sumologic 3.1.3, Aug 7 25

sumologic 3.1.3 published on Thursday, Aug 7, 2025 by sumologic

sumologic.LocalWindowsEventLogSource

Explore with Pulumi AI

sumologic 3.1.3 published on Thursday, Aug 7, 2025 by sumologic

Create LocalWindowsEventLogSource Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new LocalWindowsEventLogSource(name: string, args: LocalWindowsEventLogSourceArgs, opts?: CustomResourceOptions);

@overload
def LocalWindowsEventLogSource(resource_name: str,
                               args: LocalWindowsEventLogSourceArgs,
                               opts: Optional[ResourceOptions] = None)

@overload
def LocalWindowsEventLogSource(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               collector_id: Optional[float] = None,
                               log_names: Optional[Sequence[str]] = None,
                               cutoff_timestamp: Optional[float] = None,
                               event_format: Optional[float] = None,
                               content_type: Optional[str] = None,
                               cutoff_relative_time: Optional[str] = None,
                               allow_list: Optional[str] = None,
                               default_date_formats: Optional[Sequence[LocalWindowsEventLogSourceDefaultDateFormatArgs]] = None,
                               deny_list: Optional[str] = None,
                               force_timezone: Optional[bool] = None,
                               filters: Optional[Sequence[LocalWindowsEventLogSourceFilterArgs]] = None,
                               event_message: Optional[float] = None,
                               category: Optional[str] = None,
                               fields: Optional[Mapping[str, str]] = None,
                               description: Optional[str] = None,
                               hash_algorithm: Optional[str] = None,
                               host_name: Optional[str] = None,
                               local_windows_event_log_source_id: Optional[str] = None,
                               automatic_date_parsing: Optional[bool] = None,
                               manual_prefix_regexp: Optional[str] = None,
                               multiline_processing_enabled: Optional[bool] = None,
                               name: Optional[str] = None,
                               render_messages: Optional[bool] = None,
                               timezone: Optional[str] = None,
                               use_autoline_matching: Optional[bool] = None)

func NewLocalWindowsEventLogSource(ctx *Context, name string, args LocalWindowsEventLogSourceArgs, opts ...ResourceOption) (*LocalWindowsEventLogSource, error)

public LocalWindowsEventLogSource(string name, LocalWindowsEventLogSourceArgs args, CustomResourceOptions? opts = null)

public LocalWindowsEventLogSource(String name, LocalWindowsEventLogSourceArgs args)
public LocalWindowsEventLogSource(String name, LocalWindowsEventLogSourceArgs args, CustomResourceOptions options)

type: sumologic:LocalWindowsEventLogSource
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args LocalWindowsEventLogSourceArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args LocalWindowsEventLogSourceArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args LocalWindowsEventLogSourceArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args LocalWindowsEventLogSourceArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args LocalWindowsEventLogSourceArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var localWindowsEventLogSourceResource = new Sumologic.LocalWindowsEventLogSource("localWindowsEventLogSourceResource", new()
{
    CollectorId = 0,
    LogNames = new[]
    {
        "string",
    },
    CutoffTimestamp = 0,
    EventFormat = 0,
    ContentType = "string",
    CutoffRelativeTime = "string",
    AllowList = "string",
    DefaultDateFormats = new[]
    {
        new Sumologic.Inputs.LocalWindowsEventLogSourceDefaultDateFormatArgs
        {
            Format = "string",
            Locator = "string",
        },
    },
    DenyList = "string",
    ForceTimezone = false,
    Filters = new[]
    {
        new Sumologic.Inputs.LocalWindowsEventLogSourceFilterArgs
        {
            FilterType = "string",
            Name = "string",
            Regexp = "string",
            Mask = "string",
        },
    },
    EventMessage = 0,
    Category = "string",
    Fields = 
    {
        { "string", "string" },
    },
    Description = "string",
    HashAlgorithm = "string",
    HostName = "string",
    LocalWindowsEventLogSourceId = "string",
    AutomaticDateParsing = false,
    ManualPrefixRegexp = "string",
    MultilineProcessingEnabled = false,
    Name = "string",
    RenderMessages = false,
    Timezone = "string",
    UseAutolineMatching = false,
});

