Docs
PackagesSumo Logic v0.21.0 published on Thursday, Apr 11, 2024 by Pulumi
sumologic.CseCustomInsight
Explore with Pulumi AI
Provides a Sumo Logic CSE Custom Insight.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as sumologic from "@pulumi/sumologic";
const customInsight = new sumologic.CseCustomInsight("customInsight", {
description: "Insight description",
dynamicSeverities: [{
insightSeverity: "CRITICAL",
minimumSignalSeverity: 8,
}],
enabled: true,
ordered: true,
ruleIds: [
"MATCH-S00001",
"THRESHOLD-U00005",
],
severity: "HIGH",
signalNames: [
"Some Signal Name",
"Wildcard Signal Name *",
],
tags: ["_mitreAttackTactic:TA0009"],
});
import pulumi
import pulumi_sumologic as sumologic
custom_insight = sumologic.CseCustomInsight("customInsight",
description="Insight description",
dynamic_severities=[sumologic.CseCustomInsightDynamicSeverityArgs(
insight_severity="CRITICAL",
minimum_signal_severity=8,
)],
enabled=True,
ordered=True,
rule_ids=[
"MATCH-S00001",
"THRESHOLD-U00005",
],
severity="HIGH",
signal_names=[
"Some Signal Name",
"Wildcard Signal Name *",
],
tags=["_mitreAttackTactic:TA0009"])
package main
import (
"github.com/pulumi/pulumi-sumologic/sdk/go/sumologic"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := sumologic.NewCseCustomInsight(ctx, "customInsight", &sumologic.CseCustomInsightArgs{
Description: pulumi.String("Insight description"),
DynamicSeverities: sumologic.CseCustomInsightDynamicSeverityArray{
&sumologic.CseCustomInsightDynamicSeverityArgs{
InsightSeverity: pulumi.String("CRITICAL"),
MinimumSignalSeverity: pulumi.Int(8),
},
},
Enabled: pulumi.Bool(true),
Ordered: pulumi.Bool(true),
RuleIds: pulumi.StringArray{
pulumi.String("MATCH-S00001"),
pulumi.String("THRESHOLD-U00005"),
},
Severity: pulumi.String("HIGH"),
SignalNames: pulumi.StringArray{
pulumi.String("Some Signal Name"),
pulumi.String("Wildcard Signal Name *"),
},
Tags: pulumi.StringArray{
pulumi.String("_mitreAttackTactic:TA0009"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using SumoLogic = Pulumi.SumoLogic;
return await Deployment.RunAsync(() =>
{
var customInsight = new SumoLogic.CseCustomInsight("customInsight", new()
{
Description = "Insight description",
DynamicSeverities = new[]
{
new SumoLogic.Inputs.CseCustomInsightDynamicSeverityArgs
{
InsightSeverity = "CRITICAL",
MinimumSignalSeverity = 8,
},
},
Enabled = true,
Ordered = true,
RuleIds = new[]
{
"MATCH-S00001",
"THRESHOLD-U00005",
},
Severity = "HIGH",
SignalNames = new[]
{
"Some Signal Name",
"Wildcard Signal Name *",
},
Tags = new[]
{
"_mitreAttackTactic:TA0009",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sumologic.CseCustomInsight;
import com.pulumi.sumologic.CseCustomInsightArgs;
import com.pulumi.sumologic.inputs.CseCustomInsightDynamicSeverityArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var customInsight = new CseCustomInsight("customInsight", CseCustomInsightArgs.builder()
.description("Insight description")
.dynamicSeverities(CseCustomInsightDynamicSeverityArgs.builder()
.insightSeverity("CRITICAL")
.minimumSignalSeverity(8)
.build())
.enabled(true)
.ordered(true)
.ruleIds(
"MATCH-S00001",
"THRESHOLD-U00005")
.severity("HIGH")
.signalNames(
"Some Signal Name",
"Wildcard Signal Name *")
.tags("_mitreAttackTactic:TA0009")
.build());
}
}
resources:
customInsight:
type: sumologic:CseCustomInsight
properties:
description: Insight description
dynamicSeverities:
- insightSeverity: CRITICAL
minimumSignalSeverity: 8
enabled: true
ordered: true
ruleIds:
- MATCH-S00001
- THRESHOLD-U00005
severity: HIGH
signalNames:
- Some Signal Name
- Wildcard Signal Name *
tags:
- _mitreAttackTactic:TA0009
Create CseCustomInsight Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new CseCustomInsight(name: string, args: CseCustomInsightArgs, opts?: CustomResourceOptions);@overload
def CseCustomInsight(resource_name: str,
args: CseCustomInsightArgs,
opts: Optional[ResourceOptions] = None)
@overload
def CseCustomInsight(resource_name: str,
opts: Optional[ResourceOptions] = None,
description: Optional[str] = None,
enabled: Optional[bool] = None,
ordered: Optional[bool] = None,
severity: Optional[str] = None,
tags: Optional[Sequence[str]] = None,
dynamic_severities: Optional[Sequence[CseCustomInsightDynamicSeverityArgs]] = None,
name: Optional[str] = None,
rule_ids: Optional[Sequence[str]] = None,
signal_names: Optional[Sequence[str]] = None)func NewCseCustomInsight(ctx *Context, name string, args CseCustomInsightArgs, opts ...ResourceOption) (*CseCustomInsight, error)public CseCustomInsight(string name, CseCustomInsightArgs args, CustomResourceOptions? opts = null)
public CseCustomInsight(String name, CseCustomInsightArgs args)
public CseCustomInsight(String name, CseCustomInsightArgs args, CustomResourceOptions options)
type: sumologic:CseCustomInsight
