Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Logzio Provider
  3. API Docs
  4. getAlertV2
logzio 1.17.1 published on Monday, Apr 14, 2025 by logzio
logzio/terraform-provider-logzio

logzio.getAlertV2

Explore with Pulumi AI

logzio logo
logzio 1.17.1 published on Monday, Apr 14, 2025 by logzio
logzio/terraform-provider-logzio

    # Alert V2 Datasource

    Provides a Logz.io log monitoring alert resource. This can be used to create and manage Logz.io log monitoring alerts.

    Using getAlertV2

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAlertV2(args: GetAlertV2Args, opts?: InvokeOptions): Promise<GetAlertV2Result>
function getAlertV2Output(args: GetAlertV2OutputArgs, opts?: InvokeOptions): Output<GetAlertV2Result>
    def get_alert_v2(id: Optional[float] = None,
                 title: Optional[str] = None,
                 opts: Optional[InvokeOptions] = None) -> GetAlertV2Result
def get_alert_v2_output(id: Optional[pulumi.Input[float]] = None,
                 title: Optional[pulumi.Input[str]] = None,
                 opts: Optional[InvokeOptions] = None) -> Output[GetAlertV2Result]
    func LookupAlertV2(ctx *Context, args *LookupAlertV2Args, opts ...InvokeOption) (*LookupAlertV2Result, error)
func LookupAlertV2Output(ctx *Context, args *LookupAlertV2OutputArgs, opts ...InvokeOption) LookupAlertV2ResultOutput

    > Note: This function is named LookupAlertV2 in the Go SDK.

    public static class GetAlertV2 
{
    public static Task<GetAlertV2Result> InvokeAsync(GetAlertV2Args args, InvokeOptions? opts = null)
    public static Output<GetAlertV2Result> Invoke(GetAlertV2InvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAlertV2Result> getAlertV2(GetAlertV2Args args, InvokeOptions options)
public static Output<GetAlertV2Result> getAlertV2(GetAlertV2Args args, InvokeOptions options)

    fn::invoke:
  function: logzio:index/getAlertV2:getAlertV2
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Id double
    Logz.io alert ID.
    Title string
    Alert title.
    Id float64
    Logz.io alert ID.
    Title string
    Alert title.
    id Double
    Logz.io alert ID.
    title String
    Alert title.
    id number
    Logz.io alert ID.
    title string
    Alert title.
    id float
    Logz.io alert ID.
    title str
    Alert title.
    id Number
    Logz.io alert ID.
    title String
    Alert title.

    getAlertV2 Result

    The following output properties are available:

    AlertNotificationEndpoints List<double>
    Array of IDs of pre-configured endpoint channels to notify when the alert triggers.
    CorrelationOperator string
    Comma separated string of supported operators. Only applicable when multiple sub-components are in use. Selects a logic for correlating the alert’s sub-components. AND is currently the only supported operator. When AND is the correlation_operator, both sub-components must meet their triggering criteria for the alert to trigger.
    CreatedAt string
    Date and time in UTC when the alert was first created.
    CreatedBy string
    Email of the user who first created the alert.
    Description string
    A description of the event, its significance, and suggested next steps or instructions for the team.
    IsEnabled bool
    If true, the alert is currently active.
    Joins List<ImmutableDictionary<string, string>>
    Specifies which group by fields must have the same values to trigger the alert. Joins the group by fields from the first and second sub-components. The key represents the index of the sub component in the array. The fields must be ordered pairs of the group by fields already in use in the sub_components.query_string.
    NotificationEmails List<string>
    Array of email addresses to be notified when the alert triggers.
    OutputType string
    Selects the output format for the alert notification. Can be: "JSON" or "TABLE"" If the alert has no aggregations/group by fields, JSON offers the option to send full sample logs without selecting specific fields.
    ScheduleCronExpression string
    ScheduleTimezone string
    SearchTimeframeMinutes double
    The time frame for evaluating the log data is a sliding window, with 1 minute granularity.
    SubComponents List<GetAlertV2SubComponent>
    Sets the search criteria using a search query, filters, group by aggregations, accounts to search, and trigger conditions.
    SuppressNotificationsMinutes double
    Add a waiting period in minutes to space out notifications. (The alert will still trigger but will not send out notifications during the waiting period.)
    Tags List<string>
    Tags for filtering alerts and triggered alerts. Can be used in Kibana Discover, dashboards, and more.
    UpdatedAt string
    Date and time in UTC when the alert was last updated.

