are: debug_or_unspecified, verbose, info, warning, error, critical.
    Value string
    Only logs with this severity value will match.

    • Constraints: Allowable values are: debug_or_unspecified, verbose, info, warning, error, critical.
    value String
    Only logs with this severity value will match.

    • Constraints: Allowable values are: debug_or_unspecified, verbose, info, warning, error, critical.
    value string
    Only logs with this severity value will match.

    • Constraints: Allowable values are: debug_or_unspecified, verbose, info, warning, error, critical.
    value str
    Only logs with this severity value will match.

    • Constraints: Allowable values are: debug_or_unspecified, verbose, info, warning, error, critical.
    value String
    Only logs with this severity value will match.

    • Constraints: Allowable values are: debug_or_unspecified, verbose, info, warning, error, critical.

    LogsRuleGroupRuleMatcherSubsystemName, LogsRuleGroupRuleMatcherSubsystemNameArgs

    Value string
    Only logs with this SubsystemName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Value string
    Only logs with this SubsystemName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    value String
    Only logs with this SubsystemName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    value string
    Only logs with this SubsystemName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    value str
    Only logs with this SubsystemName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    value String
    Only logs with this SubsystemName value will match.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.

    LogsRuleGroupRuleSubgroup, LogsRuleGroupRuleSubgroupArgs

    Order double
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    Rules List<LogsRuleGroupRuleSubgroupRule>
    Rules to run on the log.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rules:
    Enabled bool
    Whether or not the rule subgroup is enabled.
    Id string
    The ID of the rule subgroup.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    Order float64
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    Rules []LogsRuleGroupRuleSubgroupRule
    Rules to run on the log.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rules:
    Enabled bool
    Whether or not the rule subgroup is enabled.
    Id string
    The ID of the rule subgroup.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    order Double
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    rules List<LogsRuleGroupRuleSubgroupRule>
    Rules to run on the log.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rules:
    enabled Boolean
    Whether or not the rule subgroup is enabled.
    id String
    The ID of the rule subgroup.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    order number
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    rules LogsRuleGroupRuleSubgroupRule[]
    Rules to run on the log.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rules:
    enabled boolean
    Whether or not the rule subgroup is enabled.
    id string
    The ID of the rule subgroup.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    order float
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    rules Sequence[LogsRuleGroupRuleSubgroupRule]
    Rules to run on the log.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rules:
    enabled bool
    Whether or not the rule subgroup is enabled.
    id str
    The ID of the rule subgroup.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    order Number
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    rules List<Property Map>
    Rules to run on the log.

    • Constraints: The maximum length is 4096 items. The minimum length is 1 item. Nested schema for rules:
    enabled Boolean
    Whether or not the rule subgroup is enabled.
    id String
    The ID of the rule subgroup.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.

    LogsRuleGroupRuleSubgroupRule, LogsRuleGroupRuleSubgroupRuleArgs

    Enabled bool
    Whether or not to execute the rule.
    Name string
    Name of the rule.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Order double
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    Parameters LogsRuleGroupRuleSubgroupRuleParameters
    Parameters for a rule which specifies how it should run. Nested schema for parameters:
    SourceField string
    A field on which value to execute the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Description string
    Description of the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^[A-Za-z0-9_\\-\\s]+$/.
    Id string
    Unique identifier of the rule.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    Enabled bool
    Whether or not to execute the rule.
    Name string
    Name of the rule.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Order float64
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    Parameters LogsRuleGroupRuleSubgroupRuleParameters
    Parameters for a rule which specifies how it should run. Nested schema for parameters:
    SourceField string
    A field on which value to execute the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Description string
    Description of the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^[A-Za-z0-9_\\-\\s]+$/.
    Id string
    Unique identifier of the rule.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    enabled Boolean
    Whether or not to execute the rule.
    name String
    Name of the rule.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order Double
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    parameters LogsRuleGroupRuleSubgroupRuleParameters
    Parameters for a rule which specifies how it should run. Nested schema for parameters:
    sourceField String
    A field on which value to execute the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    description String
    Description of the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^[A-Za-z0-9_\\-\\s]+$/.
    id String
    Unique identifier of the rule.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    enabled boolean
    Whether or not to execute the rule.
    name string
    Name of the rule.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order number
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    parameters LogsRuleGroupRuleSubgroupRuleParameters
    Parameters for a rule which specifies how it should run. Nested schema for parameters:
    sourceField string
    A field on which value to execute the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    description string
    Description of the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^[A-Za-z0-9_\\-\\s]+$/.
    id string
    Unique identifier of the rule.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    enabled bool
    Whether or not to execute the rule.
    name str
    Name of the rule.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order float
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    parameters LogsRuleGroupRuleSubgroupRuleParameters
    Parameters for a rule which specifies how it should run. Nested schema for parameters:
    source_field str
    A field on which value to execute the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    description str
    Description of the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^[A-Za-z0-9_\\-\\s]+$/.
    id str
    Unique identifier of the rule.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.
    enabled Boolean
    Whether or not to execute the rule.
    name String
    Name of the rule.

