splunk

package
v1.2.6 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 21, 2024 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Overview

A Pulumi package for creating and managing splunk cloud resources.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AdminSamlGroups

type AdminSamlGroups struct {
	pulumi.CustomResourceState

	// The name of the external group.
	Name pulumi.StringOutput `pulumi:"name"`
	// List of internal roles assigned to the group.
	Roles pulumi.StringArrayOutput `pulumi:"roles"`
}

## # Resource: AdminSamlGroups

Manage external groups in an IdP response to internal Splunk roles.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewAdminSamlGroups(ctx, "saml-group", &splunk.AdminSamlGroupsArgs{
			Roles: pulumi.StringArray{
				pulumi.String("admin"),
				pulumi.String("power"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

## Import

SAML groups can be imported using the id, e.g.

```sh $ pulumi import splunk:index/adminSamlGroups:AdminSamlGroups saml-group mygroup ```

func GetAdminSamlGroups

func GetAdminSamlGroups(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AdminSamlGroupsState, opts ...pulumi.ResourceOption) (*AdminSamlGroups, error)

GetAdminSamlGroups gets an existing AdminSamlGroups resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAdminSamlGroups

func NewAdminSamlGroups(ctx *pulumi.Context,
	name string, args *AdminSamlGroupsArgs, opts ...pulumi.ResourceOption) (*AdminSamlGroups, error)

NewAdminSamlGroups registers a new resource with the given unique name, arguments, and options.

func (*AdminSamlGroups) ElementType

func (*AdminSamlGroups) ElementType() reflect.Type

func (*AdminSamlGroups) ToAdminSamlGroupsOutput

func (i *AdminSamlGroups) ToAdminSamlGroupsOutput() AdminSamlGroupsOutput

func (*AdminSamlGroups) ToAdminSamlGroupsOutputWithContext

func (i *AdminSamlGroups) ToAdminSamlGroupsOutputWithContext(ctx context.Context) AdminSamlGroupsOutput

type AdminSamlGroupsArgs

type AdminSamlGroupsArgs struct {
	// The name of the external group.
	Name pulumi.StringPtrInput
	// List of internal roles assigned to the group.
	Roles pulumi.StringArrayInput
}

The set of arguments for constructing a AdminSamlGroups resource.

func (AdminSamlGroupsArgs) ElementType

func (AdminSamlGroupsArgs) ElementType() reflect.Type

type AdminSamlGroupsArray added in v0.2.1

type AdminSamlGroupsArray []AdminSamlGroupsInput

func (AdminSamlGroupsArray) ElementType added in v0.2.1

func (AdminSamlGroupsArray) ElementType() reflect.Type

func (AdminSamlGroupsArray) ToAdminSamlGroupsArrayOutput added in v0.2.1

func (i AdminSamlGroupsArray) ToAdminSamlGroupsArrayOutput() AdminSamlGroupsArrayOutput

func (AdminSamlGroupsArray) ToAdminSamlGroupsArrayOutputWithContext added in v0.2.1

func (i AdminSamlGroupsArray) ToAdminSamlGroupsArrayOutputWithContext(ctx context.Context) AdminSamlGroupsArrayOutput

type AdminSamlGroupsArrayInput added in v0.2.1

type AdminSamlGroupsArrayInput interface {
	pulumi.Input

	ToAdminSamlGroupsArrayOutput() AdminSamlGroupsArrayOutput
	ToAdminSamlGroupsArrayOutputWithContext(context.Context) AdminSamlGroupsArrayOutput
}

AdminSamlGroupsArrayInput is an input type that accepts AdminSamlGroupsArray and AdminSamlGroupsArrayOutput values. You can construct a concrete instance of `AdminSamlGroupsArrayInput` via:

AdminSamlGroupsArray{ AdminSamlGroupsArgs{...} }

type AdminSamlGroupsArrayOutput added in v0.2.1

type AdminSamlGroupsArrayOutput struct{ *pulumi.OutputState }

func (AdminSamlGroupsArrayOutput) ElementType added in v0.2.1

func (AdminSamlGroupsArrayOutput) ElementType() reflect.Type

func (AdminSamlGroupsArrayOutput) Index added in v0.2.1

func (AdminSamlGroupsArrayOutput) ToAdminSamlGroupsArrayOutput added in v0.2.1

func (o AdminSamlGroupsArrayOutput) ToAdminSamlGroupsArrayOutput() AdminSamlGroupsArrayOutput

func (AdminSamlGroupsArrayOutput) ToAdminSamlGroupsArrayOutputWithContext added in v0.2.1

func (o AdminSamlGroupsArrayOutput) ToAdminSamlGroupsArrayOutputWithContext(ctx context.Context) AdminSamlGroupsArrayOutput

type AdminSamlGroupsInput

type AdminSamlGroupsInput interface {
	pulumi.Input

	ToAdminSamlGroupsOutput() AdminSamlGroupsOutput
	ToAdminSamlGroupsOutputWithContext(ctx context.Context) AdminSamlGroupsOutput
}

type AdminSamlGroupsMap added in v0.2.1

type AdminSamlGroupsMap map[string]AdminSamlGroupsInput

func (AdminSamlGroupsMap) ElementType added in v0.2.1

func (AdminSamlGroupsMap) ElementType() reflect.Type

func (AdminSamlGroupsMap) ToAdminSamlGroupsMapOutput added in v0.2.1

func (i AdminSamlGroupsMap) ToAdminSamlGroupsMapOutput() AdminSamlGroupsMapOutput

func (AdminSamlGroupsMap) ToAdminSamlGroupsMapOutputWithContext added in v0.2.1

func (i AdminSamlGroupsMap) ToAdminSamlGroupsMapOutputWithContext(ctx context.Context) AdminSamlGroupsMapOutput

type AdminSamlGroupsMapInput added in v0.2.1

type AdminSamlGroupsMapInput interface {
	pulumi.Input

	ToAdminSamlGroupsMapOutput() AdminSamlGroupsMapOutput
	ToAdminSamlGroupsMapOutputWithContext(context.Context) AdminSamlGroupsMapOutput
}

AdminSamlGroupsMapInput is an input type that accepts AdminSamlGroupsMap and AdminSamlGroupsMapOutput values. You can construct a concrete instance of `AdminSamlGroupsMapInput` via:

AdminSamlGroupsMap{ "key": AdminSamlGroupsArgs{...} }

type AdminSamlGroupsMapOutput added in v0.2.1

type AdminSamlGroupsMapOutput struct{ *pulumi.OutputState }

func (AdminSamlGroupsMapOutput) ElementType added in v0.2.1

func (AdminSamlGroupsMapOutput) ElementType() reflect.Type

func (AdminSamlGroupsMapOutput) MapIndex added in v0.2.1

func (AdminSamlGroupsMapOutput) ToAdminSamlGroupsMapOutput added in v0.2.1

func (o AdminSamlGroupsMapOutput) ToAdminSamlGroupsMapOutput() AdminSamlGroupsMapOutput

func (AdminSamlGroupsMapOutput) ToAdminSamlGroupsMapOutputWithContext added in v0.2.1

func (o AdminSamlGroupsMapOutput) ToAdminSamlGroupsMapOutputWithContext(ctx context.Context) AdminSamlGroupsMapOutput

type AdminSamlGroupsOutput

type AdminSamlGroupsOutput struct{ *pulumi.OutputState }

func (AdminSamlGroupsOutput) ElementType

func (AdminSamlGroupsOutput) ElementType() reflect.Type

func (AdminSamlGroupsOutput) Name added in v1.1.5

The name of the external group.

func (AdminSamlGroupsOutput) Roles added in v1.1.5

List of internal roles assigned to the group.

func (AdminSamlGroupsOutput) ToAdminSamlGroupsOutput

func (o AdminSamlGroupsOutput) ToAdminSamlGroupsOutput() AdminSamlGroupsOutput

func (AdminSamlGroupsOutput) ToAdminSamlGroupsOutputWithContext

func (o AdminSamlGroupsOutput) ToAdminSamlGroupsOutputWithContext(ctx context.Context) AdminSamlGroupsOutput

type AdminSamlGroupsState

type AdminSamlGroupsState struct {
	// The name of the external group.
	Name pulumi.StringPtrInput
	// List of internal roles assigned to the group.
	Roles pulumi.StringArrayInput
}

func (AdminSamlGroupsState) ElementType

func (AdminSamlGroupsState) ElementType() reflect.Type

type AppsLocal

type AppsLocal struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl AppsLocalAclOutput `pulumi:"acl"`
	// Splunkbase session token for operations like install and update that require login. Use auth or session when installing or updating an app through Splunkbase.
	Auth pulumi.StringPtrOutput `pulumi:"auth"`
	// For apps posted to Splunkbase, use your Splunk account username. For internal apps, include your name and contact information.
	Author pulumi.StringOutput `pulumi:"author"`
	// Custom setup complete indication:
	// <br>true = Custom app setup complete.
	// <br>false = Custom app setup not complete.
	Configured pulumi.BoolOutput `pulumi:"configured"`
	// Short app description also displayed below the app title in Splunk Web Launcher.
	Description pulumi.StringOutput `pulumi:"description"`
	// Custom app name. Overrides name when installing an app from a file where filename is set to true. See also filename.
	ExplicitAppname pulumi.StringPtrOutput `pulumi:"explicitAppname"`
	// Indicates whether to use the name value as the app source location.
	// <br>true indicates that name is a path to a file to install.
	// <br>false indicates that name is the literal app name and that the app is created from Splunkbase using a template.
	Filename pulumi.BoolPtrOutput `pulumi:"filename"`
	// App name displayed in Splunk Web, from five to eighty characters excluding the prefix "Splunk for".
	Label pulumi.StringOutput `pulumi:"label"`
	// Literal app name or path for the file to install, depending on the value of filename.
	// <br>filename = false indicates that name is the literal app name and that the app is created from Splunkbase using a template.
	// <br>filename = true indicates that name is the URL or path to the local .tar, .tgz or .spl file. If name is the Splunkbase URL, set auth or session to authenticate the request.
	// The app folder name cannot include spaces or special characters.
	Name pulumi.StringOutput `pulumi:"name"`
	// Login session token for installing or updating an app on Splunkbase. Alternatively, use auth.
	Session pulumi.StringPtrOutput `pulumi:"session"`
	// File-based update indication:
	// <br>true specifies that filename should be used to update an existing app. If not specified, update defaults to
	// <br>false, which indicates that filename should not be used to update an existing app.
	Update pulumi.BoolPtrOutput `pulumi:"update"`
	// App version.
	Version pulumi.StringOutput `pulumi:"version"`
	// Indicates whether the app is visible and navigable from Splunk Web.
	// <br>true = App is visible and navigable.
	// <br>false = App is not visible or navigable.
	Visible pulumi.BoolOutput `pulumi:"visible"`
}

## # Resource: AppsLocal

Create, install and manage apps on your Splunk instance

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewAppsLocal(ctx, "amazonConnectApp", &splunk.AppsLocalArgs{
			ExplicitAppname: pulumi.String("amazon_connect_app_for_splunk"),
			Filename:        pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetAppsLocal

func GetAppsLocal(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AppsLocalState, opts ...pulumi.ResourceOption) (*AppsLocal, error)

GetAppsLocal gets an existing AppsLocal resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAppsLocal

func NewAppsLocal(ctx *pulumi.Context,
	name string, args *AppsLocalArgs, opts ...pulumi.ResourceOption) (*AppsLocal, error)

NewAppsLocal registers a new resource with the given unique name, arguments, and options.

func (*AppsLocal) ElementType

func (*AppsLocal) ElementType() reflect.Type

func (*AppsLocal) ToAppsLocalOutput

func (i *AppsLocal) ToAppsLocalOutput() AppsLocalOutput

func (*AppsLocal) ToAppsLocalOutputWithContext

func (i *AppsLocal) ToAppsLocalOutputWithContext(ctx context.Context) AppsLocalOutput

type AppsLocalAcl

type AppsLocalAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type AppsLocalAclArgs

type AppsLocalAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (AppsLocalAclArgs) ElementType

func (AppsLocalAclArgs) ElementType() reflect.Type

func (AppsLocalAclArgs) ToAppsLocalAclOutput

func (i AppsLocalAclArgs) ToAppsLocalAclOutput() AppsLocalAclOutput

func (AppsLocalAclArgs) ToAppsLocalAclOutputWithContext

func (i AppsLocalAclArgs) ToAppsLocalAclOutputWithContext(ctx context.Context) AppsLocalAclOutput

func (AppsLocalAclArgs) ToAppsLocalAclPtrOutput

func (i AppsLocalAclArgs) ToAppsLocalAclPtrOutput() AppsLocalAclPtrOutput

func (AppsLocalAclArgs) ToAppsLocalAclPtrOutputWithContext

func (i AppsLocalAclArgs) ToAppsLocalAclPtrOutputWithContext(ctx context.Context) AppsLocalAclPtrOutput

type AppsLocalAclInput

type AppsLocalAclInput interface {
	pulumi.Input

	ToAppsLocalAclOutput() AppsLocalAclOutput
	ToAppsLocalAclOutputWithContext(context.Context) AppsLocalAclOutput
}

AppsLocalAclInput is an input type that accepts AppsLocalAclArgs and AppsLocalAclOutput values. You can construct a concrete instance of `AppsLocalAclInput` via:

AppsLocalAclArgs{...}

type AppsLocalAclOutput

type AppsLocalAclOutput struct{ *pulumi.OutputState }

func (AppsLocalAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (AppsLocalAclOutput) CanChangePerms

func (o AppsLocalAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (AppsLocalAclOutput) CanShareApp

func (o AppsLocalAclOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (AppsLocalAclOutput) CanShareGlobal

func (o AppsLocalAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (AppsLocalAclOutput) CanShareUser

func (o AppsLocalAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (AppsLocalAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (AppsLocalAclOutput) ElementType

func (AppsLocalAclOutput) ElementType() reflect.Type

func (AppsLocalAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (AppsLocalAclOutput) Reads

Properties that indicate resource read permissions.

func (AppsLocalAclOutput) Removable

func (o AppsLocalAclOutput) Removable() pulumi.BoolPtrOutput

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (AppsLocalAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (AppsLocalAclOutput) ToAppsLocalAclOutput

func (o AppsLocalAclOutput) ToAppsLocalAclOutput() AppsLocalAclOutput

func (AppsLocalAclOutput) ToAppsLocalAclOutputWithContext

func (o AppsLocalAclOutput) ToAppsLocalAclOutputWithContext(ctx context.Context) AppsLocalAclOutput

func (AppsLocalAclOutput) ToAppsLocalAclPtrOutput

func (o AppsLocalAclOutput) ToAppsLocalAclPtrOutput() AppsLocalAclPtrOutput

func (AppsLocalAclOutput) ToAppsLocalAclPtrOutputWithContext

func (o AppsLocalAclOutput) ToAppsLocalAclPtrOutputWithContext(ctx context.Context) AppsLocalAclPtrOutput

func (AppsLocalAclOutput) Writes

Properties that indicate write permissions of the resource.

type AppsLocalAclPtrInput

type AppsLocalAclPtrInput interface {
	pulumi.Input

	ToAppsLocalAclPtrOutput() AppsLocalAclPtrOutput
	ToAppsLocalAclPtrOutputWithContext(context.Context) AppsLocalAclPtrOutput
}

AppsLocalAclPtrInput is an input type that accepts AppsLocalAclArgs, AppsLocalAclPtr and AppsLocalAclPtrOutput values. You can construct a concrete instance of `AppsLocalAclPtrInput` via:

        AppsLocalAclArgs{...}

or:

        nil

type AppsLocalAclPtrOutput

type AppsLocalAclPtrOutput struct{ *pulumi.OutputState }

func (AppsLocalAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (AppsLocalAclPtrOutput) CanChangePerms

func (o AppsLocalAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (AppsLocalAclPtrOutput) CanShareApp

func (o AppsLocalAclPtrOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (AppsLocalAclPtrOutput) CanShareGlobal

func (o AppsLocalAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (AppsLocalAclPtrOutput) CanShareUser

func (o AppsLocalAclPtrOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (AppsLocalAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (AppsLocalAclPtrOutput) Elem

func (AppsLocalAclPtrOutput) ElementType

func (AppsLocalAclPtrOutput) ElementType() reflect.Type

func (AppsLocalAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (AppsLocalAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (AppsLocalAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (AppsLocalAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (AppsLocalAclPtrOutput) ToAppsLocalAclPtrOutput

func (o AppsLocalAclPtrOutput) ToAppsLocalAclPtrOutput() AppsLocalAclPtrOutput

func (AppsLocalAclPtrOutput) ToAppsLocalAclPtrOutputWithContext

func (o AppsLocalAclPtrOutput) ToAppsLocalAclPtrOutputWithContext(ctx context.Context) AppsLocalAclPtrOutput

func (AppsLocalAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type AppsLocalArgs

type AppsLocalArgs struct {
	// The app/user context that is the namespace for the resource
	Acl AppsLocalAclPtrInput
	// Splunkbase session token for operations like install and update that require login. Use auth or session when installing or updating an app through Splunkbase.
	Auth pulumi.StringPtrInput
	// For apps posted to Splunkbase, use your Splunk account username. For internal apps, include your name and contact information.
	Author pulumi.StringPtrInput
	// Custom setup complete indication:
	// <br>true = Custom app setup complete.
	// <br>false = Custom app setup not complete.
	Configured pulumi.BoolPtrInput
	// Short app description also displayed below the app title in Splunk Web Launcher.
	Description pulumi.StringPtrInput
	// Custom app name. Overrides name when installing an app from a file where filename is set to true. See also filename.
	ExplicitAppname pulumi.StringPtrInput
	// Indicates whether to use the name value as the app source location.
	// <br>true indicates that name is a path to a file to install.
	// <br>false indicates that name is the literal app name and that the app is created from Splunkbase using a template.
	Filename pulumi.BoolPtrInput
	// App name displayed in Splunk Web, from five to eighty characters excluding the prefix "Splunk for".
	Label pulumi.StringPtrInput
	// Literal app name or path for the file to install, depending on the value of filename.
	// <br>filename = false indicates that name is the literal app name and that the app is created from Splunkbase using a template.
	// <br>filename = true indicates that name is the URL or path to the local .tar, .tgz or .spl file. If name is the Splunkbase URL, set auth or session to authenticate the request.
	// The app folder name cannot include spaces or special characters.
	Name pulumi.StringPtrInput
	// Login session token for installing or updating an app on Splunkbase. Alternatively, use auth.
	Session pulumi.StringPtrInput
	// File-based update indication:
	// <br>true specifies that filename should be used to update an existing app. If not specified, update defaults to
	// <br>false, which indicates that filename should not be used to update an existing app.
	Update pulumi.BoolPtrInput
	// App version.
	Version pulumi.StringPtrInput
	// Indicates whether the app is visible and navigable from Splunk Web.
	// <br>true = App is visible and navigable.
	// <br>false = App is not visible or navigable.
	Visible pulumi.BoolPtrInput
}

The set of arguments for constructing a AppsLocal resource.

func (AppsLocalArgs) ElementType

func (AppsLocalArgs) ElementType() reflect.Type

type AppsLocalArray added in v0.2.1

type AppsLocalArray []AppsLocalInput

func (AppsLocalArray) ElementType added in v0.2.1

func (AppsLocalArray) ElementType() reflect.Type

func (AppsLocalArray) ToAppsLocalArrayOutput added in v0.2.1

func (i AppsLocalArray) ToAppsLocalArrayOutput() AppsLocalArrayOutput

func (AppsLocalArray) ToAppsLocalArrayOutputWithContext added in v0.2.1

func (i AppsLocalArray) ToAppsLocalArrayOutputWithContext(ctx context.Context) AppsLocalArrayOutput

type AppsLocalArrayInput added in v0.2.1

type AppsLocalArrayInput interface {
	pulumi.Input

	ToAppsLocalArrayOutput() AppsLocalArrayOutput
	ToAppsLocalArrayOutputWithContext(context.Context) AppsLocalArrayOutput
}

AppsLocalArrayInput is an input type that accepts AppsLocalArray and AppsLocalArrayOutput values. You can construct a concrete instance of `AppsLocalArrayInput` via:

AppsLocalArray{ AppsLocalArgs{...} }

type AppsLocalArrayOutput added in v0.2.1

type AppsLocalArrayOutput struct{ *pulumi.OutputState }

func (AppsLocalArrayOutput) ElementType added in v0.2.1

func (AppsLocalArrayOutput) ElementType() reflect.Type

func (AppsLocalArrayOutput) Index added in v0.2.1

func (AppsLocalArrayOutput) ToAppsLocalArrayOutput added in v0.2.1

func (o AppsLocalArrayOutput) ToAppsLocalArrayOutput() AppsLocalArrayOutput

func (AppsLocalArrayOutput) ToAppsLocalArrayOutputWithContext added in v0.2.1

func (o AppsLocalArrayOutput) ToAppsLocalArrayOutputWithContext(ctx context.Context) AppsLocalArrayOutput

type AppsLocalInput

type AppsLocalInput interface {
	pulumi.Input

	ToAppsLocalOutput() AppsLocalOutput
	ToAppsLocalOutputWithContext(ctx context.Context) AppsLocalOutput
}

type AppsLocalMap added in v0.2.1

type AppsLocalMap map[string]AppsLocalInput

func (AppsLocalMap) ElementType added in v0.2.1

func (AppsLocalMap) ElementType() reflect.Type

func (AppsLocalMap) ToAppsLocalMapOutput added in v0.2.1

func (i AppsLocalMap) ToAppsLocalMapOutput() AppsLocalMapOutput

func (AppsLocalMap) ToAppsLocalMapOutputWithContext added in v0.2.1

func (i AppsLocalMap) ToAppsLocalMapOutputWithContext(ctx context.Context) AppsLocalMapOutput

type AppsLocalMapInput added in v0.2.1

type AppsLocalMapInput interface {
	pulumi.Input

	ToAppsLocalMapOutput() AppsLocalMapOutput
	ToAppsLocalMapOutputWithContext(context.Context) AppsLocalMapOutput
}

AppsLocalMapInput is an input type that accepts AppsLocalMap and AppsLocalMapOutput values. You can construct a concrete instance of `AppsLocalMapInput` via:

AppsLocalMap{ "key": AppsLocalArgs{...} }

type AppsLocalMapOutput added in v0.2.1

type AppsLocalMapOutput struct{ *pulumi.OutputState }

func (AppsLocalMapOutput) ElementType added in v0.2.1

func (AppsLocalMapOutput) ElementType() reflect.Type

func (AppsLocalMapOutput) MapIndex added in v0.2.1

func (AppsLocalMapOutput) ToAppsLocalMapOutput added in v0.2.1

func (o AppsLocalMapOutput) ToAppsLocalMapOutput() AppsLocalMapOutput

func (AppsLocalMapOutput) ToAppsLocalMapOutputWithContext added in v0.2.1

func (o AppsLocalMapOutput) ToAppsLocalMapOutputWithContext(ctx context.Context) AppsLocalMapOutput

type AppsLocalOutput

type AppsLocalOutput struct{ *pulumi.OutputState }

func (AppsLocalOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (AppsLocalOutput) Auth added in v1.1.5

Splunkbase session token for operations like install and update that require login. Use auth or session when installing or updating an app through Splunkbase.

func (AppsLocalOutput) Author added in v1.1.5

func (o AppsLocalOutput) Author() pulumi.StringOutput

For apps posted to Splunkbase, use your Splunk account username. For internal apps, include your name and contact information.

func (AppsLocalOutput) Configured added in v1.1.5

func (o AppsLocalOutput) Configured() pulumi.BoolOutput

Custom setup complete indication: <br>true = Custom app setup complete. <br>false = Custom app setup not complete.

func (AppsLocalOutput) Description added in v1.1.5

func (o AppsLocalOutput) Description() pulumi.StringOutput

Short app description also displayed below the app title in Splunk Web Launcher.

func (AppsLocalOutput) ElementType

func (AppsLocalOutput) ElementType() reflect.Type

func (AppsLocalOutput) ExplicitAppname added in v1.1.5

func (o AppsLocalOutput) ExplicitAppname() pulumi.StringPtrOutput

Custom app name. Overrides name when installing an app from a file where filename is set to true. See also filename.

func (AppsLocalOutput) Filename added in v1.1.5

func (o AppsLocalOutput) Filename() pulumi.BoolPtrOutput

Indicates whether to use the name value as the app source location. <br>true indicates that name is a path to a file to install. <br>false indicates that name is the literal app name and that the app is created from Splunkbase using a template.

func (AppsLocalOutput) Label added in v1.1.5

App name displayed in Splunk Web, from five to eighty characters excluding the prefix "Splunk for".

func (AppsLocalOutput) Name added in v1.1.5

Literal app name or path for the file to install, depending on the value of filename. <br>filename = false indicates that name is the literal app name and that the app is created from Splunkbase using a template. <br>filename = true indicates that name is the URL or path to the local .tar, .tgz or .spl file. If name is the Splunkbase URL, set auth or session to authenticate the request. The app folder name cannot include spaces or special characters.

func (AppsLocalOutput) Session added in v1.1.5

Login session token for installing or updating an app on Splunkbase. Alternatively, use auth.

func (AppsLocalOutput) ToAppsLocalOutput