    • updated by - Email of the user who last updated the alert.
    UpdatedBy string
    Id double
    Title string
    AlertNotificationEndpoints []float64
    Array of IDs of pre-configured endpoint channels to notify when the alert triggers.
    CorrelationOperator string
    Comma separated string of supported operators. Only applicable when multiple sub-components are in use. Selects a logic for correlating the alert’s sub-components. AND is currently the only supported operator. When AND is the correlation_operator, both sub-components must meet their triggering criteria for the alert to trigger.
    CreatedAt string
    Date and time in UTC when the alert was first created.
    CreatedBy string
    Email of the user who first created the alert.
    Description string
    A description of the event, its significance, and suggested next steps or instructions for the team.
    IsEnabled bool
    If true, the alert is currently active.
    Joins []map[string]string
    Specifies which group by fields must have the same values to trigger the alert. Joins the group by fields from the first and second sub-components. The key represents the index of the sub component in the array. The fields must be ordered pairs of the group by fields already in use in the sub_components.query_string.
    NotificationEmails []string
    Array of email addresses to be notified when the alert triggers.
    OutputType string
    Selects the output format for the alert notification. Can be: "JSON" or "TABLE"" If the alert has no aggregations/group by fields, JSON offers the option to send full sample logs without selecting specific fields.
    ScheduleCronExpression string
    ScheduleTimezone string
    SearchTimeframeMinutes float64
    The time frame for evaluating the log data is a sliding window, with 1 minute granularity.
    SubComponents []GetAlertV2SubComponent
    Sets the search criteria using a search query, filters, group by aggregations, accounts to search, and trigger conditions.
    SuppressNotificationsMinutes float64
    Add a waiting period in minutes to space out notifications. (The alert will still trigger but will not send out notifications during the waiting period.)
    Tags []string
    Tags for filtering alerts and triggered alerts. Can be used in Kibana Discover, dashboards, and more.
    UpdatedAt string
    Date and time in UTC when the alert was last updated.

    • updated by - Email of the user who last updated the alert.
    UpdatedBy string
    Id float64
    Title string
    alertNotificationEndpoints List<Double>
    Array of IDs of pre-configured endpoint channels to notify when the alert triggers.
    correlationOperator String
    Comma separated string of supported operators. Only applicable when multiple sub-components are in use. Selects a logic for correlating the alert’s sub-components. AND is currently the only supported operator. When AND is the correlation_operator, both sub-components must meet their triggering criteria for the alert to trigger.
    createdAt String
    Date and time in UTC when the alert was first created.
    createdBy String
    Email of the user who first created the alert.
    description String
    A description of the event, its significance, and suggested next steps or instructions for the team.
    isEnabled Boolean
    If true, the alert is currently active.
    joins List<Map<String,String>>
    Specifies which group by fields must have the same values to trigger the alert. Joins the group by fields from the first and second sub-components. The key represents the index of the sub component in the array. The fields must be ordered pairs of the group by fields already in use in the sub_components.query_string.
    notificationEmails List<String>
    Array of email addresses to be notified when the alert triggers.
    outputType String
    Selects the output format for the alert notification. Can be: "JSON" or "TABLE"" If the alert has no aggregations/group by fields, JSON offers the option to send full sample logs without selecting specific fields.
    scheduleCronExpression String
    scheduleTimezone String
    searchTimeframeMinutes Double
    The time frame for evaluating the log data is a sliding window, with 1 minute granularity.
    subComponents List<GetAlertV2SubComponent>
    Sets the search criteria using a search query, filters, group by aggregations, accounts to search, and trigger conditions.
    suppressNotificationsMinutes Double
    Add a waiting period in minutes to space out notifications. (The alert will still trigger but will not send out notifications during the waiting period.)
    tags List<String>
    Tags for filtering alerts and triggered alerts. Can be used in Kibana Discover, dashboards, and more.
    updatedAt String
    Date and time in UTC when the alert was last updated.

