1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. CloudNssFeed
Viewing docs for pulumi-resource-zia v1.3.8
published on Friday, Mar 13, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zia

zia.CloudNssFeed

zia logo
Viewing docs for pulumi-resource-zia v1.3.8
published on Friday, Mar 13, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zia

    The zia_cloud_nss_feed resource manages Cloud NSS (Nanolog Streaming Service) feeds in the Zscaler Internet Access (ZIA) cloud service. Cloud NSS feeds allow you to stream logs from ZIA to external SIEM or log management systems via HTTPS.

    Example Usage

    Cloud NSS Feed

    Example coming soon!

    Example coming soon!

    Example coming soon!

    import * as zia from "@bdzscaler/pulumi-zia";

const example = new zia.CloudNssFeed("example", {
    name: "Example NSS Feed",
    feedStatus: "ENABLED",
    nssLogType: "weblog",
    nssFeedType: "NSS_FOR_WEB",
    siemType: "SPLUNK",
    connectionUrl: "https://splunk.example.com:8088/services/collector",
    authenticationToken: "your-auth-token",
});

    import zscaler_pulumi_zia as zia

example = zia.CloudNssFeed("example",
    name="Example NSS Feed",
    feed_status="ENABLED",
    nss_log_type="weblog",
    nss_feed_type="NSS_FOR_WEB",
    siem_type="SPLUNK",
    connection_url="https://splunk.example.com:8088/services/collector",
    authentication_token="your-auth-token",
)

    resources:
  example:
    type: zia:CloudNssFeed
    properties:
      name: Example NSS Feed
      feedStatus: ENABLED
      nssLogType: weblog
      nssFeedType: NSS_FOR_WEB
      siemType: SPLUNK
      connectionUrl: https://splunk.example.com:8088/services/collector
      authenticationToken: your-auth-token

    Create CloudNssFeed Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CloudNssFeed(name: string, args?: CloudNssFeedArgs, opts?: CustomResourceOptions);
    @overload
def CloudNssFeed(resource_name: str,
                 args: Optional[CloudNssFeedArgs] = None,
                 opts: Optional[ResourceOptions] = None)

@overload
def CloudNssFeed(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 authentication_token: Optional[str] = None,
                 authentication_url: Optional[str] = None,
                 base64_encoded_certificate: Optional[str] = None,
                 buckets: Optional[Sequence[int]] = None,
                 casb_tenant: Optional[Sequence[int]] = None,
                 client_id: Optional[str] = None,
                 client_ips: Optional[Sequence[str]] = None,
                 client_secret: Optional[str] = None,
                 connection_headers: Optional[Sequence[str]] = None,
                 connection_url: Optional[str] = None,
                 custom_escaped_character: Optional[Sequence[str]] = None,
                 departments: Optional[Sequence[int]] = None,
                 dlp_dictionaries: Optional[Sequence[int]] = None,
                 dlp_engines: Optional[Sequence[int]] = None,
                 domains: Optional[Sequence[str]] = None,
                 eps_rate_limit: Optional[int] = None,
                 external_collaborators: Optional[Sequence[int]] = None,
                 external_owners: Optional[Sequence[int]] = None,
                 feed_output_format: Optional[str] = None,
                 feed_status: Optional[str] = None,
                 grant_type: Optional[str] = None,
                 internal_collaborators: Optional[Sequence[int]] = None,
                 itsm_object_type: Optional[Sequence[int]] = None,
                 json_array_toggle: Optional[bool] = None,
                 location_groups: Optional[Sequence[int]] = None,
                 locations: Optional[Sequence[int]] = None,
                 max_batch_size: Optional[int] = None,
                 name: Optional[str] = None,
                 nss_feed_type: Optional[str] = None,
                 nss_log_type: Optional[str] = None,
                 nss_type: Optional[str] = None,
                 nw_services: Optional[Sequence[int]] = None,
                 oauth_authentication: Optional[bool] = None,
                 rules: Optional[Sequence[int]] = None,
                 scope: Optional[str] = None,
                 sender_name: Optional[Sequence[int]] = None,
                 server_ips: Optional[Sequence[str]] = None,
                 siem_type: Optional[str] = None,
                 time_zone: Optional[str] = None,
                 url_categories: Optional[Sequence[int]] = None,
                 users: Optional[Sequence[int]] = None,
                 vpn_credentials: Optional[Sequence[int]] = None)
    func NewCloudNssFeed(ctx *Context, name string, args *CloudNssFeedArgs, opts ...ResourceOption) (*CloudNssFeed, error)
    public CloudNssFeed(string name, CloudNssFeedArgs? args = null, CustomResourceOptions? opts = null)
    public CloudNssFeed(String name, CloudNssFeedArgs args)
public CloudNssFeed(String name, CloudNssFeedArgs args, CustomResourceOptions options)