example, err := sumologic.NewLocalWindowsEventLogSource(ctx, "localWindowsEventLogSourceResource", &sumologic.LocalWindowsEventLogSourceArgs{
	CollectorId: pulumi.Float64(0),
	LogNames: pulumi.StringArray{
		pulumi.String("string"),
	},
	CutoffTimestamp:    pulumi.Float64(0),
	EventFormat:        pulumi.Float64(0),
	ContentType:        pulumi.String("string"),
	CutoffRelativeTime: pulumi.String("string"),
	AllowList:          pulumi.String("string"),
	DefaultDateFormats: sumologic.LocalWindowsEventLogSourceDefaultDateFormatArray{
		&sumologic.LocalWindowsEventLogSourceDefaultDateFormatArgs{
			Format:  pulumi.String("string"),
			Locator: pulumi.String("string"),
		},
	},
	DenyList:      pulumi.String("string"),
	ForceTimezone: pulumi.Bool(false),
	Filters: sumologic.LocalWindowsEventLogSourceFilterArray{
		&sumologic.LocalWindowsEventLogSourceFilterArgs{
			FilterType: pulumi.String("string"),
			Name:       pulumi.String("string"),
			Regexp:     pulumi.String("string"),
			Mask:       pulumi.String("string"),
		},
	},
	EventMessage: pulumi.Float64(0),
	Category:     pulumi.String("string"),
	Fields: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Description:                  pulumi.String("string"),
	HashAlgorithm:                pulumi.String("string"),
	HostName:                     pulumi.String("string"),
	LocalWindowsEventLogSourceId: pulumi.String("string"),
	AutomaticDateParsing:         pulumi.Bool(false),
	ManualPrefixRegexp:           pulumi.String("string"),
	MultilineProcessingEnabled:   pulumi.Bool(false),
	Name:                         pulumi.String("string"),
	RenderMessages:               pulumi.Bool(false),
	Timezone:                     pulumi.String("string"),
	UseAutolineMatching:          pulumi.Bool(false),
})

var localWindowsEventLogSourceResource = new LocalWindowsEventLogSource("localWindowsEventLogSourceResource", LocalWindowsEventLogSourceArgs.builder()
    .collectorId(0.0)
    .logNames("string")
    .cutoffTimestamp(0.0)
    .eventFormat(0.0)
    .contentType("string")
    .cutoffRelativeTime("string")
    .allowList("string")
    .defaultDateFormats(LocalWindowsEventLogSourceDefaultDateFormatArgs.builder()
        .format("string")
        .locator("string")
        .build())
    .denyList("string")
    .forceTimezone(false)
    .filters(LocalWindowsEventLogSourceFilterArgs.builder()
        .filterType("string")
        .name("string")
        .regexp("string")
        .mask("string")
        .build())
    .eventMessage(0.0)
    .category("string")
    .fields(Map.of("string", "string"))
    .description("string")
    .hashAlgorithm("string")
    .hostName("string")
    .localWindowsEventLogSourceId("string")
    .automaticDateParsing(false)
    .manualPrefixRegexp("string")
    .multilineProcessingEnabled(false)
    .name("string")
    .renderMessages(false)
    .timezone("string")
    .useAutolineMatching(false)
    .build());

local_windows_event_log_source_resource = sumologic.LocalWindowsEventLogSource("localWindowsEventLogSourceResource",
    collector_id=0,
    log_names=["string"],
    cutoff_timestamp=0,
    event_format=0,
    content_type="string",
    cutoff_relative_time="string",
    allow_list="string",
    default_date_formats=[{
        "format": "string",
        "locator": "string",
    }],
    deny_list="string",
    force_timezone=False,
    filters=[{
        "filter_type": "string",
        "name": "string",
        "regexp": "string",
        "mask": "string",
    }],
    event_message=0,
    category="string",
    fields={
        "string": "string",
    },
    description="string",
    hash_algorithm="string",
    host_name="string",
    local_windows_event_log_source_id="string",
    automatic_date_parsing=False,
    manual_prefix_regexp="string",
    multiline_processing_enabled=False,
    name="string",
    render_messages=False,
    timezone="string",
    use_autoline_matching=False)