    • updated by - Email of the user who last updated the alert.
    updatedBy String
    id Double
    title String
    alertNotificationEndpoints number[]
    Array of IDs of pre-configured endpoint channels to notify when the alert triggers.
    correlationOperator string
    Comma separated string of supported operators. Only applicable when multiple sub-components are in use. Selects a logic for correlating the alert’s sub-components. AND is currently the only supported operator. When AND is the correlation_operator, both sub-components must meet their triggering criteria for the alert to trigger.
    createdAt string
    Date and time in UTC when the alert was first created.
    createdBy string
    Email of the user who first created the alert.
    description string
    A description of the event, its significance, and suggested next steps or instructions for the team.
    isEnabled boolean
    If true, the alert is currently active.
    joins {[key: string]: string}[]
    Specifies which group by fields must have the same values to trigger the alert. Joins the group by fields from the first and second sub-components. The key represents the index of the sub component in the array. The fields must be ordered pairs of the group by fields already in use in the sub_components.query_string.
    notificationEmails string[]
    Array of email addresses to be notified when the alert triggers.
    outputType string
    Selects the output format for the alert notification. Can be: "JSON" or "TABLE"" If the alert has no aggregations/group by fields, JSON offers the option to send full sample logs without selecting specific fields.
    scheduleCronExpression string
    scheduleTimezone string
    searchTimeframeMinutes number
    The time frame for evaluating the log data is a sliding window, with 1 minute granularity.
    subComponents GetAlertV2SubComponent[]
    Sets the search criteria using a search query, filters, group by aggregations, accounts to search, and trigger conditions.
    suppressNotificationsMinutes number
    Add a waiting period in minutes to space out notifications. (The alert will still trigger but will not send out notifications during the waiting period.)
    tags string[]
    Tags for filtering alerts and triggered alerts. Can be used in Kibana Discover, dashboards, and more.
    updatedAt string
    Date and time in UTC when the alert was last updated.

    • updated by - Email of the user who last updated the alert.
    updatedBy string
    id number
    title string
    alert_notification_endpoints Sequence[float]
    Array of IDs of pre-configured endpoint channels to notify when the alert triggers.
    correlation_operator str
    Comma separated string of supported operators. Only applicable when multiple sub-components are in use. Selects a logic for correlating the alert’s sub-components. AND is currently the only supported operator. When AND is the correlation_operator, both sub-components must meet their triggering criteria for the alert to trigger.
    created_at str
    Date and time in UTC when the alert was first created.
    created_by str
    Email of the user who first created the alert.
    description str
    A description of the event, its significance, and suggested next steps or instructions for the team.
    is_enabled bool
    If true, the alert is currently active.
    joins Sequence[Mapping[str, str]]
    Specifies which group by fields must have the same values to trigger the alert. Joins the group by fields from the first and second sub-components. The key represents the index of the sub component in the array. The fields must be ordered pairs of the group by fields already in use in the sub_components.query_string.
    notification_emails Sequence[str]
    Array of email addresses to be notified when the alert triggers.
    output_type str
    Selects the output format for the alert notification. Can be: "JSON" or "TABLE"" If the alert has no aggregations/group by fields, JSON offers the option to send full sample logs without selecting specific fields.
    schedule_cron_expression str
    schedule_timezone str
    search_timeframe_minutes float
    The time frame for evaluating the log data is a sliding window, with 1 minute granularity.
    sub_components Sequence[GetAlertV2SubComponent]
    Sets the search criteria using a search query, filters, group by aggregations, accounts to search, and trigger conditions.
    suppress_notifications_minutes float
    Add a waiting period in minutes to space out notifications. (The alert will still trigger but will not send out notifications during the waiting period.)
    tags Sequence[str]
    Tags for filtering alerts and triggered alerts. Can be used in Kibana Discover, dashboards, and more.
    updated_at str
    Date and time in UTC when the alert was last updated.