    type: zia:CloudNssFeed
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args CloudNssFeedArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CloudNssFeedArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CloudNssFeedArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CloudNssFeedArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CloudNssFeedArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var cloudNssFeedResource = new Zia.CloudNssFeed("cloudNssFeedResource", new()
{
    AuthenticationToken = "string",
    AuthenticationUrl = "string",
    Base64EncodedCertificate = "string",
    Buckets = new[]
    {
        0,
    },
    CasbTenant = new[]
    {
        0,
    },
    ClientId = "string",
    ClientIps = new[]
    {
        "string",
    },
    ClientSecret = "string",
    ConnectionHeaders = new[]
    {
        "string",
    },
    ConnectionUrl = "string",
    CustomEscapedCharacter = new[]
    {
        "string",
    },
    Departments = new[]
    {
        0,
    },
    DlpDictionaries = new[]
    {
        0,
    },
    DlpEngines = new[]
    {
        0,
    },
    Domains = new[]
    {
        "string",
    },
    EpsRateLimit = 0,
    ExternalCollaborators = new[]
    {
        0,
    },
    ExternalOwners = new[]
    {
        0,
    },
    FeedOutputFormat = "string",
    FeedStatus = "string",
    GrantType = "string",
    InternalCollaborators = new[]
    {
        0,
    },
    ItsmObjectType = new[]
    {
        0,
    },
    JsonArrayToggle = false,
    LocationGroups = new[]
    {
        0,
    },
    Locations = new[]
    {
        0,
    },
    MaxBatchSize = 0,
    Name = "string",
    NssFeedType = "string",
    NssLogType = "string",
    NssType = "string",
    NwServices = new[]
    {
        0,
    },
    OauthAuthentication = false,
    Rules = new[]
    {
        0,
    },
    Scope = "string",
    SenderName = new[]
    {
        0,
    },
    ServerIps = new[]
    {
        "string",
    },
    SiemType = "string",
    TimeZone = "string",
    UrlCategories = new[]
    {
        0,
    },
    Users = new[]
    {
        0,
    },
    VpnCredentials = new[]
    {
        0,
    },
});