func (o AppsLocalOutput) ToAppsLocalOutput() AppsLocalOutput

func (AppsLocalOutput) ToAppsLocalOutputWithContext

func (o AppsLocalOutput) ToAppsLocalOutputWithContext(ctx context.Context) AppsLocalOutput

func (AppsLocalOutput) Update added in v1.1.5

File-based update indication: <br>true specifies that filename should be used to update an existing app. If not specified, update defaults to <br>false, which indicates that filename should not be used to update an existing app.

func (AppsLocalOutput) Version added in v1.1.5

func (o AppsLocalOutput) Version() pulumi.StringOutput

App version.

func (AppsLocalOutput) Visible added in v1.1.5

func (o AppsLocalOutput) Visible() pulumi.BoolOutput

Indicates whether the app is visible and navigable from Splunk Web. <br>true = App is visible and navigable. <br>false = App is not visible or navigable.

type AppsLocalState

type AppsLocalState struct {
	// The app/user context that is the namespace for the resource
	Acl AppsLocalAclPtrInput
	// Splunkbase session token for operations like install and update that require login. Use auth or session when installing or updating an app through Splunkbase.
	Auth pulumi.StringPtrInput
	// For apps posted to Splunkbase, use your Splunk account username. For internal apps, include your name and contact information.
	Author pulumi.StringPtrInput
	// Custom setup complete indication:
	// <br>true = Custom app setup complete.
	// <br>false = Custom app setup not complete.
	Configured pulumi.BoolPtrInput
	// Short app description also displayed below the app title in Splunk Web Launcher.
	Description pulumi.StringPtrInput
	// Custom app name. Overrides name when installing an app from a file where filename is set to true. See also filename.
	ExplicitAppname pulumi.StringPtrInput
	// Indicates whether to use the name value as the app source location.
	// <br>true indicates that name is a path to a file to install.
	// <br>false indicates that name is the literal app name and that the app is created from Splunkbase using a template.
	Filename pulumi.BoolPtrInput
	// App name displayed in Splunk Web, from five to eighty characters excluding the prefix "Splunk for".
	Label pulumi.StringPtrInput
	// Literal app name or path for the file to install, depending on the value of filename.
	// <br>filename = false indicates that name is the literal app name and that the app is created from Splunkbase using a template.
	// <br>filename = true indicates that name is the URL or path to the local .tar, .tgz or .spl file. If name is the Splunkbase URL, set auth or session to authenticate the request.
	// The app folder name cannot include spaces or special characters.
	Name pulumi.StringPtrInput
	// Login session token for installing or updating an app on Splunkbase. Alternatively, use auth.
	Session pulumi.StringPtrInput
	// File-based update indication:
	// <br>true specifies that filename should be used to update an existing app. If not specified, update defaults to
	// <br>false, which indicates that filename should not be used to update an existing app.
	Update pulumi.BoolPtrInput
	// App version.
	Version pulumi.StringPtrInput
	// Indicates whether the app is visible and navigable from Splunk Web.
	// <br>true = App is visible and navigable.
	// <br>false = App is not visible or navigable.
	Visible pulumi.BoolPtrInput
}

func (AppsLocalState) ElementType

func (AppsLocalState) ElementType() reflect.Type

type AuthenticationUsers

type AuthenticationUsers struct {
	pulumi.CustomResourceState

	// User default app. Overrides the default app inherited from the user roles.
	DefaultApp pulumi.StringOutput `pulumi:"defaultApp"`
	// User email address.
	Email pulumi.StringOutput `pulumi:"email"`
	// Force user to change password indication
	ForceChangePass pulumi.BoolPtrOutput `pulumi:"forceChangePass"`
	// Unique user login name.
	Name pulumi.StringOutput `pulumi:"name"`
	// User login password.
	Password pulumi.StringPtrOutput `pulumi:"password"`
	// Full user name.
	Realname pulumi.StringOutput `pulumi:"realname"`
	// Restart background search job that has not completed when Splunk restarts indication.
	RestartBackgroundJobs pulumi.BoolOutput `pulumi:"restartBackgroundJobs"`
	// Role to assign to this user. At least one existing role is required.
	Roles pulumi.StringArrayOutput `pulumi:"roles"`
	// User timezone.
	Tz pulumi.StringOutput `pulumi:"tz"`
}

## # Resource: AuthenticationUsers

Create and update user information or delete the user.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewAuthenticationUsers(ctx, "user01", &splunk.AuthenticationUsersArgs{
			Email:           pulumi.String("user01@example.com"),
			ForceChangePass: pulumi.Bool(false),
			Password:        pulumi.String("password01"),
			Roles: pulumi.StringArray{
				pulumi.String("terraform-user01-role"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetAuthenticationUsers

func GetAuthenticationUsers(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AuthenticationUsersState, opts ...pulumi.ResourceOption) (*AuthenticationUsers, error)

GetAuthenticationUsers gets an existing AuthenticationUsers resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAuthenticationUsers

func NewAuthenticationUsers(ctx *pulumi.Context,
	name string, args *AuthenticationUsersArgs, opts ...pulumi.ResourceOption) (*AuthenticationUsers, error)

NewAuthenticationUsers registers a new resource with the given unique name, arguments, and options.

func (*AuthenticationUsers) ElementType

func (*AuthenticationUsers) ElementType() reflect.Type

func (*AuthenticationUsers) ToAuthenticationUsersOutput

func (i *AuthenticationUsers) ToAuthenticationUsersOutput() AuthenticationUsersOutput

func (*AuthenticationUsers) ToAuthenticationUsersOutputWithContext

func (i *AuthenticationUsers) ToAuthenticationUsersOutputWithContext(ctx context.Context) AuthenticationUsersOutput

type AuthenticationUsersArgs

type AuthenticationUsersArgs struct {
	// User default app. Overrides the default app inherited from the user roles.
	DefaultApp pulumi.StringPtrInput
	// User email address.
	Email pulumi.StringPtrInput
	// Force user to change password indication
	ForceChangePass pulumi.BoolPtrInput
	// Unique user login name.
	Name pulumi.StringPtrInput
	// User login password.
	Password pulumi.StringPtrInput
	// Full user name.
	Realname pulumi.StringPtrInput
	// Restart background search job that has not completed when Splunk restarts indication.
	RestartBackgroundJobs pulumi.BoolPtrInput
	// Role to assign to this user. At least one existing role is required.
	Roles pulumi.StringArrayInput
	// User timezone.
	Tz pulumi.StringPtrInput
}

The set of arguments for constructing a AuthenticationUsers resource.

func (AuthenticationUsersArgs) ElementType

func (AuthenticationUsersArgs) ElementType() reflect.Type

type AuthenticationUsersArray added in v0.2.1

type AuthenticationUsersArray []AuthenticationUsersInput

func (AuthenticationUsersArray) ElementType added in v0.2.1

func (AuthenticationUsersArray) ElementType() reflect.Type

func (AuthenticationUsersArray) ToAuthenticationUsersArrayOutput added in v0.2.1

func (i AuthenticationUsersArray) ToAuthenticationUsersArrayOutput() AuthenticationUsersArrayOutput

func (AuthenticationUsersArray) ToAuthenticationUsersArrayOutputWithContext added in v0.2.1

func (i AuthenticationUsersArray) ToAuthenticationUsersArrayOutputWithContext(ctx context.Context) AuthenticationUsersArrayOutput

type AuthenticationUsersArrayInput added in v0.2.1

type AuthenticationUsersArrayInput interface {
	pulumi.Input

	ToAuthenticationUsersArrayOutput() AuthenticationUsersArrayOutput
	ToAuthenticationUsersArrayOutputWithContext(context.Context) AuthenticationUsersArrayOutput
}

AuthenticationUsersArrayInput is an input type that accepts AuthenticationUsersArray and AuthenticationUsersArrayOutput values. You can construct a concrete instance of `AuthenticationUsersArrayInput` via:

AuthenticationUsersArray{ AuthenticationUsersArgs{...} }

type AuthenticationUsersArrayOutput added in v0.2.1

type AuthenticationUsersArrayOutput struct{ *pulumi.OutputState }

func (AuthenticationUsersArrayOutput) ElementType added in v0.2.1

func (AuthenticationUsersArrayOutput) Index added in v0.2.1

func (AuthenticationUsersArrayOutput) ToAuthenticationUsersArrayOutput added in v0.2.1

func (o AuthenticationUsersArrayOutput) ToAuthenticationUsersArrayOutput() AuthenticationUsersArrayOutput

func (AuthenticationUsersArrayOutput) ToAuthenticationUsersArrayOutputWithContext added in v0.2.1

func (o AuthenticationUsersArrayOutput) ToAuthenticationUsersArrayOutputWithContext(ctx context.Context) AuthenticationUsersArrayOutput

type AuthenticationUsersInput

type AuthenticationUsersInput interface {
	pulumi.Input

	ToAuthenticationUsersOutput() AuthenticationUsersOutput
	ToAuthenticationUsersOutputWithContext(ctx context.Context) AuthenticationUsersOutput
}

type AuthenticationUsersMap added in v0.2.1

type AuthenticationUsersMap map[string]AuthenticationUsersInput

func (AuthenticationUsersMap) ElementType added in v0.2.1

func (AuthenticationUsersMap) ElementType() reflect.Type

func (AuthenticationUsersMap) ToAuthenticationUsersMapOutput added in v0.2.1

func (i AuthenticationUsersMap) ToAuthenticationUsersMapOutput() AuthenticationUsersMapOutput

func (AuthenticationUsersMap) ToAuthenticationUsersMapOutputWithContext added in v0.2.1

func (i AuthenticationUsersMap) ToAuthenticationUsersMapOutputWithContext(ctx context.Context) AuthenticationUsersMapOutput

type AuthenticationUsersMapInput added in v0.2.1

type AuthenticationUsersMapInput interface {
	pulumi.Input

	ToAuthenticationUsersMapOutput() AuthenticationUsersMapOutput
	ToAuthenticationUsersMapOutputWithContext(context.Context) AuthenticationUsersMapOutput
}

AuthenticationUsersMapInput is an input type that accepts AuthenticationUsersMap and AuthenticationUsersMapOutput values. You can construct a concrete instance of `AuthenticationUsersMapInput` via:

AuthenticationUsersMap{ "key": AuthenticationUsersArgs{...} }

type AuthenticationUsersMapOutput added in v0.2.1

type AuthenticationUsersMapOutput struct{ *pulumi.OutputState }

func (AuthenticationUsersMapOutput) ElementType added in v0.2.1

func (AuthenticationUsersMapOutput) MapIndex added in v0.2.1

func (AuthenticationUsersMapOutput) ToAuthenticationUsersMapOutput added in v0.2.1

func (o AuthenticationUsersMapOutput) ToAuthenticationUsersMapOutput() AuthenticationUsersMapOutput

func (AuthenticationUsersMapOutput) ToAuthenticationUsersMapOutputWithContext added in v0.2.1

func (o AuthenticationUsersMapOutput) ToAuthenticationUsersMapOutputWithContext(ctx context.Context) AuthenticationUsersMapOutput

type AuthenticationUsersOutput

type AuthenticationUsersOutput struct{ *pulumi.OutputState }

func (AuthenticationUsersOutput) DefaultApp added in v1.1.5

User default app. Overrides the default app inherited from the user roles.

func (AuthenticationUsersOutput) ElementType

func (AuthenticationUsersOutput) ElementType() reflect.Type

func (AuthenticationUsersOutput) Email added in v1.1.5

User email address.

func (AuthenticationUsersOutput) ForceChangePass added in v1.1.5

func (o AuthenticationUsersOutput) ForceChangePass() pulumi.BoolPtrOutput

Force user to change password indication

func (AuthenticationUsersOutput) Name added in v1.1.5

Unique user login name.

func (AuthenticationUsersOutput) Password added in v1.1.5

User login password.

func (AuthenticationUsersOutput) Realname added in v1.1.5

Full user name.

func (AuthenticationUsersOutput) RestartBackgroundJobs added in v1.1.5

func (o AuthenticationUsersOutput) RestartBackgroundJobs() pulumi.BoolOutput

Restart background search job that has not completed when Splunk restarts indication.

func (AuthenticationUsersOutput) Roles added in v1.1.5

Role to assign to this user. At least one existing role is required.