    • updated by - Email of the user who last updated the alert.
    updated_by str
    id float
    title str
    alertNotificationEndpoints List<Number>
    Array of IDs of pre-configured endpoint channels to notify when the alert triggers.
    correlationOperator String
    Comma separated string of supported operators. Only applicable when multiple sub-components are in use. Selects a logic for correlating the alert’s sub-components. AND is currently the only supported operator. When AND is the correlation_operator, both sub-components must meet their triggering criteria for the alert to trigger.
    createdAt String
    Date and time in UTC when the alert was first created.
    createdBy String
    Email of the user who first created the alert.
    description String
    A description of the event, its significance, and suggested next steps or instructions for the team.
    isEnabled Boolean
    If true, the alert is currently active.
    joins List<Map<String>>
    Specifies which group by fields must have the same values to trigger the alert. Joins the group by fields from the first and second sub-components. The key represents the index of the sub component in the array. The fields must be ordered pairs of the group by fields already in use in the sub_components.query_string.
    notificationEmails List<String>
    Array of email addresses to be notified when the alert triggers.
    outputType String
    Selects the output format for the alert notification. Can be: "JSON" or "TABLE"" If the alert has no aggregations/group by fields, JSON offers the option to send full sample logs without selecting specific fields.
    scheduleCronExpression String
    scheduleTimezone String
    searchTimeframeMinutes Number
    The time frame for evaluating the log data is a sliding window, with 1 minute granularity.
    subComponents List<Property Map>
    Sets the search criteria using a search query, filters, group by aggregations, accounts to search, and trigger conditions.
    suppressNotificationsMinutes Number
    Add a waiting period in minutes to space out notifications. (The alert will still trigger but will not send out notifications during the waiting period.)
    tags List<String>
    Tags for filtering alerts and triggered alerts. Can be used in Kibana Discover, dashboards, and more.
    updatedAt String
    Date and time in UTC when the alert was last updated.

    • updated by - Email of the user who last updated the alert.
    updatedBy String
    id Number
    title String