    example, err := zia.NewCloudNssFeed(ctx, "cloudNssFeedResource", &zia.CloudNssFeedArgs{
	AuthenticationToken:      pulumi.String("string"),
	AuthenticationUrl:        pulumi.String("string"),
	Base64EncodedCertificate: pulumi.String("string"),
	Buckets: pulumi.IntArray{
		pulumi.Int(0),
	},
	CasbTenant: pulumi.IntArray{
		pulumi.Int(0),
	},
	ClientId: pulumi.String("string"),
	ClientIps: pulumi.StringArray{
		pulumi.String("string"),
	},
	ClientSecret: pulumi.String("string"),
	ConnectionHeaders: pulumi.StringArray{
		pulumi.String("string"),
	},
	ConnectionUrl: pulumi.String("string"),
	CustomEscapedCharacter: pulumi.StringArray{
		pulumi.String("string"),
	},
	Departments: pulumi.IntArray{
		pulumi.Int(0),
	},
	DlpDictionaries: pulumi.IntArray{
		pulumi.Int(0),
	},
	DlpEngines: pulumi.IntArray{
		pulumi.Int(0),
	},
	Domains: pulumi.StringArray{
		pulumi.String("string"),
	},
	EpsRateLimit: pulumi.Int(0),
	ExternalCollaborators: pulumi.IntArray{
		pulumi.Int(0),
	},
	ExternalOwners: pulumi.IntArray{
		pulumi.Int(0),
	},
	FeedOutputFormat: pulumi.String("string"),
	FeedStatus:       pulumi.String("string"),
	GrantType:        pulumi.String("string"),
	InternalCollaborators: pulumi.IntArray{
		pulumi.Int(0),
	},
	ItsmObjectType: pulumi.IntArray{
		pulumi.Int(0),
	},
	JsonArrayToggle: pulumi.Bool(false),
	LocationGroups: pulumi.IntArray{
		pulumi.Int(0),
	},
	Locations: pulumi.IntArray{
		pulumi.Int(0),
	},
	MaxBatchSize: pulumi.Int(0),
	Name:         pulumi.String("string"),
	NssFeedType:  pulumi.String("string"),
	NssLogType:   pulumi.String("string"),
	NssType:      pulumi.String("string"),
	NwServices: pulumi.IntArray{
		pulumi.Int(0),
	},
	OauthAuthentication: pulumi.Bool(false),
	Rules: pulumi.IntArray{
		pulumi.Int(0),
	},
	Scope: pulumi.String("string"),
	SenderName: pulumi.IntArray{
		pulumi.Int(0),
	},
	ServerIps: pulumi.StringArray{
		pulumi.String("string"),
	},
	SiemType: pulumi.String("string"),
	TimeZone: pulumi.String("string"),
	UrlCategories: pulumi.IntArray{
		pulumi.Int(0),
	},
	Users: pulumi.IntArray{
		pulumi.Int(0),
	},
	VpnCredentials: pulumi.IntArray{
		pulumi.Int(0),
	},
})

    var cloudNssFeedResource = new CloudNssFeed("cloudNssFeedResource", CloudNssFeedArgs.builder()
    .authenticationToken("string")
    .authenticationUrl("string")
    .base64EncodedCertificate("string")
    .buckets(0)
    .casbTenant(0)
    .clientId("string")
    .clientIps("string")
    .clientSecret("string")
    .connectionHeaders("string")
    .connectionUrl("string")
    .customEscapedCharacter("string")
    .departments(0)
    .dlpDictionaries(0)
    .dlpEngines(0)
    .domains("string")
    .epsRateLimit(0)
    .externalCollaborators(0)
    .externalOwners(0)
    .feedOutputFormat("string")
    .feedStatus("string")
    .grantType("string")
    .internalCollaborators(0)
    .itsmObjectType(0)
    .jsonArrayToggle(false)
    .locationGroups(0)
    .locations(0)
    .maxBatchSize(0)
    .name("string")
    .nssFeedType("string")
    .nssLogType("string")
    .nssType("string")
    .nwServices(0)
    .oauthAuthentication(false)
    .rules(0)
    .scope("string")
    .senderName(0)
    .serverIps("string")
    .siemType("string")
    .timeZone("string")
    .urlCategories(0)
    .users(0)
    .vpnCredentials(0)
    .build());

    cloud_nss_feed_resource = zia.CloudNssFeed("cloudNssFeedResource",
    authentication_token="string",
    authentication_url="string",
    base64_encoded_certificate="string",
    buckets=[0],
    casb_tenant=[0],
    client_id="string",
    client_ips=["string"],
    client_secret="string",
    connection_headers=["string"],
    connection_url="string",
    custom_escaped_character=["string"],
    departments=[0],
    dlp_dictionaries=[0],
    dlp_engines=[0],
    domains=["string"],
    eps_rate_limit=0,
    external_collaborators=[0],
    external_owners=[0],
    feed_output_format="string",
    feed_status="string",
    grant_type="string",
    internal_collaborators=[0],
    itsm_object_type=[0],
    json_array_toggle=False,
    location_groups=[0],
    locations=[0],
    max_batch_size=0,
    name="string",
    nss_feed_type="string",
    nss_log_type="string",
    nss_type="string",
    nw_services=[0],
    oauth_authentication=False,
    rules=[0],
    scope="string",
    sender_name=[0],
    server_ips=["string"],
    siem_type="string",
    time_zone="string",
    url_categories=[0],
    users=[0],
    vpn_credentials=[0])