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args CseCustomInsightArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CseCustomInsightArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CseCustomInsightArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CseCustomInsightArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CseCustomInsightArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Example
The following reference example uses placeholder values for all input properties.
var cseCustomInsightResource = new SumoLogic.CseCustomInsight("cseCustomInsightResource", new()
{
Description = "string",
Enabled = false,
Ordered = false,
Severity = "string",
Tags = new[]
{
"string",
},
DynamicSeverities = new[]
{
new SumoLogic.Inputs.CseCustomInsightDynamicSeverityArgs
{
InsightSeverity = "string",
MinimumSignalSeverity = 0,
},
},
Name = "string",
RuleIds = new[]
{
"string",
},
SignalNames = new[]
{
"string",
},
});
example, err := sumologic.NewCseCustomInsight(ctx, "cseCustomInsightResource", &sumologic.CseCustomInsightArgs{
Description: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Ordered: pulumi.Bool(false),
Severity: pulumi.String("string"),
Tags: pulumi.StringArray{
pulumi.String("string"),
},
DynamicSeverities: sumologic.CseCustomInsightDynamicSeverityArray{
&sumologic.CseCustomInsightDynamicSeverityArgs{
InsightSeverity: pulumi.String("string"),
MinimumSignalSeverity: pulumi.Int(0),
},
},
Name: pulumi.String("string"),
RuleIds: pulumi.StringArray{
pulumi.String("string"),
},
SignalNames: pulumi.StringArray{
pulumi.String("string"),
},
})
var cseCustomInsightResource = new CseCustomInsight("cseCustomInsightResource", CseCustomInsightArgs.builder()
.description("string")
.enabled(false)
.ordered(false)
.severity("string")
.tags("string")
.dynamicSeverities(CseCustomInsightDynamicSeverityArgs.builder()
.insightSeverity("string")
.minimumSignalSeverity(0)
.build())
.name("string")
.ruleIds("string")
.signalNames("string")
.build());
cse_custom_insight_resource = sumologic.CseCustomInsight("cseCustomInsightResource",
description="string",
enabled=False,
ordered=False,
severity="string",
tags=["string"],
dynamic_severities=[sumologic.CseCustomInsightDynamicSeverityArgs(
insight_severity="string",
minimum_signal_severity=0,
)],
name="string",
rule_ids=["string"],
signal_names=["string"])
const cseCustomInsightResource = new sumologic.CseCustomInsight("cseCustomInsightResource", {
description: "string",
enabled: false,
ordered: false,
severity: "string",
tags: ["string"],
dynamicSeverities: [{
insightSeverity: "string",
minimumSignalSeverity: 0,
}],
name: "string",
ruleIds: ["string"],
signalNames: ["string"],
});
type: sumologic:CseCustomInsight
properties:
description: string
dynamicSeverities:
- insightSeverity: string
minimumSignalSeverity: 0
enabled: false
name: string
ordered: false
ruleIds:
- string
severity: string
signalNames:
- string
tags:
- string
CseCustomInsight Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The CseCustomInsight resource accepts the following input properties:
- Description string
- The description of the generated Insights
- Enabled bool
- Whether the Custom Insight should generate Insights
- Ordered bool
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- Severity string
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- List<string>
The tags of the generated Insights
The following attributes are exported:
- Dynamic
Severities List<Pulumi.Sumo Logic. Inputs. Cse Custom Insight Dynamic Severity> - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- Name string
- The name of the Custom Insight and the generated Insights
- Rule
Ids List<string> - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- Signal
Names List<string> - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- Description string
- The description of the generated Insights
- Enabled bool
- Whether the Custom Insight should generate Insights
- Ordered bool
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- Severity string
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- []string
The tags of the generated Insights
The following attributes are exported:
- Dynamic
Severities []CseCustom Insight Dynamic Severity Args - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- Name string
- The name of the Custom Insight and the generated Insights
- Rule
Ids []string - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- Signal
Names []string - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- description String
- The description of the generated Insights
- enabled Boolean
- Whether the Custom Insight should generate Insights
- ordered Boolean
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- severity String
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- List<String>
The tags of the generated Insights
The following attributes are exported:
- dynamic