    Supporting Types

    GetAlertV2SubComponent

    AccountIdsToQueryOns List<double>
    Specify Account IDs to select which accounts the alert should monitor. The alert will be checked only on these accounts.
    Columns List<GetAlertV2SubComponentColumn>
    FilterMust string
    Runs Elasticsearch Bool Query must filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    FilterMustNot string
    Runs Elasticsearch Bool Query must_not filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    GroupByAggregationFields List<string>
    Specify 1-3 fields by which to group the results and count them. If you apply a group by operation, the alert returns a count of the results aggregated by unique values.
    Operation string
    Specifies the operator for evaluating the results. Can be: "LESS_THAN", "GREATER_THAN", "LESS_THAN_OR_EQUALS", "GREATER_THAN_OR_EQUALS", "EQUALS", "NOT_EQUALS".
    QueryString string
    Provide a Kibana search query written in Lucene syntax. The search query together with the filters select for the relevant logs. Cannot be null - send an asterisk wildcard "*" if not using a search query.
    SeverityThresholdTiers List<GetAlertV2SubComponentSeverityThresholdTier>
    Sets a severity label per trigger threshold. If using more than one sub-component, only 1 severityThresholdTiers is allowed. Otherwise, 1 per enum are allowed (for a total of 5 thresholds of increasing severities). Increasing severity must adhere to the logic of the operator.
    ShouldQueryOnAllAccounts bool
    Defaults to true. Only applicable when the alert is run from the main account. If true, the alert runs on the main account and all associated searchable sub accounts. If false, specify relevant account IDs for the alert to monitor using the account_ids_to_query_on field.
    ValueAggregationField string
    Selects the field on which to run the aggregation for the trigger condition. Cannot be a field already in use for group_by_aggregation_fields.
    ValueAggregationType string
    Specifies the aggregation operator. Can be: "SUM", "MIN", "MAX", "AVG", "COUNT", "UNIQUE_COUNT", "NONE". If "COUNT" or "NONE", value_aggregation_field must be null, and group_by_aggregation_fields fields must not be empty. If any other operator type (other than "NONE" or "COUNT"), value_aggregation_field must not be null.
    AccountIdsToQueryOns []float64
    Specify Account IDs to select which accounts the alert should monitor. The alert will be checked only on these accounts.
    Columns []GetAlertV2SubComponentColumn
    FilterMust string
    Runs Elasticsearch Bool Query must filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    FilterMustNot string
    Runs Elasticsearch Bool Query must_not filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    GroupByAggregationFields []string
    Specify 1-3 fields by which to group the results and count them. If you apply a group by operation, the alert returns a count of the results aggregated by unique values.
    Operation string
    Specifies the operator for evaluating the results. Can be: "LESS_THAN", "GREATER_THAN", "LESS_THAN_OR_EQUALS", "GREATER_THAN_OR_EQUALS", "EQUALS", "NOT_EQUALS".
    QueryString string
    Provide a Kibana search query written in Lucene syntax. The search query together with the filters select for the relevant logs. Cannot be null - send an asterisk wildcard "*" if not using a search query.
    SeverityThresholdTiers []GetAlertV2SubComponentSeverityThresholdTier
    Sets a severity label per trigger threshold. If using more than one sub-component, only 1 severityThresholdTiers is allowed. Otherwise, 1 per enum are allowed (for a total of 5 thresholds of increasing severities). Increasing severity must adhere to the logic of the operator.
    ShouldQueryOnAllAccounts bool
    Defaults to true. Only applicable when the alert is run from the main account. If true, the alert runs on the main account and all associated searchable sub accounts. If false, specify relevant account IDs for the alert to monitor using the account_ids_to_query_on field.
    ValueAggregationField string
    Selects the field on which to run the aggregation for the trigger condition. Cannot be a field already in use for group_by_aggregation_fields.
    ValueAggregationType string
    Specifies the aggregation operator. Can be: "SUM", "MIN", "MAX", "AVG", "COUNT", "UNIQUE_COUNT", "NONE". If "COUNT" or "NONE", value_aggregation_field must be null, and group_by_aggregation_fields fields must not be empty. If any other operator type (other than "NONE" or "COUNT"), value_aggregation_field must not be null.
    accountIdsToQueryOns List<Double>
    Specify Account IDs to select which accounts the alert should monitor. The alert will be checked only on these accounts.
    columns List<GetAlertV2SubComponentColumn>
    filterMust String
    Runs Elasticsearch Bool Query must filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    filterMustNot String
    Runs Elasticsearch Bool Query must_not filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    groupByAggregationFields List<String>
    Specify 1-3 fields by which to group the results and count them. If you apply a group by operation, the alert returns a count of the results aggregated by unique values.
    operation String
    Specifies the operator for evaluating the results. Can be: "LESS_THAN", "GREATER_THAN", "LESS_THAN_OR_EQUALS", "GREATER_THAN_OR_EQUALS", "EQUALS", "NOT_EQUALS".
    queryString String
    Provide a Kibana search query written in Lucene syntax. The search query together with the filters select for the relevant logs. Cannot be null - send an asterisk wildcard "*" if not using a search query.
    severityThresholdTiers List<GetAlertV2SubComponentSeverityThresholdTier>
    Sets a severity label per trigger threshold. If using more than one sub-component, only 1 severityThresholdTiers is allowed. Otherwise, 1 per enum are allowed (for a total of 5 thresholds of increasing severities). Increasing severity must adhere to the logic of the operator.
    shouldQueryOnAllAccounts Boolean
    Defaults to true. Only applicable when the alert is run from the main account. If true, the alert runs on the main account and all associated searchable sub accounts. If false, specify relevant account IDs for the alert to monitor using the account_ids_to_query_on field.
    valueAggregationField String
    Selects the field on which to run the aggregation for the trigger condition. Cannot be a field already in use for group_by_aggregation_fields.
    valueAggregationType String
    Specifies the aggregation operator. Can be: "SUM", "MIN", "MAX", "AVG", "COUNT", "UNIQUE_COUNT", "NONE". If "COUNT" or "NONE", value_aggregation_field must be null, and group_by_aggregation_fields fields must not be empty. If any other operator type (other than "NONE" or "COUNT"), value_aggregation_field must not be null.