const localWindowsEventLogSourceResource = new sumologic.LocalWindowsEventLogSource("localWindowsEventLogSourceResource", {
    collectorId: 0,
    logNames: ["string"],
    cutoffTimestamp: 0,
    eventFormat: 0,
    contentType: "string",
    cutoffRelativeTime: "string",
    allowList: "string",
    defaultDateFormats: [{
        format: "string",
        locator: "string",
    }],
    denyList: "string",
    forceTimezone: false,
    filters: [{
        filterType: "string",
        name: "string",
        regexp: "string",
        mask: "string",
    }],
    eventMessage: 0,
    category: "string",
    fields: {
        string: "string",
    },
    description: "string",
    hashAlgorithm: "string",
    hostName: "string",
    localWindowsEventLogSourceId: "string",
    automaticDateParsing: false,
    manualPrefixRegexp: "string",
    multilineProcessingEnabled: false,
    name: "string",
    renderMessages: false,
    timezone: "string",
    useAutolineMatching: false,
});

type: sumologic:LocalWindowsEventLogSource
properties:
    allowList: string
    automaticDateParsing: false
    category: string
    collectorId: 0
    contentType: string
    cutoffRelativeTime: string
    cutoffTimestamp: 0
    defaultDateFormats:
        - format: string
          locator: string
    denyList: string
    description: string
    eventFormat: 0
    eventMessage: 0
    fields:
        string: string
    filters:
        - filterType: string
          mask: string
          name: string
          regexp: string
    forceTimezone: false
    hashAlgorithm: string
    hostName: string
    localWindowsEventLogSourceId: string
    logNames:
        - string
    manualPrefixRegexp: string
    multilineProcessingEnabled: false
    name: string
    renderMessages: false
    timezone: string
    useAutolineMatching: false

LocalWindowsEventLogSource Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The LocalWindowsEventLogSource resource accepts the following input properties:

CollectorId double
LogNames List<string>: List of Windows log types to collect (e.g., Security, Application, System)
AllowList string: Comma-separated list of event IDs to allow
AutomaticDateParsing bool
Category string
ContentType string
CutoffRelativeTime string
CutoffTimestamp double
DefaultDateFormats List<LocalWindowsEventLogSourceDefaultDateFormat>
DenyList string: Comma-separated list of event IDs to deny
Description string
EventFormat double: 0 for legacy format (XML), 1 for JSON format
EventMessage double: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
Fields Dictionary<string, string>
Filters List<LocalWindowsEventLogSourceFilter>
ForceTimezone bool
HashAlgorithm string
HostName string
LocalWindowsEventLogSourceId string
ManualPrefixRegexp string
MultilineProcessingEnabled bool
Name string
RenderMessages bool: When using legacy format, indicates if full event messages are collected
Timezone string
UseAutolineMatching bool

CollectorId float64
LogNames []string: List of Windows log types to collect (e.g., Security, Application, System)
AllowList string: Comma-separated list of event IDs to allow
AutomaticDateParsing bool
Category string
ContentType string
CutoffRelativeTime string
CutoffTimestamp float64
DefaultDateFormats []LocalWindowsEventLogSourceDefaultDateFormatArgs
DenyList string: Comma-separated list of event IDs to deny
Description string
EventFormat float64: 0 for legacy format (XML), 1 for JSON format
EventMessage float64: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
Fields map[string]string
Filters []LocalWindowsEventLogSourceFilterArgs
ForceTimezone bool
HashAlgorithm string
HostName string
LocalWindowsEventLogSourceId string
ManualPrefixRegexp string
MultilineProcessingEnabled bool
Name string
RenderMessages bool: When using legacy format, indicates if full event messages are collected
Timezone string
UseAutolineMatching bool