func (AuthenticationUsersOutput) ToAuthenticationUsersOutput

func (o AuthenticationUsersOutput) ToAuthenticationUsersOutput() AuthenticationUsersOutput

func (AuthenticationUsersOutput) ToAuthenticationUsersOutputWithContext

func (o AuthenticationUsersOutput) ToAuthenticationUsersOutputWithContext(ctx context.Context) AuthenticationUsersOutput

func (AuthenticationUsersOutput) Tz added in v1.1.5

User timezone.

type AuthenticationUsersState

type AuthenticationUsersState struct {
	// User default app. Overrides the default app inherited from the user roles.
	DefaultApp pulumi.StringPtrInput
	// User email address.
	Email pulumi.StringPtrInput
	// Force user to change password indication
	ForceChangePass pulumi.BoolPtrInput
	// Unique user login name.
	Name pulumi.StringPtrInput
	// User login password.
	Password pulumi.StringPtrInput
	// Full user name.
	Realname pulumi.StringPtrInput
	// Restart background search job that has not completed when Splunk restarts indication.
	RestartBackgroundJobs pulumi.BoolPtrInput
	// Role to assign to this user. At least one existing role is required.
	Roles pulumi.StringArrayInput
	// User timezone.
	Tz pulumi.StringPtrInput
}

func (AuthenticationUsersState) ElementType

func (AuthenticationUsersState) ElementType() reflect.Type

type AuthorizationRoles

type AuthorizationRoles struct {
	pulumi.CustomResourceState

	// List of capabilities assigned to role.
	Capabilities pulumi.StringArrayOutput `pulumi:"capabilities"`
	// Maximum number of concurrently running real-time searches that all members of this role can have.
	CumulativeRealtimeSearchJobsQuota pulumi.IntPtrOutput `pulumi:"cumulativeRealtimeSearchJobsQuota"`
	// Maximum number of concurrently running searches for all role members. Warning message logged when limit is reached.
	CumulativeSearchJobsQuota pulumi.IntPtrOutput `pulumi:"cumulativeSearchJobsQuota"`
	// Specify the folder name of the default app to use for this role. A user-specific default app overrides this.
	DefaultApp pulumi.StringOutput `pulumi:"defaultApp"`
	// List of imported roles for this role. <br>Importing other roles imports all aspects of that role, such as capabilities and allowed indexes to search. In combining multiple roles, the effective value for each attribute is value with the broadest permissions.
	ImportedRoles pulumi.StringArrayOutput `pulumi:"importedRoles"`
	// The name of the user role to create.
	Name pulumi.StringOutput `pulumi:"name"`
	// Specify the maximum number of concurrent real-time search jobs for this role. This count is independent from the normal search jobs limit.
	RealtimeSearchJobsQuota pulumi.IntPtrOutput `pulumi:"realtimeSearchJobsQuota"`
	// Specifies the maximum disk space in MB that can be used by a user's search jobs. For example, a value of 100 limits this role to 100 MB total.
	SearchDiskQuota pulumi.IntPtrOutput `pulumi:"searchDiskQuota"`
	// Specify a search string that restricts the scope of searches run by this role. Search results for this role only show events that also match the search string you specify. In the case that a user has multiple roles with different search filters, they are combined with an OR.
	SearchFilter pulumi.StringOutput `pulumi:"searchFilter"`
	// List of indexes that this role has permissions to search. These may be wildcarded, but the index name must begin with an underscore to match internal indexes.
	SearchIndexesAlloweds pulumi.StringArrayOutput `pulumi:"searchIndexesAlloweds"`
	// List of indexes to search when no index is specified. These indexes can be wildcarded, with the exception that '*' does not match internal indexes. To match internal indexes, start with '_'. All internal indexes are represented by '_*'. A user with this role can search other indexes using "index= "
	SearchIndexesDefaults pulumi.StringArrayOutput `pulumi:"searchIndexesDefaults"`
	// The maximum number of concurrent searches a user with this role is allowed to run. For users with multiple roles, the maximum quota value among all of the roles applies.
	SearchJobsQuota pulumi.IntPtrOutput `pulumi:"searchJobsQuota"`
	// Maximum time span of a search, in seconds. By default, searches are not limited to any specific time window. To override any search time windows from imported roles, set srchTimeWin to '0', as the 'admin' role does.
	SearchTimeWin pulumi.IntPtrOutput `pulumi:"searchTimeWin"`
}

## # Resource: AuthorizationRoles

Create and update role information.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewAuthorizationRoles(ctx, "role01", &splunk.AuthorizationRolesArgs{
			Capabilities: pulumi.StringArray{
				pulumi.String("accelerate_datamodel"),
				pulumi.String("change_authentication"),
				pulumi.String("restart_splunkd"),
			},
			DefaultApp: pulumi.String("search"),
			ImportedRoles: pulumi.StringArray{
				pulumi.String("power"),
				pulumi.String("user"),
			},
			SearchIndexesAlloweds: pulumi.StringArray{
				pulumi.String("_audit"),
				pulumi.String("_internal"),
				pulumi.String("main"),
			},
			SearchIndexesDefaults: pulumi.StringArray{
				pulumi.String("_audit"),
				pulumi.String("_internal"),
				pulumi.String("main"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetAuthorizationRoles

func GetAuthorizationRoles(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AuthorizationRolesState, opts ...pulumi.ResourceOption) (*AuthorizationRoles, error)

GetAuthorizationRoles gets an existing AuthorizationRoles resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAuthorizationRoles

func NewAuthorizationRoles(ctx *pulumi.Context,
	name string, args *AuthorizationRolesArgs, opts ...pulumi.ResourceOption) (*AuthorizationRoles, error)

NewAuthorizationRoles registers a new resource with the given unique name, arguments, and options.

func (*AuthorizationRoles) ElementType

func (*AuthorizationRoles) ElementType() reflect.Type

func (*AuthorizationRoles) ToAuthorizationRolesOutput

func (i *AuthorizationRoles) ToAuthorizationRolesOutput() AuthorizationRolesOutput

func (*AuthorizationRoles) ToAuthorizationRolesOutputWithContext

func (i *AuthorizationRoles) ToAuthorizationRolesOutputWithContext(ctx context.Context) AuthorizationRolesOutput

type AuthorizationRolesArgs

type AuthorizationRolesArgs struct {
	// List of capabilities assigned to role.
	Capabilities pulumi.StringArrayInput
	// Maximum number of concurrently running real-time searches that all members of this role can have.
	CumulativeRealtimeSearchJobsQuota pulumi.IntPtrInput
	// Maximum number of concurrently running searches for all role members. Warning message logged when limit is reached.
	CumulativeSearchJobsQuota pulumi.IntPtrInput
	// Specify the folder name of the default app to use for this role. A user-specific default app overrides this.
	DefaultApp pulumi.StringPtrInput
	// List of imported roles for this role. <br>Importing other roles imports all aspects of that role, such as capabilities and allowed indexes to search. In combining multiple roles, the effective value for each attribute is value with the broadest permissions.
	ImportedRoles pulumi.StringArrayInput
	// The name of the user role to create.
	Name pulumi.StringPtrInput
	// Specify the maximum number of concurrent real-time search jobs for this role. This count is independent from the normal search jobs limit.
	RealtimeSearchJobsQuota pulumi.IntPtrInput
	// Specifies the maximum disk space in MB that can be used by a user's search jobs. For example, a value of 100 limits this role to 100 MB total.
	SearchDiskQuota pulumi.IntPtrInput
	// Specify a search string that restricts the scope of searches run by this role. Search results for this role only show events that also match the search string you specify. In the case that a user has multiple roles with different search filters, they are combined with an OR.
	SearchFilter pulumi.StringPtrInput
	// List of indexes that this role has permissions to search. These may be wildcarded, but the index name must begin with an underscore to match internal indexes.
	SearchIndexesAlloweds pulumi.StringArrayInput
	// List of indexes to search when no index is specified. These indexes can be wildcarded, with the exception that '*' does not match internal indexes. To match internal indexes, start with '_'. All internal indexes are represented by '_*'. A user with this role can search other indexes using "index= "
	SearchIndexesDefaults pulumi.StringArrayInput
	// The maximum number of concurrent searches a user with this role is allowed to run. For users with multiple roles, the maximum quota value among all of the roles applies.
	SearchJobsQuota pulumi.IntPtrInput
	// Maximum time span of a search, in seconds. By default, searches are not limited to any specific time window. To override any search time windows from imported roles, set srchTimeWin to '0', as the 'admin' role does.
	SearchTimeWin pulumi.IntPtrInput
}

The set of arguments for constructing a AuthorizationRoles resource.

func (AuthorizationRolesArgs) ElementType

func (AuthorizationRolesArgs) ElementType() reflect.Type

type AuthorizationRolesArray added in v0.2.1

type AuthorizationRolesArray []AuthorizationRolesInput

func (AuthorizationRolesArray) ElementType added in v0.2.1

func (AuthorizationRolesArray) ElementType() reflect.Type

func (AuthorizationRolesArray) ToAuthorizationRolesArrayOutput added in v0.2.1

func (i AuthorizationRolesArray) ToAuthorizationRolesArrayOutput() AuthorizationRolesArrayOutput

func (AuthorizationRolesArray) ToAuthorizationRolesArrayOutputWithContext added in v0.2.1

func (i AuthorizationRolesArray) ToAuthorizationRolesArrayOutputWithContext(ctx context.Context) AuthorizationRolesArrayOutput

type AuthorizationRolesArrayInput added in v0.2.1

type AuthorizationRolesArrayInput interface {
	pulumi.Input

	ToAuthorizationRolesArrayOutput() AuthorizationRolesArrayOutput
	ToAuthorizationRolesArrayOutputWithContext(context.Context) AuthorizationRolesArrayOutput
}

AuthorizationRolesArrayInput is an input type that accepts AuthorizationRolesArray and AuthorizationRolesArrayOutput values. You can construct a concrete instance of `AuthorizationRolesArrayInput` via:

AuthorizationRolesArray{ AuthorizationRolesArgs{...} }

type AuthorizationRolesArrayOutput added in v0.2.1

type AuthorizationRolesArrayOutput struct{ *pulumi.OutputState }

func (AuthorizationRolesArrayOutput) ElementType added in v0.2.1

func (AuthorizationRolesArrayOutput) Index added in v0.2.1

func (AuthorizationRolesArrayOutput) ToAuthorizationRolesArrayOutput added in v0.2.1

func (o AuthorizationRolesArrayOutput) ToAuthorizationRolesArrayOutput() AuthorizationRolesArrayOutput

func (AuthorizationRolesArrayOutput) ToAuthorizationRolesArrayOutputWithContext added in v0.2.1

func (o AuthorizationRolesArrayOutput) ToAuthorizationRolesArrayOutputWithContext(ctx context.Context) AuthorizationRolesArrayOutput

type AuthorizationRolesInput

type AuthorizationRolesInput interface {
	pulumi.Input

	ToAuthorizationRolesOutput() AuthorizationRolesOutput
	ToAuthorizationRolesOutputWithContext(ctx context.Context) AuthorizationRolesOutput
}

type AuthorizationRolesMap added in v0.2.1

type AuthorizationRolesMap map[string]AuthorizationRolesInput

func (AuthorizationRolesMap) ElementType added in v0.2.1

func (AuthorizationRolesMap) ElementType() reflect.Type

func (AuthorizationRolesMap) ToAuthorizationRolesMapOutput added in v0.2.1

func (i AuthorizationRolesMap) ToAuthorizationRolesMapOutput() AuthorizationRolesMapOutput

func (AuthorizationRolesMap) ToAuthorizationRolesMapOutputWithContext added in v0.2.1

func (i AuthorizationRolesMap) ToAuthorizationRolesMapOutputWithContext(ctx context.Context) AuthorizationRolesMapOutput

type AuthorizationRolesMapInput added in v0.2.1

type AuthorizationRolesMapInput interface {
	pulumi.Input

	ToAuthorizationRolesMapOutput() AuthorizationRolesMapOutput