    accountIdsToQueryOns number[]
    Specify Account IDs to select which accounts the alert should monitor. The alert will be checked only on these accounts.
    columns GetAlertV2SubComponentColumn[]
    filterMust string
    Runs Elasticsearch Bool Query must filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    filterMustNot string
    Runs Elasticsearch Bool Query must_not filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    groupByAggregationFields string[]
    Specify 1-3 fields by which to group the results and count them. If you apply a group by operation, the alert returns a count of the results aggregated by unique values.
    operation string
    Specifies the operator for evaluating the results. Can be: "LESS_THAN", "GREATER_THAN", "LESS_THAN_OR_EQUALS", "GREATER_THAN_OR_EQUALS", "EQUALS", "NOT_EQUALS".
    queryString string
    Provide a Kibana search query written in Lucene syntax. The search query together with the filters select for the relevant logs. Cannot be null - send an asterisk wildcard "*" if not using a search query.
    severityThresholdTiers GetAlertV2SubComponentSeverityThresholdTier[]
    Sets a severity label per trigger threshold. If using more than one sub-component, only 1 severityThresholdTiers is allowed. Otherwise, 1 per enum are allowed (for a total of 5 thresholds of increasing severities). Increasing severity must adhere to the logic of the operator.
    shouldQueryOnAllAccounts boolean
    Defaults to true. Only applicable when the alert is run from the main account. If true, the alert runs on the main account and all associated searchable sub accounts. If false, specify relevant account IDs for the alert to monitor using the account_ids_to_query_on field.
    valueAggregationField string
    Selects the field on which to run the aggregation for the trigger condition. Cannot be a field already in use for group_by_aggregation_fields.
    valueAggregationType string
    Specifies the aggregation operator. Can be: "SUM", "MIN", "MAX", "AVG", "COUNT", "UNIQUE_COUNT", "NONE". If "COUNT" or "NONE", value_aggregation_field must be null, and group_by_aggregation_fields fields must not be empty. If any other operator type (other than "NONE" or "COUNT"), value_aggregation_field must not be null.
    account_ids_to_query_ons Sequence[float]
    Specify Account IDs to select which accounts the alert should monitor. The alert will be checked only on these accounts.
    columns Sequence[GetAlertV2SubComponentColumn]
    filter_must str
    Runs Elasticsearch Bool Query must filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    filter_must_not str
    Runs Elasticsearch Bool Query must_not filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    group_by_aggregation_fields Sequence[str]
    Specify 1-3 fields by which to group the results and count them. If you apply a group by operation, the alert returns a count of the results aggregated by unique values.
    operation str
    Specifies the operator for evaluating the results. Can be: "LESS_THAN", "GREATER_THAN", "LESS_THAN_OR_EQUALS", "GREATER_THAN_OR_EQUALS", "EQUALS", "NOT_EQUALS".
    query_string str
    Provide a Kibana search query written in Lucene syntax. The search query together with the filters select for the relevant logs. Cannot be null - send an asterisk wildcard "*" if not using a search query.
    severity_threshold_tiers Sequence[GetAlertV2SubComponentSeverityThresholdTier]
    Sets a severity label per trigger threshold. If using more than one sub-component, only 1 severityThresholdTiers is allowed. Otherwise, 1 per enum are allowed (for a total of 5 thresholds of increasing severities). Increasing severity must adhere to the logic of the operator.
    should_query_on_all_accounts bool
    Defaults to true. Only applicable when the alert is run from the main account. If true, the alert runs on the main account and all associated searchable sub accounts. If false, specify relevant account IDs for the alert to monitor using the account_ids_to_query_on field.
    value_aggregation_field str
    Selects the field on which to run the aggregation for the trigger condition. Cannot be a field already in use for group_by_aggregation_fields.
    value_aggregation_type str
    Specifies the aggregation operator. Can be: "SUM", "MIN", "MAX", "AVG", "COUNT", "UNIQUE_COUNT", "NONE". If "COUNT" or "NONE", value_aggregation_field must be null, and group_by_aggregation_fields fields must not be empty. If any other operator type (other than "NONE" or "COUNT"), value_aggregation_field must not be null.
    accountIdsToQueryOns List<Number>
    Specify Account IDs to select which accounts the alert should monitor. The alert will be checked only on these accounts.
    columns List<Property Map>
    filterMust String
    Runs Elasticsearch Bool Query must filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    filterMustNot String
    Runs Elasticsearch Bool Query must_not filters on the data (before the search query is applied). The most efficient way to grab the logs you are looking for.
    groupByAggregationFields List<String>
    Specify 1-3 fields by which to group the results and count them. If you apply a group by operation, the alert returns a count of the results aggregated by unique values.
    operation String
    Specifies the operator for evaluating the results. Can be: "LESS_THAN", "GREATER_THAN", "LESS_THAN_OR_EQUALS", "GREATER_THAN_OR_EQUALS", "EQUALS", "NOT_EQUALS".
    queryString String
    Provide a Kibana search query written in Lucene syntax. The search query together with the filters select for the relevant logs. Cannot be null - send an asterisk wildcard "*" if not using a search query.
    severityThresholdTiers List<Property Map>
    Sets a severity label per trigger threshold. If using more than one sub-component, only 1 severityThresholdTiers is allowed. Otherwise, 1 per enum are allowed (for a total of 5 thresholds of increasing severities). Increasing severity must adhere to the logic of the operator.
    shouldQueryOnAllAccounts Boolean
    Defaults to true. Only applicable when the alert is run from the main account. If true, the alert runs on the main account and all associated searchable sub accounts. If false, specify relevant account IDs for the alert to monitor using the account_ids_to_query_on field.
    valueAggregationField String
    Selects the field on which to run the aggregation for the trigger condition. Cannot be a field already in use for group_by_aggregation_fields.
    valueAggregationType String
    Specifies the aggregation operator. Can be: "SUM", "MIN", "MAX", "AVG", "COUNT", "UNIQUE_COUNT", "NONE". If "COUNT" or "NONE", value_aggregation_field must be null, and group_by_aggregation_fields fields must not be empty. If any other operator type (other than "NONE" or "COUNT"), value_aggregation_field must not be null.