    const cloudNssFeedResource = new zia.CloudNssFeed("cloudNssFeedResource", {
    authenticationToken: "string",
    authenticationUrl: "string",
    base64EncodedCertificate: "string",
    buckets: [0],
    casbTenant: [0],
    clientId: "string",
    clientIps: ["string"],
    clientSecret: "string",
    connectionHeaders: ["string"],
    connectionUrl: "string",
    customEscapedCharacter: ["string"],
    departments: [0],
    dlpDictionaries: [0],
    dlpEngines: [0],
    domains: ["string"],
    epsRateLimit: 0,
    externalCollaborators: [0],
    externalOwners: [0],
    feedOutputFormat: "string",
    feedStatus: "string",
    grantType: "string",
    internalCollaborators: [0],
    itsmObjectType: [0],
    jsonArrayToggle: false,
    locationGroups: [0],
    locations: [0],
    maxBatchSize: 0,
    name: "string",
    nssFeedType: "string",
    nssLogType: "string",
    nssType: "string",
    nwServices: [0],
    oauthAuthentication: false,
    rules: [0],
    scope: "string",
    senderName: [0],
    serverIps: ["string"],
    siemType: "string",
    timeZone: "string",
    urlCategories: [0],
    users: [0],
    vpnCredentials: [0],
});

    type: zia:CloudNssFeed
properties:
    authenticationToken: string
    authenticationUrl: string
    base64EncodedCertificate: string
    buckets:
        - 0
    casbTenant:
        - 0
    clientId: string
    clientIps:
        - string
    clientSecret: string
    connectionHeaders:
        - string
    connectionUrl: string
    customEscapedCharacter:
        - string
    departments:
        - 0
    dlpDictionaries:
        - 0
    dlpEngines:
        - 0
    domains:
        - string
    epsRateLimit: 0
    externalCollaborators:
        - 0
    externalOwners:
        - 0
    feedOutputFormat: string
    feedStatus: string
    grantType: string
    internalCollaborators:
        - 0
    itsmObjectType:
        - 0
    jsonArrayToggle: false
    locationGroups:
        - 0
    locations:
        - 0
    maxBatchSize: 0
    name: string
    nssFeedType: string
    nssLogType: string
    nssType: string
    nwServices:
        - 0
    oauthAuthentication: false
    rules:
        - 0
    scope: string
    senderName:
        - 0
    serverIps:
        - string
    siemType: string
    timeZone: string
    urlCategories:
        - 0
    users:
        - 0
    vpnCredentials:
        - 0

    CloudNssFeed Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CloudNssFeed resource accepts the following input properties:

    AuthenticationToken string
    Authentication token for the SIEM connection.
    AuthenticationUrl string
    OAuth authentication URL for the SIEM connection.
    Base64EncodedCertificate string
    Base64-encoded certificate for TLS mutual authentication.
    Buckets List<int>
    Filter: IDs of buckets.
    CasbTenant List<int>
    Filter: IDs of CASB tenants.
    ClientId string
    OAuth client ID for the SIEM connection.
    ClientIps List<string>
    Filter: client IP addresses.
    ClientSecret string
    OAuth client secret for the SIEM connection.
    ConnectionHeaders List<string>
    Custom HTTP headers for the connection.
    ConnectionUrl string
    The HTTPS connection URL for the SIEM endpoint.
    CustomEscapedCharacter List<string>
    Custom characters to escape in feed output.
    Departments List<int>
    Filter: IDs of departments.
    DlpDictionaries List<int>
    Filter: IDs of DLP dictionaries.
    DlpEngines List<int>
    Filter: IDs of DLP engines.
    Domains List<string>
    Filter: domain names.
    EpsRateLimit int
    Events per second rate limit.
    ExternalCollaborators List<int>
    Filter: IDs of external collaborators.
    ExternalOwners List<int>
    Filter: IDs of external owners.
    FeedOutputFormat string
    The output format for the feed.
    FeedStatus string
    Status of the feed. Valid values: ENABLED, DISABLED.
    GrantType string
    OAuth grant type.
    InternalCollaborators List<int>
    Filter: IDs of internal collaborators.
    ItsmObjectType List<int>
    Filter: IDs of ITSM object types.
    JsonArrayToggle bool
    Whether to output logs as a JSON array.
    LocationGroups List<int>
    Filter: IDs of location groups.
    Locations List<int>
    Filter: IDs of locations.
    MaxBatchSize int
    Maximum batch size for log delivery.
    Name string
    The name of the Cloud NSS feed.
    NssFeedType string
    The NSS feed type (e.g. NSS_FOR_WEB, NSS_FOR_FIREWALL).
    NssLogType string
    The NSS log type (e.g. weblog, firewalllog, dnslog).
    NssType string
    The NSS type.
    NwServices List<int>
    Filter: IDs of network services.
    OauthAuthentication bool
    Whether to use OAuth authentication for the SIEM connection.
    Rules List<int>
    Filter: IDs of rules.
    Scope string
    OAuth scope.
    SenderName List<int>
    Filter: IDs of sender names.
    ServerIps List<string>
    Filter: server IP addresses.
    SiemType string
    The SIEM type (e.g. SPLUNK, QRADAR, SENTINEL).
    TimeZone string
    The timezone for log timestamps.
    UrlCategories List<int>
    Filter: IDs of URL categories.
    Users List<int>
    Filter: IDs of users.
    VpnCredentials List<int>
    Filter: IDs of VPN credentials.
    AuthenticationToken string
    Authentication token for the SIEM connection.
    AuthenticationUrl string
    OAuth authentication URL for the SIEM connection.
    Base64EncodedCertificate string
    Base64-encoded certificate for TLS mutual authentication.
    Buckets []int
    Filter: IDs of buckets.
    CasbTenant []int
    Filter: IDs of CASB tenants.
    ClientId string
    OAuth client ID for the SIEM connection.
    ClientIps []string
    Filter: client IP addresses.
    ClientSecret string
    OAuth client secret for the SIEM connection.
    ConnectionHeaders []string
    Custom HTTP headers for the connection.
    ConnectionUrl string
    The HTTPS connection URL for the SIEM endpoint.
    CustomEscapedCharacter []string
    Custom characters to escape in feed output.
    Departments []int
    Filter: IDs of departments.
    DlpDictionaries []int
    Filter: IDs of DLP dictionaries.
    DlpEngines []int
    Filter: IDs of DLP engines.
    Domains []string
    Filter: domain names.
    EpsRateLimit int
    Events per second rate limit.
    ExternalCollaborators []int
    Filter: IDs of external collaborators.
    ExternalOwners []int
    Filter: IDs of external owners.
    FeedOutputFormat string
    The output format for the feed.
    FeedStatus string
    Status of the feed. Valid values: ENABLED, DISABLED.
    GrantType string
    OAuth grant type.
    InternalCollaborators []int
    Filter: IDs of internal collaborators.
    ItsmObjectType []int
    Filter: IDs of ITSM object types.
    JsonArrayToggle bool
    Whether to output logs as a JSON array.
    LocationGroups []int
    Filter: IDs of location groups.
    Locations []int
    Filter: IDs of locations.
    MaxBatchSize int