	ToAuthorizationRolesMapOutputWithContext(context.Context) AuthorizationRolesMapOutput
}

AuthorizationRolesMapInput is an input type that accepts AuthorizationRolesMap and AuthorizationRolesMapOutput values. You can construct a concrete instance of `AuthorizationRolesMapInput` via:

AuthorizationRolesMap{ "key": AuthorizationRolesArgs{...} }

type AuthorizationRolesMapOutput added in v0.2.1

type AuthorizationRolesMapOutput struct{ *pulumi.OutputState }

func (AuthorizationRolesMapOutput) ElementType added in v0.2.1

func (AuthorizationRolesMapOutput) MapIndex added in v0.2.1

func (AuthorizationRolesMapOutput) ToAuthorizationRolesMapOutput added in v0.2.1

func (o AuthorizationRolesMapOutput) ToAuthorizationRolesMapOutput() AuthorizationRolesMapOutput

func (AuthorizationRolesMapOutput) ToAuthorizationRolesMapOutputWithContext added in v0.2.1

func (o AuthorizationRolesMapOutput) ToAuthorizationRolesMapOutputWithContext(ctx context.Context) AuthorizationRolesMapOutput

type AuthorizationRolesOutput

type AuthorizationRolesOutput struct{ *pulumi.OutputState }

func (AuthorizationRolesOutput) Capabilities added in v1.1.5

List of capabilities assigned to role.

func (AuthorizationRolesOutput) CumulativeRealtimeSearchJobsQuota added in v1.1.5

func (o AuthorizationRolesOutput) CumulativeRealtimeSearchJobsQuota() pulumi.IntPtrOutput

Maximum number of concurrently running real-time searches that all members of this role can have.

func (AuthorizationRolesOutput) CumulativeSearchJobsQuota added in v1.1.5

func (o AuthorizationRolesOutput) CumulativeSearchJobsQuota() pulumi.IntPtrOutput

Maximum number of concurrently running searches for all role members. Warning message logged when limit is reached.

func (AuthorizationRolesOutput) DefaultApp added in v1.1.5

Specify the folder name of the default app to use for this role. A user-specific default app overrides this.

func (AuthorizationRolesOutput) ElementType

func (AuthorizationRolesOutput) ElementType() reflect.Type

func (AuthorizationRolesOutput) ImportedRoles added in v1.1.5

List of imported roles for this role. <br>Importing other roles imports all aspects of that role, such as capabilities and allowed indexes to search. In combining multiple roles, the effective value for each attribute is value with the broadest permissions.

func (AuthorizationRolesOutput) Name added in v1.1.5

The name of the user role to create.

func (AuthorizationRolesOutput) RealtimeSearchJobsQuota added in v1.1.5

func (o AuthorizationRolesOutput) RealtimeSearchJobsQuota() pulumi.IntPtrOutput

Specify the maximum number of concurrent real-time search jobs for this role. This count is independent from the normal search jobs limit.

func (AuthorizationRolesOutput) SearchDiskQuota added in v1.1.5

func (o AuthorizationRolesOutput) SearchDiskQuota() pulumi.IntPtrOutput

Specifies the maximum disk space in MB that can be used by a user's search jobs. For example, a value of 100 limits this role to 100 MB total.

func (AuthorizationRolesOutput) SearchFilter added in v1.1.5

func (o AuthorizationRolesOutput) SearchFilter() pulumi.StringOutput

Specify a search string that restricts the scope of searches run by this role. Search results for this role only show events that also match the search string you specify. In the case that a user has multiple roles with different search filters, they are combined with an OR.

func (AuthorizationRolesOutput) SearchIndexesAlloweds added in v1.1.5

func (o AuthorizationRolesOutput) SearchIndexesAlloweds() pulumi.StringArrayOutput

List of indexes that this role has permissions to search. These may be wildcarded, but the index name must begin with an underscore to match internal indexes.

func (AuthorizationRolesOutput) SearchIndexesDefaults added in v1.1.5

func (o AuthorizationRolesOutput) SearchIndexesDefaults() pulumi.StringArrayOutput

List of indexes to search when no index is specified. These indexes can be wildcarded, with the exception that '*' does not match internal indexes. To match internal indexes, start with '_'. All internal indexes are represented by '_*'. A user with this role can search other indexes using "index= "

func (AuthorizationRolesOutput) SearchJobsQuota added in v1.1.5

func (o AuthorizationRolesOutput) SearchJobsQuota() pulumi.IntPtrOutput

The maximum number of concurrent searches a user with this role is allowed to run. For users with multiple roles, the maximum quota value among all of the roles applies.

func (AuthorizationRolesOutput) SearchTimeWin added in v1.1.5

func (o AuthorizationRolesOutput) SearchTimeWin() pulumi.IntPtrOutput

Maximum time span of a search, in seconds. By default, searches are not limited to any specific time window. To override any search time windows from imported roles, set srchTimeWin to '0', as the 'admin' role does.

func (AuthorizationRolesOutput) ToAuthorizationRolesOutput

func (o AuthorizationRolesOutput) ToAuthorizationRolesOutput() AuthorizationRolesOutput

func (AuthorizationRolesOutput) ToAuthorizationRolesOutputWithContext

func (o AuthorizationRolesOutput) ToAuthorizationRolesOutputWithContext(ctx context.Context) AuthorizationRolesOutput

type AuthorizationRolesState

type AuthorizationRolesState struct {
	// List of capabilities assigned to role.
	Capabilities pulumi.StringArrayInput
	// Maximum number of concurrently running real-time searches that all members of this role can have.
	CumulativeRealtimeSearchJobsQuota pulumi.IntPtrInput
	// Maximum number of concurrently running searches for all role members. Warning message logged when limit is reached.
	CumulativeSearchJobsQuota pulumi.IntPtrInput
	// Specify the folder name of the default app to use for this role. A user-specific default app overrides this.
	DefaultApp pulumi.StringPtrInput
	// List of imported roles for this role. <br>Importing other roles imports all aspects of that role, such as capabilities and allowed indexes to search. In combining multiple roles, the effective value for each attribute is value with the broadest permissions.
	ImportedRoles pulumi.StringArrayInput
	// The name of the user role to create.
	Name pulumi.StringPtrInput
	// Specify the maximum number of concurrent real-time search jobs for this role. This count is independent from the normal search jobs limit.
	RealtimeSearchJobsQuota pulumi.IntPtrInput
	// Specifies the maximum disk space in MB that can be used by a user's search jobs. For example, a value of 100 limits this role to 100 MB total.
	SearchDiskQuota pulumi.IntPtrInput
	// Specify a search string that restricts the scope of searches run by this role. Search results for this role only show events that also match the search string you specify. In the case that a user has multiple roles with different search filters, they are combined with an OR.
	SearchFilter pulumi.StringPtrInput
	// List of indexes that this role has permissions to search. These may be wildcarded, but the index name must begin with an underscore to match internal indexes.
	SearchIndexesAlloweds pulumi.StringArrayInput
	// List of indexes to search when no index is specified. These indexes can be wildcarded, with the exception that '*' does not match internal indexes. To match internal indexes, start with '_'. All internal indexes are represented by '_*'. A user with this role can search other indexes using "index= "
	SearchIndexesDefaults pulumi.StringArrayInput
	// The maximum number of concurrent searches a user with this role is allowed to run. For users with multiple roles, the maximum quota value among all of the roles applies.
	SearchJobsQuota pulumi.IntPtrInput
	// Maximum time span of a search, in seconds. By default, searches are not limited to any specific time window. To override any search time windows from imported roles, set srchTimeWin to '0', as the 'admin' role does.
	SearchTimeWin pulumi.IntPtrInput
}

func (AuthorizationRolesState) ElementType

func (AuthorizationRolesState) ElementType() reflect.Type

type ConfigsConf

type ConfigsConf struct {
	pulumi.CustomResourceState

	Acl ConfigsConfAclOutput `pulumi:"acl"`
	// A '/' separated string consisting of {conf_file_name}/{stanza_name} ex. props/custom_stanza
	Name pulumi.StringOutput `pulumi:"name"`
	// A map of key value pairs for a stanza.
	Variables pulumi.StringMapOutput `pulumi:"variables"`
}

## # Resource: ConfigsConf

Create and manage configuration file stanzas.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewConfigsConf(ctx, "new-conf-stanza", &splunk.ConfigsConfArgs{
			Variables: pulumi.StringMap{
				"disabled":   pulumi.String("false"),
				"custom_key": pulumi.String("value"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetConfigsConf

func GetConfigsConf(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ConfigsConfState, opts ...pulumi.ResourceOption) (*ConfigsConf, error)

GetConfigsConf gets an existing ConfigsConf resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewConfigsConf

func NewConfigsConf(ctx *pulumi.Context,
	name string, args *ConfigsConfArgs, opts ...pulumi.ResourceOption) (*ConfigsConf, error)

NewConfigsConf registers a new resource with the given unique name, arguments, and options.

func (*ConfigsConf) ElementType

func (*ConfigsConf) ElementType() reflect.Type

func (*ConfigsConf) ToConfigsConfOutput

func (i *ConfigsConf) ToConfigsConfOutput() ConfigsConfOutput

func (*ConfigsConf) ToConfigsConfOutputWithContext

func (i *ConfigsConf) ToConfigsConfOutputWithContext(ctx context.Context) ConfigsConfOutput

type ConfigsConfAcl

type ConfigsConfAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type ConfigsConfAclArgs

type ConfigsConfAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (ConfigsConfAclArgs) ElementType

func (ConfigsConfAclArgs) ElementType() reflect.Type

func (ConfigsConfAclArgs) ToConfigsConfAclOutput

func (i ConfigsConfAclArgs) ToConfigsConfAclOutput() ConfigsConfAclOutput

func (ConfigsConfAclArgs) ToConfigsConfAclOutputWithContext

func (i ConfigsConfAclArgs) ToConfigsConfAclOutputWithContext(ctx context.Context) ConfigsConfAclOutput

func (ConfigsConfAclArgs) ToConfigsConfAclPtrOutput

func (i ConfigsConfAclArgs) ToConfigsConfAclPtrOutput() ConfigsConfAclPtrOutput

func (ConfigsConfAclArgs) ToConfigsConfAclPtrOutputWithContext

func (i ConfigsConfAclArgs) ToConfigsConfAclPtrOutputWithContext(ctx context.Context) ConfigsConfAclPtrOutput

type ConfigsConfAclInput

type ConfigsConfAclInput interface {
	pulumi.Input

	ToConfigsConfAclOutput() ConfigsConfAclOutput
	ToConfigsConfAclOutputWithContext(context.Context) ConfigsConfAclOutput
}

ConfigsConfAclInput is an input type that accepts ConfigsConfAclArgs and ConfigsConfAclOutput values. You can construct a concrete instance of `ConfigsConfAclInput` via:

ConfigsConfAclArgs{...}

type ConfigsConfAclOutput

type ConfigsConfAclOutput struct{ *pulumi.OutputState }

func (ConfigsConfAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (ConfigsConfAclOutput) CanChangePerms

func (o ConfigsConfAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (ConfigsConfAclOutput) CanShareApp

func (o ConfigsConfAclOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (ConfigsConfAclOutput) CanShareGlobal

func (o ConfigsConfAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (ConfigsConfAclOutput) CanShareUser

func (o ConfigsConfAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (ConfigsConfAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (ConfigsConfAclOutput) ElementType

func (ConfigsConfAclOutput) ElementType() reflect.Type

func (ConfigsConfAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (ConfigsConfAclOutput) Reads

Properties that indicate resource read permissions.

func (ConfigsConfAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (ConfigsConfAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (ConfigsConfAclOutput) ToConfigsConfAclOutput

func (o ConfigsConfAclOutput) ToConfigsConfAclOutput() ConfigsConfAclOutput