collectorId Double
logNames List<String>: List of Windows log types to collect (e.g., Security, Application, System)
allowList String: Comma-separated list of event IDs to allow
automaticDateParsing Boolean
category String
contentType String
cutoffRelativeTime String
cutoffTimestamp Double
defaultDateFormats List<LocalWindowsEventLogSourceDefaultDateFormat>
denyList String: Comma-separated list of event IDs to deny
description String
eventFormat Double: 0 for legacy format (XML), 1 for JSON format
eventMessage Double: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
fields Map<String,String>
filters List<LocalWindowsEventLogSourceFilter>
forceTimezone Boolean
hashAlgorithm String
hostName String
localWindowsEventLogSourceId String
manualPrefixRegexp String
multilineProcessingEnabled Boolean
name String
renderMessages Boolean: When using legacy format, indicates if full event messages are collected
timezone String
useAutolineMatching Boolean

collectorId number
logNames string[]: List of Windows log types to collect (e.g., Security, Application, System)
allowList string: Comma-separated list of event IDs to allow
automaticDateParsing boolean
category string
contentType string
cutoffRelativeTime string
cutoffTimestamp number
defaultDateFormats LocalWindowsEventLogSourceDefaultDateFormat[]
denyList string: Comma-separated list of event IDs to deny
description string
eventFormat number: 0 for legacy format (XML), 1 for JSON format
eventMessage number: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
fields {[key: string]: string}
filters LocalWindowsEventLogSourceFilter[]
forceTimezone boolean
hashAlgorithm string
hostName string
localWindowsEventLogSourceId string
manualPrefixRegexp string
multilineProcessingEnabled boolean
name string
renderMessages boolean: When using legacy format, indicates if full event messages are collected
timezone string
useAutolineMatching boolean

collector_id float
log_names Sequence[str]: List of Windows log types to collect (e.g., Security, Application, System)
allow_list str: Comma-separated list of event IDs to allow
automatic_date_parsing bool
category str
content_type str
cutoff_relative_time str
cutoff_timestamp float
default_date_formats Sequence[LocalWindowsEventLogSourceDefaultDateFormatArgs]
deny_list str: Comma-separated list of event IDs to deny
description str
event_format float: 0 for legacy format (XML), 1 for JSON format
event_message float: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
fields Mapping[str, str]
filters Sequence[LocalWindowsEventLogSourceFilterArgs]
force_timezone bool
hash_algorithm str
host_name str
local_windows_event_log_source_id str
manual_prefix_regexp str
multiline_processing_enabled bool
name str
render_messages bool: When using legacy format, indicates if full event messages are collected
timezone str
use_autoline_matching bool

collectorId Number
logNames List<String>: List of Windows log types to collect (e.g., Security, Application, System)
allowList String: Comma-separated list of event IDs to allow
automaticDateParsing Boolean
category String
contentType String
cutoffRelativeTime String
cutoffTimestamp Number
defaultDateFormats List<Property Map>
denyList String: Comma-separated list of event IDs to deny
description String
eventFormat Number: 0 for legacy format (XML), 1 for JSON format
eventMessage Number: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
fields Map<String>
filters List<Property Map>
forceTimezone Boolean
hashAlgorithm String
hostName String
localWindowsEventLogSourceId String
manualPrefixRegexp String
multilineProcessingEnabled Boolean
name String
renderMessages Boolean: When using legacy format, indicates if full event messages are collected
timezone String
useAutolineMatching Boolean

Outputs

All input properties are implicitly available as output properties. Additionally, the LocalWindowsEventLogSource resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing LocalWindowsEventLogSource Resource

Get an existing LocalWindowsEventLogSource resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: LocalWindowsEventLogSourceState, opts?: CustomResourceOptions): LocalWindowsEventLogSource