    • Constraints: The maximum length is 255 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    order Number
    The ordering of the rule subgroup. Lower order will run first. 0 is considered as no value.

    • Constraints: The maximum value is 4294967295. The minimum value is 0.
    parameters Property Map
    Parameters for a rule which specifies how it should run. Nested schema for parameters:
    sourceField String
    A field on which value to execute the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    description String
    Description of the rule.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^[A-Za-z0-9_\\-\\s]+$/.
    id String
    Unique identifier of the rule.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.

    LogsRuleGroupRuleSubgroupRuleParameters, LogsRuleGroupRuleSubgroupRuleParametersArgs

    AllowParameters LogsRuleGroupRuleSubgroupRuleParametersAllowParameters
    Parameters for allow rule. Nested schema for allow_parameters:
    BlockParameters LogsRuleGroupRuleSubgroupRuleParametersBlockParameters
    Parameters for block rule. Nested schema for block_parameters:
    ExtractParameters LogsRuleGroupRuleSubgroupRuleParametersExtractParameters
    Parameters for text extraction rule. Nested schema for extract_parameters:
    ExtractTimestampParameters LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParameters
    Parameters for extract timestamp rule. Nested schema for extract_timestamp_parameters:
    JsonExtractParameters LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParameters
    Parameters for json extract rule. Nested schema for json_extract_parameters:
    JsonParseParameters LogsRuleGroupRuleSubgroupRuleParametersJsonParseParameters
    Parameters for json parse rule. Nested schema for json_parse_parameters:
    JsonStringifyParameters LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParameters
    Parameters for json stringify rule. Nested schema for json_stringify_parameters:
    ParseParameters LogsRuleGroupRuleSubgroupRuleParametersParseParameters
    Parameters for parse rule. Nested schema for parse_parameters:
    RemoveFieldsParameters LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParameters
    Parameters for remove fields rule. Nested schema for remove_fields_parameters:
    ReplaceParameters LogsRuleGroupRuleSubgroupRuleParametersReplaceParameters
    Parameters for replace rule. Nested schema for replace_parameters:
    AllowParameters LogsRuleGroupRuleSubgroupRuleParametersAllowParameters
    Parameters for allow rule. Nested schema for allow_parameters:
    BlockParameters LogsRuleGroupRuleSubgroupRuleParametersBlockParameters
    Parameters for block rule. Nested schema for block_parameters:
    ExtractParameters LogsRuleGroupRuleSubgroupRuleParametersExtractParameters
    Parameters for text extraction rule. Nested schema for extract_parameters:
    ExtractTimestampParameters LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParameters
    Parameters for extract timestamp rule. Nested schema for extract_timestamp_parameters:
    JsonExtractParameters LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParameters
    Parameters for json extract rule. Nested schema for json_extract_parameters:
    JsonParseParameters LogsRuleGroupRuleSubgroupRuleParametersJsonParseParameters
    Parameters for json parse rule. Nested schema for json_parse_parameters:
    JsonStringifyParameters LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParameters
    Parameters for json stringify rule. Nested schema for json_stringify_parameters:
    ParseParameters LogsRuleGroupRuleSubgroupRuleParametersParseParameters
    Parameters for parse rule. Nested schema for parse_parameters:
    RemoveFieldsParameters LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParameters
    Parameters for remove fields rule. Nested schema for remove_fields_parameters:
    ReplaceParameters LogsRuleGroupRuleSubgroupRuleParametersReplaceParameters
    Parameters for replace rule. Nested schema for replace_parameters:
    allowParameters LogsRuleGroupRuleSubgroupRuleParametersAllowParameters
    Parameters for allow rule. Nested schema for allow_parameters:
    blockParameters LogsRuleGroupRuleSubgroupRuleParametersBlockParameters
    Parameters for block rule. Nested schema for block_parameters:
    extractParameters LogsRuleGroupRuleSubgroupRuleParametersExtractParameters
    Parameters for text extraction rule. Nested schema for extract_parameters:
    extractTimestampParameters LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParameters
    Parameters for extract timestamp rule. Nested schema for extract_timestamp_parameters:
    jsonExtractParameters LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParameters
    Parameters for json extract rule. Nested schema for json_extract_parameters:
    jsonParseParameters LogsRuleGroupRuleSubgroupRuleParametersJsonParseParameters
    Parameters for json parse rule. Nested schema for json_parse_parameters:
    jsonStringifyParameters LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParameters
    Parameters for json stringify rule. Nested schema for json_stringify_parameters:
    parseParameters LogsRuleGroupRuleSubgroupRuleParametersParseParameters
    Parameters for parse rule. Nested schema for parse_parameters:
    removeFieldsParameters LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParameters
    Parameters for remove fields rule. Nested schema for remove_fields_parameters:
    replaceParameters LogsRuleGroupRuleSubgroupRuleParametersReplaceParameters
    Parameters for replace rule. Nested schema for replace_parameters:
    allowParameters LogsRuleGroupRuleSubgroupRuleParametersAllowParameters
    Parameters for allow rule. Nested schema for allow_parameters:
    blockParameters LogsRuleGroupRuleSubgroupRuleParametersBlockParameters
    Parameters for block rule. Nested schema for block_parameters:
    extractParameters LogsRuleGroupRuleSubgroupRuleParametersExtractParameters
    Parameters for text extraction rule. Nested schema for extract_parameters:
    extractTimestampParameters LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParameters
    Parameters for extract timestamp rule. Nested schema for extract_timestamp_parameters:
    jsonExtractParameters LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParameters
    Parameters for json extract rule. Nested schema for json_extract_parameters:
    jsonParseParameters LogsRuleGroupRuleSubgroupRuleParametersJsonParseParameters
    Parameters for json parse rule. Nested schema for json_parse_parameters:
    jsonStringifyParameters LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParameters
    Parameters for json stringify rule. Nested schema for json_stringify_parameters:
    parseParameters LogsRuleGroupRuleSubgroupRuleParametersParseParameters
    Parameters for parse rule. Nested schema for parse_parameters:
    removeFieldsParameters LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParameters
    Parameters for remove fields rule. Nested schema for remove_fields_parameters:
    replaceParameters LogsRuleGroupRuleSubgroupRuleParametersReplaceParameters
    Parameters for replace rule. Nested schema for replace_parameters:
    allow_parameters LogsRuleGroupRuleSubgroupRuleParametersAllowParameters
    Parameters for allow rule. Nested schema for allow_parameters:
    block_parameters LogsRuleGroupRuleSubgroupRuleParametersBlockParameters
    Parameters for block rule. Nested schema for block_parameters:
    extract_parameters LogsRuleGroupRuleSubgroupRuleParametersExtractParameters
    Parameters for text extraction rule. Nested schema for extract_parameters:
    extract_timestamp_parameters LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParameters
    Parameters for extract timestamp rule. Nested schema for extract_timestamp_parameters:
    json_extract_parameters LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParameters
    Parameters for json extract rule. Nested schema for json_extract_parameters:
    json_parse_parameters LogsRuleGroupRuleSubgroupRuleParametersJsonParseParameters
    Parameters for json parse rule. Nested schema for json_parse_parameters:
    json_stringify_parameters LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParameters
    Parameters for json stringify rule. Nested schema for json_stringify_parameters:
    parse_parameters LogsRuleGroupRuleSubgroupRuleParametersParseParameters
    Parameters for parse rule. Nested schema for parse_parameters:
    remove_fields_parameters LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParameters
    Parameters for remove fields rule. Nested schema for remove_fields_parameters:
    replace_parameters LogsRuleGroupRuleSubgroupRuleParametersReplaceParameters
    Parameters for replace rule. Nested schema for replace_parameters:
    allowParameters Property Map
    Parameters for allow rule. Nested schema for allow_parameters:
    blockParameters Property Map
    Parameters for block rule. Nested schema for block_parameters:
    extractParameters Property Map
    Parameters for text extraction rule. Nested schema for extract_parameters:
    extractTimestampParameters Property Map
    Parameters for extract timestamp rule. Nested schema for extract_timestamp_parameters:
    jsonExtractParameters Property Map
    Parameters for json extract rule. Nested schema for json_extract_parameters:
    jsonParseParameters Property Map
    Parameters for json parse rule. Nested schema for json_parse_parameters:
    jsonStringifyParameters Property Map
    Parameters for json stringify rule. Nested schema for json_stringify_parameters:
    parseParameters Property Map
    Parameters for parse rule. Nested schema for parse_parameters:
    removeFieldsParameters Property Map
    Parameters for remove fields rule. Nested schema for remove_fields_parameters:
    replaceParameters Property Map
    Parameters for replace rule. Nested schema for replace_parameters:

    LogsRuleGroupRuleSubgroupRuleParametersAllowParameters, LogsRuleGroupRuleSubgroupRuleParametersAllowParametersArgs

    KeepBlockedLogs bool
    If true matched logs will be blocked, otherwise matched logs will be kept.
    Rule string
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    KeepBlockedLogs bool
    If true matched logs will be blocked, otherwise matched logs will be kept.
    Rule string
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    keepBlockedLogs Boolean
    If true matched logs will be blocked, otherwise matched logs will be kept.
    rule String
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    keepBlockedLogs boolean
    If true matched logs will be blocked, otherwise matched logs will be kept.
    rule string
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    keep_blocked_logs bool
    If true matched logs will be blocked, otherwise matched logs will be kept.
    rule str
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    keepBlockedLogs Boolean
    If true matched logs will be blocked, otherwise matched logs will be kept.
    rule String
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.

    LogsRuleGroupRuleSubgroupRuleParametersBlockParameters, LogsRuleGroupRuleSubgroupRuleParametersBlockParametersArgs

    KeepBlockedLogs bool
    If true matched logs will be kept, otherwise matched logs will be blocked.
    Rule string
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    KeepBlockedLogs bool
    If true matched logs will be kept, otherwise matched logs will be blocked.
    Rule string
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    keepBlockedLogs Boolean
    If true matched logs will be kept, otherwise matched logs will be blocked.
    rule String
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    keepBlockedLogs boolean
    If true matched logs will be kept, otherwise matched logs will be blocked.
    rule string
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    keep_blocked_logs bool
    If true matched logs will be kept, otherwise matched logs will be blocked.
    rule str
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    keepBlockedLogs Boolean
    If true matched logs will be kept, otherwise matched logs will be blocked.
    rule String
    Regex which will match the source field and decide if the rule will apply.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.

    LogsRuleGroupRuleSubgroupRuleParametersExtractParameters, LogsRuleGroupRuleSubgroupRuleParametersExtractParametersArgs

    Rule string
    Regex which will parse the source field and extract the json keys from it while retaining the original log.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    Rule string
    Regex which will parse the source field and extract the json keys from it while retaining the original log.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    rule String
    Regex which will parse the source field and extract the json keys from it while retaining the original log.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    rule string
    Regex which will parse the source field and extract the json keys from it while retaining the original log.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    rule str
    Regex which will parse the source field and extract the json keys from it while retaining the original log.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    rule String
    Regex which will parse the source field and extract the json keys from it while retaining the original log.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.

    LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParameters, LogsRuleGroupRuleSubgroupRuleParametersExtractTimestampParametersArgs

    Format string
    What time format the the source field to extract from has.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    Standard string
    What time format to use on the extracted time.

    • Constraints: Allowable values are: strftime_or_unspecified, javasdf, golang, secondsts, millits, microts, nanots.
    Format string
    What time format the the source field to extract from has.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    Standard string
    What time format to use on the extracted time.