func (ConfigsConfAclOutput) ToConfigsConfAclOutputWithContext

func (o ConfigsConfAclOutput) ToConfigsConfAclOutputWithContext(ctx context.Context) ConfigsConfAclOutput

func (ConfigsConfAclOutput) ToConfigsConfAclPtrOutput

func (o ConfigsConfAclOutput) ToConfigsConfAclPtrOutput() ConfigsConfAclPtrOutput

func (ConfigsConfAclOutput) ToConfigsConfAclPtrOutputWithContext

func (o ConfigsConfAclOutput) ToConfigsConfAclPtrOutputWithContext(ctx context.Context) ConfigsConfAclPtrOutput

func (ConfigsConfAclOutput) Writes

Properties that indicate write permissions of the resource.

type ConfigsConfAclPtrInput

type ConfigsConfAclPtrInput interface {
	pulumi.Input

	ToConfigsConfAclPtrOutput() ConfigsConfAclPtrOutput
	ToConfigsConfAclPtrOutputWithContext(context.Context) ConfigsConfAclPtrOutput
}

ConfigsConfAclPtrInput is an input type that accepts ConfigsConfAclArgs, ConfigsConfAclPtr and ConfigsConfAclPtrOutput values. You can construct a concrete instance of `ConfigsConfAclPtrInput` via:

        ConfigsConfAclArgs{...}

or:

        nil

type ConfigsConfAclPtrOutput

type ConfigsConfAclPtrOutput struct{ *pulumi.OutputState }

func (ConfigsConfAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (ConfigsConfAclPtrOutput) CanChangePerms

func (o ConfigsConfAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (ConfigsConfAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (ConfigsConfAclPtrOutput) CanShareGlobal

func (o ConfigsConfAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (ConfigsConfAclPtrOutput) CanShareUser

func (o ConfigsConfAclPtrOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (ConfigsConfAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (ConfigsConfAclPtrOutput) Elem

func (ConfigsConfAclPtrOutput) ElementType

func (ConfigsConfAclPtrOutput) ElementType() reflect.Type

func (ConfigsConfAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (ConfigsConfAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (ConfigsConfAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (ConfigsConfAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (ConfigsConfAclPtrOutput) ToConfigsConfAclPtrOutput

func (o ConfigsConfAclPtrOutput) ToConfigsConfAclPtrOutput() ConfigsConfAclPtrOutput

func (ConfigsConfAclPtrOutput) ToConfigsConfAclPtrOutputWithContext

func (o ConfigsConfAclPtrOutput) ToConfigsConfAclPtrOutputWithContext(ctx context.Context) ConfigsConfAclPtrOutput

func (ConfigsConfAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type ConfigsConfArgs

type ConfigsConfArgs struct {
	Acl ConfigsConfAclPtrInput
	// A '/' separated string consisting of {conf_file_name}/{stanza_name} ex. props/custom_stanza
	Name pulumi.StringPtrInput
	// A map of key value pairs for a stanza.
	Variables pulumi.StringMapInput
}

The set of arguments for constructing a ConfigsConf resource.

func (ConfigsConfArgs) ElementType

func (ConfigsConfArgs) ElementType() reflect.Type

type ConfigsConfArray added in v0.2.1

type ConfigsConfArray []ConfigsConfInput

func (ConfigsConfArray) ElementType added in v0.2.1

func (ConfigsConfArray) ElementType() reflect.Type

func (ConfigsConfArray) ToConfigsConfArrayOutput added in v0.2.1

func (i ConfigsConfArray) ToConfigsConfArrayOutput() ConfigsConfArrayOutput

func (ConfigsConfArray) ToConfigsConfArrayOutputWithContext added in v0.2.1

func (i ConfigsConfArray) ToConfigsConfArrayOutputWithContext(ctx context.Context) ConfigsConfArrayOutput

type ConfigsConfArrayInput added in v0.2.1

type ConfigsConfArrayInput interface {
	pulumi.Input

	ToConfigsConfArrayOutput() ConfigsConfArrayOutput
	ToConfigsConfArrayOutputWithContext(context.Context) ConfigsConfArrayOutput
}

ConfigsConfArrayInput is an input type that accepts ConfigsConfArray and ConfigsConfArrayOutput values. You can construct a concrete instance of `ConfigsConfArrayInput` via:

ConfigsConfArray{ ConfigsConfArgs{...} }

type ConfigsConfArrayOutput added in v0.2.1

type ConfigsConfArrayOutput struct{ *pulumi.OutputState }

func (ConfigsConfArrayOutput) ElementType added in v0.2.1

func (ConfigsConfArrayOutput) ElementType() reflect.Type

func (ConfigsConfArrayOutput) Index added in v0.2.1

func (ConfigsConfArrayOutput) ToConfigsConfArrayOutput added in v0.2.1

func (o ConfigsConfArrayOutput) ToConfigsConfArrayOutput() ConfigsConfArrayOutput

func (ConfigsConfArrayOutput) ToConfigsConfArrayOutputWithContext added in v0.2.1

func (o ConfigsConfArrayOutput) ToConfigsConfArrayOutputWithContext(ctx context.Context) ConfigsConfArrayOutput

type ConfigsConfInput

type ConfigsConfInput interface {
	pulumi.Input

	ToConfigsConfOutput() ConfigsConfOutput
	ToConfigsConfOutputWithContext(ctx context.Context) ConfigsConfOutput
}

type ConfigsConfMap added in v0.2.1

type ConfigsConfMap map[string]ConfigsConfInput

func (ConfigsConfMap) ElementType added in v0.2.1

func (ConfigsConfMap) ElementType() reflect.Type

func (ConfigsConfMap) ToConfigsConfMapOutput added in v0.2.1

func (i ConfigsConfMap) ToConfigsConfMapOutput() ConfigsConfMapOutput

func (ConfigsConfMap) ToConfigsConfMapOutputWithContext added in v0.2.1

func (i ConfigsConfMap) ToConfigsConfMapOutputWithContext(ctx context.Context) ConfigsConfMapOutput

type ConfigsConfMapInput added in v0.2.1

type ConfigsConfMapInput interface {
	pulumi.Input

	ToConfigsConfMapOutput() ConfigsConfMapOutput
	ToConfigsConfMapOutputWithContext(context.Context) ConfigsConfMapOutput
}

ConfigsConfMapInput is an input type that accepts ConfigsConfMap and ConfigsConfMapOutput values. You can construct a concrete instance of `ConfigsConfMapInput` via:

ConfigsConfMap{ "key": ConfigsConfArgs{...} }

type ConfigsConfMapOutput added in v0.2.1

type ConfigsConfMapOutput struct{ *pulumi.OutputState }

func (ConfigsConfMapOutput) ElementType added in v0.2.1

func (ConfigsConfMapOutput) ElementType() reflect.Type

func (ConfigsConfMapOutput) MapIndex added in v0.2.1

func (ConfigsConfMapOutput) ToConfigsConfMapOutput added in v0.2.1

func (o ConfigsConfMapOutput) ToConfigsConfMapOutput() ConfigsConfMapOutput

func (ConfigsConfMapOutput) ToConfigsConfMapOutputWithContext added in v0.2.1

func (o ConfigsConfMapOutput) ToConfigsConfMapOutputWithContext(ctx context.Context) ConfigsConfMapOutput

type ConfigsConfOutput

type ConfigsConfOutput struct{ *pulumi.OutputState }

func (ConfigsConfOutput) Acl added in v1.1.5

func (ConfigsConfOutput) ElementType

func (ConfigsConfOutput) ElementType() reflect.Type

func (ConfigsConfOutput) Name added in v1.1.5

A '/' separated string consisting of {conf_file_name}/{stanza_name} ex. props/custom_stanza

func (ConfigsConfOutput) ToConfigsConfOutput

func (o ConfigsConfOutput) ToConfigsConfOutput() ConfigsConfOutput

func (ConfigsConfOutput) ToConfigsConfOutputWithContext

func (o ConfigsConfOutput) ToConfigsConfOutputWithContext(ctx context.Context) ConfigsConfOutput

func (ConfigsConfOutput) Variables added in v1.1.5

A map of key value pairs for a stanza.

type ConfigsConfState

type ConfigsConfState struct {
	Acl ConfigsConfAclPtrInput
	// A '/' separated string consisting of {conf_file_name}/{stanza_name} ex. props/custom_stanza
	Name pulumi.StringPtrInput
	// A map of key value pairs for a stanza.
	Variables pulumi.StringMapInput
}

func (ConfigsConfState) ElementType

func (ConfigsConfState) ElementType() reflect.Type

type DataUiViews added in v0.1.1

type DataUiViews struct {
	pulumi.CustomResourceState

	Acl DataUiViewsAclOutput `pulumi:"acl"`
	// Dashboard XML definition.
	EaiData pulumi.StringOutput `pulumi:"eaiData"`
	// Dashboard name.
	// * `eai:data` - (Required) Dashboard XML definition.
	Name pulumi.StringOutput `pulumi:"name"`
}

## # Resource: DataUiViews

Create and manage splunk dashboards/views. ## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewDataUiViews(ctx, "dashboard", &splunk.DataUiViewsArgs{
			Acl: &splunk.DataUiViewsAclArgs{
				App:   pulumi.String("search"),
				Owner: pulumi.String("admin"),
			},
			EaiData: pulumi.String("<dashboard version=\"1.1\"><label>Terraform</label><description>Terraform operations</description><row><panel><chart><search><query>index=_internal sourcetype=splunkd_access useragent=\"splunk-simple-go-client\" | timechart fixedrange=f values(status) by uri_path</query><earliest>-24h@h</earliest><latest>now</latest><sampleRatio>1</sampleRatio></search><option name=\"charting.axisLabelsX.majorLabelStyle.overflowMode\">ellipsisNone</option><option name=\"charting.axisLabelsX.majorLabelStyle.rotation\">0</option><option name=\"charting.axisTitleX.visibility\">collapsed</option><option name=\"charting.axisTitleY.text\">HTTP status codes</option><option name=\"charting.axisTitleY.visibility\">visible</option><option name=\"charting.axisTitleY2.visibility\">visible</option><option name=\"charting.axisX.abbreviation\">none</option><option name=\"charting.axisX.scale\">linear</option><option name=\"charting.axisY.abbreviation\">none</option><option name=\"charting.axisY.scale\">linear</option><option name=\"charting.axisY2.abbreviation\">none</option><option name=\"charting.axisY2.enabled\">0</option><option name=\"charting.axisY2.scale\">inherit</option><option name=\"charting.chart\">column</option><option name=\"charting.chart.bubbleMaximumSize\">50</option><option name=\"charting.chart.bubbleMinimumSize\">10</option><option name=\"charting.chart.bubbleSizeBy\">area</option><option name=\"charting.chart.nullValueMode\">connect</option><option name=\"charting.chart.showDataLabels\">none</option><option name=\"charting.chart.sliceCollapsingThreshold\">0.01</option><option name=\"charting.chart.stackMode\">default</option><option name=\"charting.chart.style\">shiny</option><option name=\"charting.drilldown\">none</option><option name=\"charting.layout.splitSeries\">0</option><option name=\"charting.layout.splitSeries.allowIndependentYRanges\">0</option><option name=\"charting.legend.labelStyle.overflowMode\">ellipsisMiddle</option><option name=\"charting.legend.mode\">standard</option><option name=\"charting.legend.placement\">right</option><option name=\"charting.lineWidth\">2</option><option name=\"trellis.enabled\">0</option><option name=\"trellis.scales.shared\">1</option><option name=\"trellis.size\">small</option><option name=\"trellis.splitBy\">_aggregation</option></chart></panel></row></dashboard>"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetDataUiViews added in v0.1.1

func GetDataUiViews(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataUiViewsState, opts ...pulumi.ResourceOption) (*DataUiViews, error)

GetDataUiViews gets an existing DataUiViews resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataUiViews added in v0.1.1

func NewDataUiViews(ctx *pulumi.Context,
	name string, args *DataUiViewsArgs, opts ...pulumi.ResourceOption) (*DataUiViews, error)

NewDataUiViews registers a new resource with the given unique name, arguments, and options.

func (*DataUiViews) ElementType added in v0.1.1

func (*DataUiViews) ElementType() reflect.Type

func (*DataUiViews) ToDataUiViewsOutput added in v0.1.1

func (i *DataUiViews) ToDataUiViewsOutput() DataUiViewsOutput

func (*DataUiViews) ToDataUiViewsOutputWithContext added in v0.1.1

func (i *DataUiViews) ToDataUiViewsOutputWithContext(ctx context.Context) DataUiViewsOutput

type DataUiViewsAcl added in v0.1.1

type DataUiViewsAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type DataUiViewsAclArgs added in v0.1.1

type DataUiViewsAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (DataUiViewsAclArgs) ElementType added in v0.1.1

func (DataUiViewsAclArgs) ElementType() reflect.Type

func (DataUiViewsAclArgs) ToDataUiViewsAclOutput added in v0.1.1

func (i DataUiViewsAclArgs) ToDataUiViewsAclOutput() DataUiViewsAclOutput

func (DataUiViewsAclArgs) ToDataUiViewsAclOutputWithContext added in v0.1.1

func (i DataUiViewsAclArgs) ToDataUiViewsAclOutputWithContext(ctx context.Context) DataUiViewsAclOutput

func (DataUiViewsAclArgs) ToDataUiViewsAclPtrOutput added in v0.1.1