Severities List<CseCustom Insight Dynamic Severity> - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- name String
- The name of the Custom Insight and the generated Insights
- rule
Ids List<String> - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- signal
Names List<String> - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- description string
- The description of the generated Insights
- enabled boolean
- Whether the Custom Insight should generate Insights
- ordered boolean
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- severity string
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- string[]
The tags of the generated Insights
The following attributes are exported:
- dynamic
Severities CseCustom Insight Dynamic Severity[] - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- name string
- The name of the Custom Insight and the generated Insights
- rule
Ids string[] - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- signal
Names string[] - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- description str
- The description of the generated Insights
- enabled bool
- Whether the Custom Insight should generate Insights
- ordered bool
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- severity str
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- Sequence[str]
The tags of the generated Insights
The following attributes are exported:
- dynamic_
severities Sequence[CseCustom Insight Dynamic Severity Args] - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- name str
- The name of the Custom Insight and the generated Insights
- rule_
ids Sequence[str] - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- signal_
names Sequence[str] - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- description String
- The description of the generated Insights
- enabled Boolean
- Whether the Custom Insight should generate Insights
- ordered Boolean
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- severity String
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- List<String>
The tags of the generated Insights
The following attributes are exported:
- dynamic
Severities List<Property Map> - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- name String
- The name of the Custom Insight and the generated Insights
- rule
Ids List<String> - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- signal
Names List<String> - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
Outputs
All input properties are implicitly available as output properties. Additionally, the CseCustomInsight resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing CseCustomInsight Resource
Get an existing CseCustomInsight resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CseCustomInsightState, opts?: CustomResourceOptions): CseCustomInsight@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
description: Optional[str] = None,
dynamic_severities: Optional[Sequence[CseCustomInsightDynamicSeverityArgs]] = None,
enabled: Optional[bool] = None,
name: Optional[str] = None,
ordered: Optional[bool] = None,
rule_ids: Optional[Sequence[str]] = None,
severity: Optional[str] = None,
signal_names: Optional[Sequence[str]] = None,
tags: Optional[Sequence[str]] = None) -> CseCustomInsightfunc GetCseCustomInsight(ctx *Context, name string, id IDInput, state *CseCustomInsightState, opts ...ResourceOption) (*CseCustomInsight, error)public static CseCustomInsight Get(string name, Input<string> id, CseCustomInsightState? state, CustomResourceOptions? opts = null)public static CseCustomInsight get(String name, Output<String> id, CseCustomInsightState state, CustomResourceOptions options)Resource lookup is not supported in YAML- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Description string
- The description of the generated Insights
- Dynamic
Severities List<Pulumi.Sumo Logic. Inputs. Cse Custom Insight Dynamic Severity> - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- Enabled bool
- Whether the Custom Insight should generate Insights
- Name string
- The name of the Custom Insight and the generated Insights
- Ordered bool
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- Rule
Ids List<string> - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- Severity string
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- Signal
Names List<string> - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- List<string>
The tags of the generated Insights
The following attributes are exported:
- Description string
- The description of the generated Insights
- Dynamic
Severities []CseCustom Insight Dynamic Severity Args - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- Enabled bool
- Whether the Custom Insight should generate Insights
- Name string
- The name of the Custom Insight and the generated Insights
- Ordered bool
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- Rule