    • Constraints: Allowable values are: strftime_or_unspecified, javasdf, golang, secondsts, millits, microts, nanots.
    format String
    What time format the the source field to extract from has.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    standard String
    What time format to use on the extracted time.

    • Constraints: Allowable values are: strftime_or_unspecified, javasdf, golang, secondsts, millits, microts, nanots.
    format string
    What time format the the source field to extract from has.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    standard string
    What time format to use on the extracted time.

    • Constraints: Allowable values are: strftime_or_unspecified, javasdf, golang, secondsts, millits, microts, nanots.
    format str
    What time format the the source field to extract from has.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    standard str
    What time format to use on the extracted time.

    • Constraints: Allowable values are: strftime_or_unspecified, javasdf, golang, secondsts, millits, microts, nanots.
    format String
    What time format the the source field to extract from has.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    standard String
    What time format to use on the extracted time.

    • Constraints: Allowable values are: strftime_or_unspecified, javasdf, golang, secondsts, millits, microts, nanots.

    LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParameters, LogsRuleGroupRuleSubgroupRuleParametersJsonExtractParametersArgs

    DestinationField string
    In which metadata field to store the extracted value.

    • Constraints: Allowable values are: category_or_unspecified, classname, methodname, threadid, severity.
    DestinationField string
    In which metadata field to store the extracted value.

    • Constraints: Allowable values are: category_or_unspecified, classname, methodname, threadid, severity.
    destinationField String
    In which metadata field to store the extracted value.

    • Constraints: Allowable values are: category_or_unspecified, classname, methodname, threadid, severity.
    destinationField string
    In which metadata field to store the extracted value.

    • Constraints: Allowable values are: category_or_unspecified, classname, methodname, threadid, severity.
    destination_field str
    In which metadata field to store the extracted value.

    • Constraints: Allowable values are: category_or_unspecified, classname, methodname, threadid, severity.
    destinationField String
    In which metadata field to store the extracted value.

    • Constraints: Allowable values are: category_or_unspecified, classname, methodname, threadid, severity.

    LogsRuleGroupRuleSubgroupRuleParametersJsonParseParameters, LogsRuleGroupRuleSubgroupRuleParametersJsonParseParametersArgs

    DestinationField string
    Destination field under which to put the json object.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    OverrideDest bool
    Destination field in which to put the json stringified content.
    DeleteSource bool
    Whether or not to delete the source field after running this rule.
    DestinationField string
    Destination field under which to put the json object.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    OverrideDest bool
    Destination field in which to put the json stringified content.
    DeleteSource bool
    Whether or not to delete the source field after running this rule.
    destinationField String
    Destination field under which to put the json object.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    overrideDest Boolean
    Destination field in which to put the json stringified content.
    deleteSource Boolean
    Whether or not to delete the source field after running this rule.
    destinationField string
    Destination field under which to put the json object.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    overrideDest boolean
    Destination field in which to put the json stringified content.
    deleteSource boolean
    Whether or not to delete the source field after running this rule.
    destination_field str
    Destination field under which to put the json object.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    override_dest bool
    Destination field in which to put the json stringified content.
    delete_source bool
    Whether or not to delete the source field after running this rule.
    destinationField String
    Destination field under which to put the json object.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    overrideDest Boolean
    Destination field in which to put the json stringified content.
    deleteSource Boolean
    Whether or not to delete the source field after running this rule.

    LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParameters, LogsRuleGroupRuleSubgroupRuleParametersJsonStringifyParametersArgs

    DestinationField string
    Destination field in which to put the json stringified content.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    DeleteSource bool
    Whether or not to delete the source field after running this rule.
    DestinationField string
    Destination field in which to put the json stringified content.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    DeleteSource bool
    Whether or not to delete the source field after running this rule.
    destinationField String
    Destination field in which to put the json stringified content.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    deleteSource Boolean
    Whether or not to delete the source field after running this rule.
    destinationField string
    Destination field in which to put the json stringified content.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    deleteSource boolean
    Whether or not to delete the source field after running this rule.
    destination_field str
    Destination field in which to put the json stringified content.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    delete_source bool
    Whether or not to delete the source field after running this rule.
    destinationField String
    Destination field in which to put the json stringified content.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    deleteSource Boolean
    Whether or not to delete the source field after running this rule.