    Maximum batch size for log delivery.
    Name string
    The name of the Cloud NSS feed.
    NssFeedType string
    The NSS feed type (e.g. NSS_FOR_WEB, NSS_FOR_FIREWALL).
    NssLogType string
    The NSS log type (e.g. weblog, firewalllog, dnslog).
    NssType string
    The NSS type.
    NwServices []int
    Filter: IDs of network services.
    OauthAuthentication bool
    Whether to use OAuth authentication for the SIEM connection.
    Rules []int
    Filter: IDs of rules.
    Scope string
    OAuth scope.
    SenderName []int
    Filter: IDs of sender names.
    ServerIps []string
    Filter: server IP addresses.
    SiemType string
    The SIEM type (e.g. SPLUNK, QRADAR, SENTINEL).
    TimeZone string
    The timezone for log timestamps.
    UrlCategories []int
    Filter: IDs of URL categories.
    Users []int
    Filter: IDs of users.
    VpnCredentials []int
    Filter: IDs of VPN credentials.
    authenticationToken String
    Authentication token for the SIEM connection.
    authenticationUrl String
    OAuth authentication URL for the SIEM connection.
    base64EncodedCertificate String
    Base64-encoded certificate for TLS mutual authentication.
    buckets List<Integer>
    Filter: IDs of buckets.
    casbTenant List<Integer>
    Filter: IDs of CASB tenants.
    clientId String
    OAuth client ID for the SIEM connection.
    clientIps List<String>
    Filter: client IP addresses.
    clientSecret String
    OAuth client secret for the SIEM connection.
    connectionHeaders List<String>
    Custom HTTP headers for the connection.
    connectionUrl String
    The HTTPS connection URL for the SIEM endpoint.
    customEscapedCharacter List<String>
    Custom characters to escape in feed output.
    departments List<Integer>
    Filter: IDs of departments.
    dlpDictionaries List<Integer>
    Filter: IDs of DLP dictionaries.
    dlpEngines List<Integer>
    Filter: IDs of DLP engines.
    domains List<String>
    Filter: domain names.
    epsRateLimit Integer
    Events per second rate limit.
    externalCollaborators List<Integer>
    Filter: IDs of external collaborators.
    externalOwners List<Integer>
    Filter: IDs of external owners.
    feedOutputFormat String
    The output format for the feed.
    feedStatus String
    Status of the feed. Valid values: ENABLED, DISABLED.
    grantType String
    OAuth grant type.
    internalCollaborators List<Integer>
    Filter: IDs of internal collaborators.
    itsmObjectType List<Integer>
    Filter: IDs of ITSM object types.
    jsonArrayToggle Boolean
    Whether to output logs as a JSON array.
    locationGroups List<Integer>
    Filter: IDs of location groups.
    locations List<Integer>
    Filter: IDs of locations.
    maxBatchSize Integer
    Maximum batch size for log delivery.
    name String
    The name of the Cloud NSS feed.
    nssFeedType String
    The NSS feed type (e.g. NSS_FOR_WEB, NSS_FOR_FIREWALL).
    nssLogType String
    The NSS log type (e.g. weblog, firewalllog, dnslog).
    nssType String
    The NSS type.
    nwServices List<Integer>
    Filter: IDs of network services.
    oauthAuthentication Boolean
    Whether to use OAuth authentication for the SIEM connection.
    rules List<Integer>
    Filter: IDs of rules.
    scope String
    OAuth scope.
    senderName List<Integer>
    Filter: IDs of sender names.
    serverIps List<String>
    Filter: server IP addresses.
    siemType String
    The SIEM type (e.g. SPLUNK, QRADAR, SENTINEL).
    timeZone String
    The timezone for log timestamps.
    urlCategories List<Integer>
    Filter: IDs of URL categories.
    users List<Integer>
    Filter: IDs of users.
    vpnCredentials List<Integer>
    Filter: IDs of VPN credentials.
    authenticationToken string
    Authentication token for the SIEM connection.
    authenticationUrl string
    OAuth authentication URL for the SIEM connection.
    base64EncodedCertificate string
    Base64-encoded certificate for TLS mutual authentication.
    buckets number[]
    Filter: IDs of buckets.
    casbTenant number[]
    Filter: IDs of CASB tenants.
    clientId string
    OAuth client ID for the SIEM connection.
    clientIps string[]
    Filter: client IP addresses.
    clientSecret string
    OAuth client secret for the SIEM connection.
    connectionHeaders string[]
    Custom HTTP headers for the connection.
    connectionUrl string
    The HTTPS connection URL for the SIEM endpoint.