Ids []string - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- Severity string
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- Signal
Names []string - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- []string
The tags of the generated Insights
The following attributes are exported:
- description String
- The description of the generated Insights
- dynamic
Severities List<CseCustom Insight Dynamic Severity> - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- enabled Boolean
- Whether the Custom Insight should generate Insights
- name String
- The name of the Custom Insight and the generated Insights
- ordered Boolean
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- rule
Ids List<String> - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- severity String
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- signal
Names List<String> - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- List<String>
The tags of the generated Insights
The following attributes are exported:
- description string
- The description of the generated Insights
- dynamic
Severities CseCustom Insight Dynamic Severity[] - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- enabled boolean
- Whether the Custom Insight should generate Insights
- name string
- The name of the Custom Insight and the generated Insights
- ordered boolean
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- rule
Ids string[] - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- severity string
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- signal
Names string[] - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- string[]
The tags of the generated Insights
The following attributes are exported:
- description str
- The description of the generated Insights
- dynamic_
severities Sequence[CseCustom Insight Dynamic Severity Args] - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- enabled bool
- Whether the Custom Insight should generate Insights
- name str
- The name of the Custom Insight and the generated Insights
- ordered bool
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- rule_
ids Sequence[str] - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- severity str
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- signal_
names Sequence[str] - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- Sequence[str]
The tags of the generated Insights
The following attributes are exported:
- description String
- The description of the generated Insights
- dynamic
Severities List<Property Map> - The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight.
- enabled Boolean
- Whether the Custom Insight should generate Insights
- name String
- The name of the Custom Insight and the generated Insights
- ordered Boolean
- Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight
- rule
Ids List<String> - The Rule IDs to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- severity String
- The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW)
- signal
Names List<String> - The Signal names to match to generate an Insight (exactly one of rule_ids or signal_names must be specified)
- List<String>
The tags of the generated Insights
The following attributes are exported:
Supporting Types
CseCustomInsightDynamicSeverity, CseCustomInsightDynamicSeverityArgs
- Insight
Severity string - The severity of the generated Insight (CRITICAL, HIGH, MEDIUM, or LOW)
- Minimum
Signal intSeverity - minimum Signal severity as the threshold for an Insight severity level
- Insight
Severity string - The severity of the generated Insight (CRITICAL, HIGH, MEDIUM, or LOW)
- Minimum
Signal intSeverity - minimum Signal severity as the threshold for an Insight severity level
- insight
Severity String - The severity of the generated Insight (CRITICAL, HIGH, MEDIUM, or LOW)
- minimum
Signal IntegerSeverity - minimum Signal severity as the threshold for an Insight severity level
- insight
Severity string - The severity of the generated Insight (CRITICAL, HIGH, MEDIUM, or LOW)
- minimum
Signal numberSeverity - minimum Signal severity as the threshold for an Insight severity level
- insight_
severity str - The severity of the generated Insight (CRITICAL, HIGH, MEDIUM, or LOW)
- minimum_
signal_ intseverity - minimum Signal severity as the threshold for an Insight severity level
- insight
Severity String - The severity of the generated Insight (CRITICAL, HIGH, MEDIUM, or LOW)
- minimum
Signal NumberSeverity - minimum Signal severity as the threshold for an Insight severity level
Import
Custom Insights can be imported using the field id, e.g.:
hcl
$ pulumi import sumologic:index/cseCustomInsight:CseCustomInsight custom_insight id
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Sumo Logic pulumi/pulumi-sumologic
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
sumologicTerraform Provider.