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_list: Optional[str] = None,
        automatic_date_parsing: Optional[bool] = None,
        category: Optional[str] = None,
        collector_id: Optional[float] = None,
        content_type: Optional[str] = None,
        cutoff_relative_time: Optional[str] = None,
        cutoff_timestamp: Optional[float] = None,
        default_date_formats: Optional[Sequence[LocalWindowsEventLogSourceDefaultDateFormatArgs]] = None,
        deny_list: Optional[str] = None,
        description: Optional[str] = None,
        event_format: Optional[float] = None,
        event_message: Optional[float] = None,
        fields: Optional[Mapping[str, str]] = None,
        filters: Optional[Sequence[LocalWindowsEventLogSourceFilterArgs]] = None,
        force_timezone: Optional[bool] = None,
        hash_algorithm: Optional[str] = None,
        host_name: Optional[str] = None,
        local_windows_event_log_source_id: Optional[str] = None,
        log_names: Optional[Sequence[str]] = None,
        manual_prefix_regexp: Optional[str] = None,
        multiline_processing_enabled: Optional[bool] = None,
        name: Optional[str] = None,
        render_messages: Optional[bool] = None,
        timezone: Optional[str] = None,
        use_autoline_matching: Optional[bool] = None) -> LocalWindowsEventLogSource

func GetLocalWindowsEventLogSource(ctx *Context, name string, id IDInput, state *LocalWindowsEventLogSourceState, opts ...ResourceOption) (*LocalWindowsEventLogSource, error)

public static LocalWindowsEventLogSource Get(string name, Input<string> id, LocalWindowsEventLogSourceState? state, CustomResourceOptions? opts = null)

public static LocalWindowsEventLogSource get(String name, Output<String> id, LocalWindowsEventLogSourceState state, CustomResourceOptions options)

resources:  _:    type: sumologic:LocalWindowsEventLogSource    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AllowList string: Comma-separated list of event IDs to allow
AutomaticDateParsing bool
Category string
CollectorId double
ContentType string
CutoffRelativeTime string
CutoffTimestamp double
DefaultDateFormats List<LocalWindowsEventLogSourceDefaultDateFormat>
DenyList string: Comma-separated list of event IDs to deny
Description string
EventFormat double: 0 for legacy format (XML), 1 for JSON format
EventMessage double: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
Fields Dictionary<string, string>
Filters List<LocalWindowsEventLogSourceFilter>
ForceTimezone bool
HashAlgorithm string
HostName string
LocalWindowsEventLogSourceId string
LogNames List<string>: List of Windows log types to collect (e.g., Security, Application, System)
ManualPrefixRegexp string
MultilineProcessingEnabled bool
Name string
RenderMessages bool: When using legacy format, indicates if full event messages are collected
Timezone string
UseAutolineMatching bool

AllowList string: Comma-separated list of event IDs to allow
AutomaticDateParsing bool
Category string
CollectorId float64
ContentType string
CutoffRelativeTime string
CutoffTimestamp float64
DefaultDateFormats []LocalWindowsEventLogSourceDefaultDateFormatArgs
DenyList string: Comma-separated list of event IDs to deny
Description string
EventFormat float64: 0 for legacy format (XML), 1 for JSON format
EventMessage float64: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
Fields map[string]string
Filters []LocalWindowsEventLogSourceFilterArgs
ForceTimezone bool
HashAlgorithm string
HostName string
LocalWindowsEventLogSourceId string
LogNames []string: List of Windows log types to collect (e.g., Security, Application, System)
ManualPrefixRegexp string
MultilineProcessingEnabled bool
Name string
RenderMessages bool: When using legacy format, indicates if full event messages are collected
Timezone string
UseAutolineMatching bool

allowList String: Comma-separated list of event IDs to allow
automaticDateParsing Boolean
category String
collectorId Double
contentType String
cutoffRelativeTime String
cutoffTimestamp Double
defaultDateFormats List<LocalWindowsEventLogSourceDefaultDateFormat>
denyList String: Comma-separated list of event IDs to deny
description String
eventFormat Double: 0 for legacy format (XML), 1 for JSON format
eventMessage Double: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
fields Map<String,String>
filters List<LocalWindowsEventLogSourceFilter>
forceTimezone Boolean
hashAlgorithm String
hostName String
localWindowsEventLogSourceId String
logNames List<String>: List of Windows log types to collect (e.g., Security, Application, System)
manualPrefixRegexp String
multilineProcessingEnabled Boolean
name String
renderMessages Boolean: When using legacy format, indicates if full event messages are collected
timezone String
useAutolineMatching Boolean