    customEscapedCharacter string[]
    Custom characters to escape in feed output.
    departments number[]
    Filter: IDs of departments.
    dlpDictionaries number[]
    Filter: IDs of DLP dictionaries.
    dlpEngines number[]
    Filter: IDs of DLP engines.
    domains string[]
    Filter: domain names.
    epsRateLimit number
    Events per second rate limit.
    externalCollaborators number[]
    Filter: IDs of external collaborators.
    externalOwners number[]
    Filter: IDs of external owners.
    feedOutputFormat string
    The output format for the feed.
    feedStatus string
    Status of the feed. Valid values: ENABLED, DISABLED.
    grantType string
    OAuth grant type.
    internalCollaborators number[]
    Filter: IDs of internal collaborators.
    itsmObjectType number[]
    Filter: IDs of ITSM object types.
    jsonArrayToggle boolean
    Whether to output logs as a JSON array.
    locationGroups number[]
    Filter: IDs of location groups.
    locations number[]
    Filter: IDs of locations.
    maxBatchSize number
    Maximum batch size for log delivery.
    name string
    The name of the Cloud NSS feed.
    nssFeedType string
    The NSS feed type (e.g. NSS_FOR_WEB, NSS_FOR_FIREWALL).
    nssLogType string
    The NSS log type (e.g. weblog, firewalllog, dnslog).
    nssType string
    The NSS type.
    nwServices number[]
    Filter: IDs of network services.
    oauthAuthentication boolean
    Whether to use OAuth authentication for the SIEM connection.
    rules number[]
    Filter: IDs of rules.
    scope string
    OAuth scope.
    senderName number[]
    Filter: IDs of sender names.
    serverIps string[]
    Filter: server IP addresses.
    siemType string
    The SIEM type (e.g. SPLUNK, QRADAR, SENTINEL).
    timeZone string
    The timezone for log timestamps.
    urlCategories number[]
    Filter: IDs of URL categories.
    users number[]
    Filter: IDs of users.
    vpnCredentials number[]
    Filter: IDs of VPN credentials.
    authentication_token str
    Authentication token for the SIEM connection.
    authentication_url str
    OAuth authentication URL for the SIEM connection.
    base64_encoded_certificate str
    Base64-encoded certificate for TLS mutual authentication.
    buckets Sequence[int]
    Filter: IDs of buckets.
    casb_tenant Sequence[int]
    Filter: IDs of CASB tenants.
    client_id str
    OAuth client ID for the SIEM connection.
    client_ips Sequence[str]
    Filter: client IP addresses.
    client_secret str
    OAuth client secret for the SIEM connection.
    connection_headers Sequence[str]
    Custom HTTP headers for the connection.
    connection_url str
    The HTTPS connection URL for the SIEM endpoint.
    custom_escaped_character Sequence[str]
    Custom characters to escape in feed output.
    departments Sequence[int]
    Filter: IDs of departments.
    dlp_dictionaries Sequence[int]
    Filter: IDs of DLP dictionaries.
    dlp_engines Sequence[int]
    Filter: IDs of DLP engines.
    domains Sequence[str]
    Filter: domain names.
    eps_rate_limit int
    Events per second rate limit.
    external_collaborators Sequence[int]
    Filter: IDs of external collaborators.
    external_owners Sequence[int]
    Filter: IDs of external owners.
    feed_output_format str
    The output format for the feed.
    feed_status str
    Status of the feed. Valid values: ENABLED, DISABLED.
    grant_type str
    OAuth grant type.
    internal_collaborators Sequence[int]
    Filter: IDs of internal collaborators.
    itsm_object_type Sequence[int]
    Filter: IDs of ITSM object types.
    json_array_toggle bool
    Whether to output logs as a JSON array.
    location_groups Sequence[int]
    Filter: IDs of location groups.
    locations Sequence[int]
    Filter: IDs of locations.
    max_batch_size int
    Maximum batch size for log delivery.
    name str
    The name of the Cloud NSS feed.
    nss_feed_type str
    The NSS feed type (e.g. NSS_FOR_WEB, NSS_FOR_FIREWALL).
    nss_log_type str
    The NSS log type (e.g. weblog, firewalllog, dnslog).
    nss_type str
    The NSS type.
    nw_services Sequence[int]
    Filter: IDs of network services.
    oauth_authentication bool
    Whether to use OAuth authentication for the SIEM connection.
    rules Sequence[int]
    Filter: IDs of rules.
    scope str
    OAuth scope.
    sender_name Sequence[int]
    Filter: IDs of sender names.
    server_ips Sequence[str]