    LogsRuleGroupRuleSubgroupRuleParametersParseParameters, LogsRuleGroupRuleSubgroupRuleParametersParseParametersArgs

    DestinationField string
    In which field to put the parsed text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Rule string
    Regex which will parse the source field and extract the json keys from it while removing the source field.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    DestinationField string
    In which field to put the parsed text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    Rule string
    Regex which will parse the source field and extract the json keys from it while removing the source field.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    destinationField String
    In which field to put the parsed text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    rule String
    Regex which will parse the source field and extract the json keys from it while removing the source field.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    destinationField string
    In which field to put the parsed text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    rule string
    Regex which will parse the source field and extract the json keys from it while removing the source field.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    destination_field str
    In which field to put the parsed text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    rule str
    Regex which will parse the source field and extract the json keys from it while removing the source field.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    destinationField String
    In which field to put the parsed text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    rule String
    Regex which will parse the source field and extract the json keys from it while removing the source field.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.

    LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParameters, LogsRuleGroupRuleSubgroupRuleParametersRemoveFieldsParametersArgs

    Fields List<string>
    Json field paths to drop from the log.

    • Constraints: The list items must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$. The maximum length is 4096 items. The minimum length is 1 item.
    Fields []string
    Json field paths to drop from the log.

    • Constraints: The list items must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$. The maximum length is 4096 items. The minimum length is 1 item.
    fields List<String>
    Json field paths to drop from the log.

    • Constraints: The list items must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$. The maximum length is 4096 items. The minimum length is 1 item.
    fields string[]
    Json field paths to drop from the log.

    • Constraints: The list items must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$. The maximum length is 4096 items. The minimum length is 1 item.
    fields Sequence[str]
    Json field paths to drop from the log.

    • Constraints: The list items must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$. The maximum length is 4096 items. The minimum length is 1 item.
    fields List<String>
    Json field paths to drop from the log.

    • Constraints: The list items must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$. The maximum length is 4096 items. The minimum length is 1 item.

    LogsRuleGroupRuleSubgroupRuleParametersReplaceParameters, LogsRuleGroupRuleSubgroupRuleParametersReplaceParametersArgs

    DestinationField string
    In which field to put the modified text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    ReplaceNewVal string
    The value to replace the matched text with.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    Rule string
    Regex which will match parts in the text to replace.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    DestinationField string
    In which field to put the modified text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    ReplaceNewVal string
    The value to replace the matched text with.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    Rule string
    Regex which will match parts in the text to replace.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    destinationField String
    In which field to put the modified text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    replaceNewVal String
    The value to replace the matched text with.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    rule String
    Regex which will match parts in the text to replace.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    destinationField string
    In which field to put the modified text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    replaceNewVal string
    The value to replace the matched text with.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    rule string
    Regex which will match parts in the text to replace.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    destination_field str
    In which field to put the modified text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    replace_new_val str
    The value to replace the matched text with.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    rule str
    Regex which will match parts in the text to replace.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    destinationField String
    In which field to put the modified text.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression ^[\\p{L}\\p{N}\\p{P}\\p{Z}\\p{S}\\p{M}]+$.
    replaceNewVal String
    The value to replace the matched text with.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.
    rule String
    Regex which will match parts in the text to replace.

    • Constraints: The maximum length is 4096 characters. The minimum length is 1 character. The value must match regular expression /^.*$/.

    Import

    You can import the ibm_logs_rule_group resource by using id. id combination of region, instance_id and rule_group_id.

    Syntax

    
```sh
$ pulumi import ibm:index/logsRuleGroup:LogsRuleGroup logs_rule_group < region >/< instance_id >/< rule_group_id >;
```

    Example

    $ pulumi import ibm:index/logsRuleGroup:LogsRuleGroup logs_rule_group eu-gb/3dc02998-0b50-4ea8-b68a-4779d716fa1f/3dc02998-0b50-4ea8-b68a-4779d716fa1f

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    ibm logo
    ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
    ibm-cloud/terraform-provider-ibm