allowList string: Comma-separated list of event IDs to allow
automaticDateParsing boolean
category string
collectorId number
contentType string
cutoffRelativeTime string
cutoffTimestamp number
defaultDateFormats LocalWindowsEventLogSourceDefaultDateFormat[]
denyList string: Comma-separated list of event IDs to deny
description string
eventFormat number: 0 for legacy format (XML), 1 for JSON format
eventMessage number: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
fields {[key: string]: string}
filters LocalWindowsEventLogSourceFilter[]
forceTimezone boolean
hashAlgorithm string
hostName string
localWindowsEventLogSourceId string
logNames string[]: List of Windows log types to collect (e.g., Security, Application, System)
manualPrefixRegexp string
multilineProcessingEnabled boolean
name string
renderMessages boolean: When using legacy format, indicates if full event messages are collected
timezone string
useAutolineMatching boolean

allow_list str: Comma-separated list of event IDs to allow
automatic_date_parsing bool
category str
collector_id float
content_type str
cutoff_relative_time str
cutoff_timestamp float
default_date_formats Sequence[LocalWindowsEventLogSourceDefaultDateFormatArgs]
deny_list str: Comma-separated list of event IDs to deny
description str
event_format float: 0 for legacy format (XML), 1 for JSON format
event_message float: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
fields Mapping[str, str]
filters Sequence[LocalWindowsEventLogSourceFilterArgs]
force_timezone bool
hash_algorithm str
host_name str
local_windows_event_log_source_id str
log_names Sequence[str]: List of Windows log types to collect (e.g., Security, Application, System)
manual_prefix_regexp str
multiline_processing_enabled bool
name str
render_messages bool: When using legacy format, indicates if full event messages are collected
timezone str
use_autoline_matching bool

allowList String: Comma-separated list of event IDs to allow
automaticDateParsing Boolean
category String
collectorId Number
contentType String
cutoffRelativeTime String
cutoffTimestamp Number
defaultDateFormats List<Property Map>
denyList String: Comma-separated list of event IDs to deny
description String
eventFormat Number: 0 for legacy format (XML), 1 for JSON format
eventMessage Number: 0 for complete message, 1 for message title, 2 for metadata only. Required if event_format is 0
fields Map<String>
filters List<Property Map>
forceTimezone Boolean
hashAlgorithm String
hostName String
localWindowsEventLogSourceId String
logNames List<String>: List of Windows log types to collect (e.g., Security, Application, System)
manualPrefixRegexp String
multilineProcessingEnabled Boolean
name String
renderMessages Boolean: When using legacy format, indicates if full event messages are collected
timezone String
useAutolineMatching Boolean

Supporting Types

LocalWindowsEventLogSourceDefaultDateFormat, LocalWindowsEventLogSourceDefaultDateFormatArgs

Format string
Locator string

Format string
Locator string

format String
locator String

format string
locator string

format str
locator str

format String
locator String

LocalWindowsEventLogSourceFilter, LocalWindowsEventLogSourceFilterArgs

FilterType string
Name string
Regexp string
Mask string

FilterType string
Name string
Regexp string
Mask string

filterType String
name String
regexp String
mask String

filterType string
name string
regexp string
mask string

filter_type str
name str
regexp str
mask str

filterType String
name String
regexp String
mask String

Package Details

Repository: Sumo Logic sumologic/terraform-provider-sumologic
License
Notes: This Pulumi package is based on the sumologic Terraform Provider.

sumologic 3.1.3 published on Thursday, Aug 7, 2025 by sumologic

sumologic/terraform-provider-sumologic

sumologic.LocalWindowsEventLogSource

On this page

On this page

Create LocalWindowsEventLogSource Resource

Constructor syntax

Parameters

Constructor example

LocalWindowsEventLogSource Resource Properties

Inputs

Outputs

Look up Existing LocalWindowsEventLogSource Resource

Supporting Types

LocalWindowsEventLogSourceDefaultDateFormat, LocalWindowsEventLogSourceDefaultDateFormatArgs

LocalWindowsEventLogSourceFilter, LocalWindowsEventLogSourceFilterArgs

Package Details

On this page

On this page