    Filter: server IP addresses.
    siem_type str
    The SIEM type (e.g. SPLUNK, QRADAR, SENTINEL).
    time_zone str
    The timezone for log timestamps.
    url_categories Sequence[int]
    Filter: IDs of URL categories.
    users Sequence[int]
    Filter: IDs of users.
    vpn_credentials Sequence[int]
    Filter: IDs of VPN credentials.
    authenticationToken String
    Authentication token for the SIEM connection.
    authenticationUrl String
    OAuth authentication URL for the SIEM connection.
    base64EncodedCertificate String
    Base64-encoded certificate for TLS mutual authentication.
    buckets List<Number>
    Filter: IDs of buckets.
    casbTenant List<Number>
    Filter: IDs of CASB tenants.
    clientId String
    OAuth client ID for the SIEM connection.
    clientIps List<String>
    Filter: client IP addresses.
    clientSecret String
    OAuth client secret for the SIEM connection.
    connectionHeaders List<String>
    Custom HTTP headers for the connection.
    connectionUrl String
    The HTTPS connection URL for the SIEM endpoint.
    customEscapedCharacter List<String>
    Custom characters to escape in feed output.
    departments List<Number>
    Filter: IDs of departments.
    dlpDictionaries List<Number>
    Filter: IDs of DLP dictionaries.
    dlpEngines List<Number>
    Filter: IDs of DLP engines.
    domains List<String>
    Filter: domain names.
    epsRateLimit Number
    Events per second rate limit.
    externalCollaborators List<Number>
    Filter: IDs of external collaborators.
    externalOwners List<Number>
    Filter: IDs of external owners.
    feedOutputFormat String
    The output format for the feed.
    feedStatus String
    Status of the feed. Valid values: ENABLED, DISABLED.
    grantType String
    OAuth grant type.
    internalCollaborators List<Number>
    Filter: IDs of internal collaborators.
    itsmObjectType List<Number>
    Filter: IDs of ITSM object types.
    jsonArrayToggle Boolean
    Whether to output logs as a JSON array.
    locationGroups List<Number>
    Filter: IDs of location groups.
    locations List<Number>
    Filter: IDs of locations.
    maxBatchSize Number
    Maximum batch size for log delivery.
    name String
    The name of the Cloud NSS feed.
    nssFeedType String
    The NSS feed type (e.g. NSS_FOR_WEB, NSS_FOR_FIREWALL).
    nssLogType String
    The NSS log type (e.g. weblog, firewalllog, dnslog).
    nssType String
    The NSS type.
    nwServices List<Number>
    Filter: IDs of network services.
    oauthAuthentication Boolean
    Whether to use OAuth authentication for the SIEM connection.
    rules List<Number>
    Filter: IDs of rules.
    scope String
    OAuth scope.
    senderName List<Number>
    Filter: IDs of sender names.
    serverIps List<String>
    Filter: server IP addresses.
    siemType String
    The SIEM type (e.g. SPLUNK, QRADAR, SENTINEL).
    timeZone String
    The timezone for log timestamps.
    urlCategories List<Number>
    Filter: IDs of URL categories.
    users List<Number>
    Filter: IDs of users.
    vpnCredentials List<Number>
    Filter: IDs of VPN credentials.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CloudNssFeed resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    NssId int
    The system-generated ID of the Cloud NSS feed.
    Id string
    The provider-assigned unique ID for this managed resource.
    NssId int
    The system-generated ID of the Cloud NSS feed.
    id String
    The provider-assigned unique ID for this managed resource.
    nssId Integer
    The system-generated ID of the Cloud NSS feed.
    id string
    The provider-assigned unique ID for this managed resource.
    nssId number
    The system-generated ID of the Cloud NSS feed.
    id str
    The provider-assigned unique ID for this managed resource.
    nss_id int
    The system-generated ID of the Cloud NSS feed.
    id String
    The provider-assigned unique ID for this managed resource.
    nssId Number
    The system-generated ID of the Cloud NSS feed.

    Import

    An existing Cloud NSS Feed can be imported using its resource ID, e.g.

    $ pulumi import zia:index:CloudNssFeed example 12345

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    zia logo
    Viewing docs for pulumi-resource-zia v1.3.8
    published on Friday, Mar 13, 2026 by Zscaler
    Schema (JSON)
    zscaler/pulumi-zia
      Try Pulumi Cloud free. Your team will thank you.