    GetAlertV2SubComponentColumn

    FieldName string
    Specify the fields to be included in the notification.
    Regex string
    Trims the data using regex filters. Learn more.
    Sort string
    Specify a single field to sort by. The field cannot be an analyzed field (a field that supports free text search or searching by part of a message, such as the 'message' field). Should be: "DESC", "ASC".
    FieldName string
    Specify the fields to be included in the notification.
    Regex string
    Trims the data using regex filters. Learn more.
    Sort string
    Specify a single field to sort by. The field cannot be an analyzed field (a field that supports free text search or searching by part of a message, such as the 'message' field). Should be: "DESC", "ASC".
    fieldName String
    Specify the fields to be included in the notification.
    regex String
    Trims the data using regex filters. Learn more.
    sort String
    Specify a single field to sort by. The field cannot be an analyzed field (a field that supports free text search or searching by part of a message, such as the 'message' field). Should be: "DESC", "ASC".
    fieldName string
    Specify the fields to be included in the notification.
    regex string
    Trims the data using regex filters. Learn more.
    sort string
    Specify a single field to sort by. The field cannot be an analyzed field (a field that supports free text search or searching by part of a message, such as the 'message' field). Should be: "DESC", "ASC".
    field_name str
    Specify the fields to be included in the notification.
    regex str
    Trims the data using regex filters. Learn more.
    sort str
    Specify a single field to sort by. The field cannot be an analyzed field (a field that supports free text search or searching by part of a message, such as the 'message' field). Should be: "DESC", "ASC".
    fieldName String
    Specify the fields to be included in the notification.
    regex String
    Trims the data using regex filters. Learn more.
    sort String
    Specify a single field to sort by. The field cannot be an analyzed field (a field that supports free text search or searching by part of a message, such as the 'message' field). Should be: "DESC", "ASC".

    GetAlertV2SubComponentSeverityThresholdTier

    Severity string
    Labels the event with a severity tag. Available severity tags are: "INFO", "LOW", "MEDIUM", "HIGH", "SEVERE".
    Threshold double
    Number of logs per search timeframe.
    Severity string
    Labels the event with a severity tag. Available severity tags are: "INFO", "LOW", "MEDIUM", "HIGH", "SEVERE".
    Threshold float64
    Number of logs per search timeframe.
    severity String
    Labels the event with a severity tag. Available severity tags are: "INFO", "LOW", "MEDIUM", "HIGH", "SEVERE".
    threshold Double
    Number of logs per search timeframe.
    severity string
    Labels the event with a severity tag. Available severity tags are: "INFO", "LOW", "MEDIUM", "HIGH", "SEVERE".
    threshold number
    Number of logs per search timeframe.
    severity str
    Labels the event with a severity tag. Available severity tags are: "INFO", "LOW", "MEDIUM", "HIGH", "SEVERE".
    threshold float
    Number of logs per search timeframe.
    severity String
    Labels the event with a severity tag. Available severity tags are: "INFO", "LOW", "MEDIUM", "HIGH", "SEVERE".
    threshold Number
    Number of logs per search timeframe.

    Package Details

    Repository
    logzio logzio/terraform-provider-logzio
    License
    Notes
    This Pulumi package is based on the logzio Terraform Provider.
    logzio logo
    logzio 1.17.1 published on Monday, Apr 14, 2025 by logzio
    logzio/terraform-provider-logzio