func (i DataUiViewsAclArgs) ToDataUiViewsAclPtrOutput() DataUiViewsAclPtrOutput

func (DataUiViewsAclArgs) ToDataUiViewsAclPtrOutputWithContext added in v0.1.1

func (i DataUiViewsAclArgs) ToDataUiViewsAclPtrOutputWithContext(ctx context.Context) DataUiViewsAclPtrOutput

type DataUiViewsAclInput added in v0.1.1

type DataUiViewsAclInput interface {
	pulumi.Input

	ToDataUiViewsAclOutput() DataUiViewsAclOutput
	ToDataUiViewsAclOutputWithContext(context.Context) DataUiViewsAclOutput
}

DataUiViewsAclInput is an input type that accepts DataUiViewsAclArgs and DataUiViewsAclOutput values. You can construct a concrete instance of `DataUiViewsAclInput` via:

DataUiViewsAclArgs{...}

type DataUiViewsAclOutput added in v0.1.1

type DataUiViewsAclOutput struct{ *pulumi.OutputState }

func (DataUiViewsAclOutput) App added in v0.1.1

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (DataUiViewsAclOutput) CanChangePerms added in v0.1.1

func (o DataUiViewsAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (DataUiViewsAclOutput) CanShareApp added in v0.1.1

func (o DataUiViewsAclOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (DataUiViewsAclOutput) CanShareGlobal added in v0.1.1

func (o DataUiViewsAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (DataUiViewsAclOutput) CanShareUser added in v0.1.1

func (o DataUiViewsAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (DataUiViewsAclOutput) CanWrite added in v0.1.1

Indicates if the active user can edit this object. Defaults to true.

func (DataUiViewsAclOutput) ElementType added in v0.1.1

func (DataUiViewsAclOutput) ElementType() reflect.Type

func (DataUiViewsAclOutput) Owner added in v0.1.1

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (DataUiViewsAclOutput) Reads added in v0.1.1

Properties that indicate resource read permissions.

func (DataUiViewsAclOutput) Removable added in v0.1.1

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (DataUiViewsAclOutput) Sharing added in v0.1.1

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (DataUiViewsAclOutput) ToDataUiViewsAclOutput added in v0.1.1

func (o DataUiViewsAclOutput) ToDataUiViewsAclOutput() DataUiViewsAclOutput

func (DataUiViewsAclOutput) ToDataUiViewsAclOutputWithContext added in v0.1.1

func (o DataUiViewsAclOutput) ToDataUiViewsAclOutputWithContext(ctx context.Context) DataUiViewsAclOutput

func (DataUiViewsAclOutput) ToDataUiViewsAclPtrOutput added in v0.1.1

func (o DataUiViewsAclOutput) ToDataUiViewsAclPtrOutput() DataUiViewsAclPtrOutput

func (DataUiViewsAclOutput) ToDataUiViewsAclPtrOutputWithContext added in v0.1.1

func (o DataUiViewsAclOutput) ToDataUiViewsAclPtrOutputWithContext(ctx context.Context) DataUiViewsAclPtrOutput

func (DataUiViewsAclOutput) Writes added in v0.1.1

Properties that indicate write permissions of the resource.

type DataUiViewsAclPtrInput added in v0.1.1

type DataUiViewsAclPtrInput interface {
	pulumi.Input

	ToDataUiViewsAclPtrOutput() DataUiViewsAclPtrOutput
	ToDataUiViewsAclPtrOutputWithContext(context.Context) DataUiViewsAclPtrOutput
}

DataUiViewsAclPtrInput is an input type that accepts DataUiViewsAclArgs, DataUiViewsAclPtr and DataUiViewsAclPtrOutput values. You can construct a concrete instance of `DataUiViewsAclPtrInput` via:

        DataUiViewsAclArgs{...}

or:

        nil

func DataUiViewsAclPtr added in v0.1.1

func DataUiViewsAclPtr(v *DataUiViewsAclArgs) DataUiViewsAclPtrInput

type DataUiViewsAclPtrOutput added in v0.1.1

type DataUiViewsAclPtrOutput struct{ *pulumi.OutputState }

func (DataUiViewsAclPtrOutput) App added in v0.1.1

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (DataUiViewsAclPtrOutput) CanChangePerms added in v0.1.1

func (o DataUiViewsAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (DataUiViewsAclPtrOutput) CanShareApp added in v0.1.1

Indicates if the active user can change sharing to app level. Defaults to true.

func (DataUiViewsAclPtrOutput) CanShareGlobal added in v0.1.1

func (o DataUiViewsAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (DataUiViewsAclPtrOutput) CanShareUser added in v0.1.1

func (o DataUiViewsAclPtrOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (DataUiViewsAclPtrOutput) CanWrite added in v0.1.1

Indicates if the active user can edit this object. Defaults to true.

func (DataUiViewsAclPtrOutput) Elem added in v0.1.1

func (DataUiViewsAclPtrOutput) ElementType added in v0.1.1

func (DataUiViewsAclPtrOutput) ElementType() reflect.Type

func (DataUiViewsAclPtrOutput) Owner added in v0.1.1

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (DataUiViewsAclPtrOutput) Reads added in v0.1.1

Properties that indicate resource read permissions.

func (DataUiViewsAclPtrOutput) Removable added in v0.1.1

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (DataUiViewsAclPtrOutput) Sharing added in v0.1.1

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (DataUiViewsAclPtrOutput) ToDataUiViewsAclPtrOutput added in v0.1.1

func (o DataUiViewsAclPtrOutput) ToDataUiViewsAclPtrOutput() DataUiViewsAclPtrOutput

func (DataUiViewsAclPtrOutput) ToDataUiViewsAclPtrOutputWithContext added in v0.1.1

func (o DataUiViewsAclPtrOutput) ToDataUiViewsAclPtrOutputWithContext(ctx context.Context) DataUiViewsAclPtrOutput

func (DataUiViewsAclPtrOutput) Writes added in v0.1.1

Properties that indicate write permissions of the resource.

type DataUiViewsArgs added in v0.1.1

type DataUiViewsArgs struct {
	Acl DataUiViewsAclPtrInput
	// Dashboard XML definition.
	EaiData pulumi.StringInput
	// Dashboard name.
	// * `eai:data` - (Required) Dashboard XML definition.
	Name pulumi.StringPtrInput
}

The set of arguments for constructing a DataUiViews resource.

func (DataUiViewsArgs) ElementType added in v0.1.1

func (DataUiViewsArgs) ElementType() reflect.Type

type DataUiViewsArray added in v0.2.1

type DataUiViewsArray []DataUiViewsInput

func (DataUiViewsArray) ElementType added in v0.2.1

func (DataUiViewsArray) ElementType() reflect.Type

func (DataUiViewsArray) ToDataUiViewsArrayOutput added in v0.2.1

func (i DataUiViewsArray) ToDataUiViewsArrayOutput() DataUiViewsArrayOutput

func (DataUiViewsArray) ToDataUiViewsArrayOutputWithContext added in v0.2.1

func (i DataUiViewsArray) ToDataUiViewsArrayOutputWithContext(ctx context.Context) DataUiViewsArrayOutput

type DataUiViewsArrayInput added in v0.2.1

type DataUiViewsArrayInput interface {
	pulumi.Input

	ToDataUiViewsArrayOutput() DataUiViewsArrayOutput
	ToDataUiViewsArrayOutputWithContext(context.Context) DataUiViewsArrayOutput
}

DataUiViewsArrayInput is an input type that accepts DataUiViewsArray and DataUiViewsArrayOutput values. You can construct a concrete instance of `DataUiViewsArrayInput` via:

DataUiViewsArray{ DataUiViewsArgs{...} }

type DataUiViewsArrayOutput added in v0.2.1

type DataUiViewsArrayOutput struct{ *pulumi.OutputState }

func (DataUiViewsArrayOutput) ElementType added in v0.2.1

func (DataUiViewsArrayOutput) ElementType() reflect.Type

func (DataUiViewsArrayOutput) Index added in v0.2.1

func (DataUiViewsArrayOutput) ToDataUiViewsArrayOutput added in v0.2.1

func (o DataUiViewsArrayOutput) ToDataUiViewsArrayOutput() DataUiViewsArrayOutput

func (DataUiViewsArrayOutput) ToDataUiViewsArrayOutputWithContext added in v0.2.1

func (o DataUiViewsArrayOutput) ToDataUiViewsArrayOutputWithContext(ctx context.Context) DataUiViewsArrayOutput

type DataUiViewsInput added in v0.1.1

type DataUiViewsInput interface {
	pulumi.Input

	ToDataUiViewsOutput() DataUiViewsOutput
	ToDataUiViewsOutputWithContext(ctx context.Context) DataUiViewsOutput
}

type DataUiViewsMap added in v0.2.1

type DataUiViewsMap map[string]DataUiViewsInput

func (DataUiViewsMap) ElementType added in v0.2.1

func (DataUiViewsMap) ElementType() reflect.Type

func (DataUiViewsMap) ToDataUiViewsMapOutput added in v0.2.1

func (i DataUiViewsMap) ToDataUiViewsMapOutput() DataUiViewsMapOutput

func (DataUiViewsMap) ToDataUiViewsMapOutputWithContext added in v0.2.1

func (i DataUiViewsMap) ToDataUiViewsMapOutputWithContext(ctx context.Context) DataUiViewsMapOutput

type DataUiViewsMapInput added in v0.2.1

type DataUiViewsMapInput interface {
	pulumi.Input

	ToDataUiViewsMapOutput() DataUiViewsMapOutput
	ToDataUiViewsMapOutputWithContext(context.Context) DataUiViewsMapOutput
}

DataUiViewsMapInput is an input type that accepts DataUiViewsMap and DataUiViewsMapOutput values. You can construct a concrete instance of `DataUiViewsMapInput` via:

DataUiViewsMap{ "key": DataUiViewsArgs{...} }

type DataUiViewsMapOutput added in v0.2.1

type DataUiViewsMapOutput struct{ *pulumi.OutputState }

func (DataUiViewsMapOutput) ElementType added in v0.2.1

func (DataUiViewsMapOutput) ElementType() reflect.Type

func (DataUiViewsMapOutput) MapIndex added in v0.2.1

func (DataUiViewsMapOutput) ToDataUiViewsMapOutput added in v0.2.1

func (o DataUiViewsMapOutput) ToDataUiViewsMapOutput() DataUiViewsMapOutput

func (DataUiViewsMapOutput) ToDataUiViewsMapOutputWithContext added in v0.2.1

func (o DataUiViewsMapOutput) ToDataUiViewsMapOutputWithContext(ctx context.Context) DataUiViewsMapOutput

type DataUiViewsOutput added in v0.1.1

type DataUiViewsOutput struct{ *pulumi.OutputState }

func (DataUiViewsOutput) Acl added in v1.1.5

func (DataUiViewsOutput) EaiData added in v1.1.5

Dashboard XML definition.

func (DataUiViewsOutput) ElementType added in v0.1.1

func (DataUiViewsOutput) ElementType() reflect.Type

func (DataUiViewsOutput) Name added in v1.1.5

Dashboard name. * `eai:data` - (Required) Dashboard XML definition.

func (DataUiViewsOutput) ToDataUiViewsOutput added in v0.1.1

func (o DataUiViewsOutput) ToDataUiViewsOutput() DataUiViewsOutput

func (DataUiViewsOutput) ToDataUiViewsOutputWithContext added in v0.1.1

func (o DataUiViewsOutput) ToDataUiViewsOutputWithContext(ctx context.Context) DataUiViewsOutput

type DataUiViewsState added in v0.1.1

type DataUiViewsState struct {
	Acl DataUiViewsAclPtrInput
	// Dashboard XML definition.
	EaiData pulumi.StringPtrInput
	// Dashboard name.
	// * `eai:data` - (Required) Dashboard XML definition.
	Name pulumi.StringPtrInput
}

func (DataUiViewsState) ElementType added in v0.1.1

func (DataUiViewsState) ElementType() reflect.Type

type GenericAcl added in v1.1.3

type GenericAcl struct {
	pulumi.CustomResourceState

	// The ACL to apply to the object, including app/owner to properly identify the object.
	// Though technically optional, it should be explicitly set for this resource to really be valid. Some objects, such as
	// apps, require specific values for app and owner. Consult the REST API documentation regarding which values to use for
	// app and owner for objects that don't fit in the normal namespace.
	Acl GenericAclAclOutput `pulumi:"acl"`
	// REST API Endpoint path to the object, relative to servicesNS/<owner>/<app>
	Path pulumi.StringOutput `pulumi:"path"`
}

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewGenericAcl(ctx, "myApp", &splunk.GenericAclArgs{
			Acl: &splunk.GenericAclAclArgs{
				App:   pulumi.String("system"),
				Owner: pulumi.String("nobody"),
				Reads: pulumi.StringArray{
					pulumi.String("*"),
				},
				Writes: pulumi.StringArray{
					pulumi.String("admin"),
					pulumi.String("power"),
				},
			},
			Path: pulumi.String("apps/local/my_app"),
		})
		if err != nil {
			return err
		}
		_, err = splunk.NewGenericAcl(ctx, "myDashboard", &splunk.GenericAclArgs{
			Acl: &splunk.GenericAclAclArgs{
				App:   pulumi.String("my_app"),
				Owner: pulumi.String("joe_user"),
				Reads: pulumi.StringArray{
					pulumi.String("team_joe"),
				},
				Writes: pulumi.StringArray{
					pulumi.String("team_joe"),
				},
			},
			Path: pulumi.String("data/ui/views/my_dashboard"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

## Import

Generic ACL resources can be imported by specifying their owner, app, and path with a colon-delimited string as the ID:

```sh $ pulumi import splunk:index/genericAcl:GenericAcl splunk_generic_acl <owner>:<app>:<path> ```

func GetGenericAcl added in v1.1.3

func GetGenericAcl(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GenericAclState, opts ...pulumi.ResourceOption) (*GenericAcl, error)

GetGenericAcl gets an existing GenericAcl resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGenericAcl added in v1.1.3

func NewGenericAcl(ctx *pulumi.Context,
	name string, args *GenericAclArgs, opts ...pulumi.ResourceOption) (*GenericAcl, error)

NewGenericAcl registers a new resource with the given unique name, arguments, and options.

func (*GenericAcl) ElementType added in v1.1.3

func (*GenericAcl) ElementType() reflect.Type

func (*GenericAcl) ToGenericAclOutput added in v1.1.3

func (i *GenericAcl) ToGenericAclOutput() GenericAclOutput

func (*GenericAcl) ToGenericAclOutputWithContext added in v1.1.3

func (i *GenericAcl) ToGenericAclOutputWithContext(ctx context.Context) GenericAclOutput

type GenericAclAcl added in v1.1.3

type GenericAclAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type GenericAclAclArgs added in v1.1.3

type GenericAclAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (GenericAclAclArgs) ElementType added in v1.1.3

func (GenericAclAclArgs) ElementType() reflect.Type

func (GenericAclAclArgs) ToGenericAclAclOutput added in v1.1.3

func (i GenericAclAclArgs) ToGenericAclAclOutput() GenericAclAclOutput

func (GenericAclAclArgs) ToGenericAclAclOutputWithContext added in v1.1.3

func (i GenericAclAclArgs) ToGenericAclAclOutputWithContext(ctx context.Context) GenericAclAclOutput

func (GenericAclAclArgs) ToGenericAclAclPtrOutput added in v1.1.3

func (i GenericAclAclArgs) ToGenericAclAclPtrOutput() GenericAclAclPtrOutput

func (GenericAclAclArgs) ToGenericAclAclPtrOutputWithContext added in v1.1.3

func (i GenericAclAclArgs) ToGenericAclAclPtrOutputWithContext(ctx context.Context) GenericAclAclPtrOutput

type GenericAclAclInput added in v1.1.3

type GenericAclAclInput interface {
	pulumi.Input

	ToGenericAclAclOutput() GenericAclAclOutput
	ToGenericAclAclOutputWithContext(context.Context) GenericAclAclOutput
}

GenericAclAclInput is an input type that accepts GenericAclAclArgs and GenericAclAclOutput values. You can construct a concrete instance of `GenericAclAclInput` via:

GenericAclAclArgs{...}

type GenericAclAclOutput added in v1.1.3

type GenericAclAclOutput struct{ *pulumi.OutputState }

func (GenericAclAclOutput) App added in v1.1.3

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (GenericAclAclOutput) CanChangePerms added in v1.1.3

func (o GenericAclAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (GenericAclAclOutput) CanShareApp added in v1.1.3

func (o GenericAclAclOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (GenericAclAclOutput) CanShareGlobal added in v1.1.3

func (o GenericAclAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (GenericAclAclOutput) CanShareUser added in v1.1.3

func (o GenericAclAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (GenericAclAclOutput) CanWrite added in v1.1.3

Indicates if the active user can edit this object. Defaults to true.

func (GenericAclAclOutput) ElementType added in v1.1.3

func (GenericAclAclOutput) ElementType() reflect.Type

func (GenericAclAclOutput) Owner added in v1.1.3

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (GenericAclAclOutput) Reads added in v1.1.3

Properties that indicate resource read permissions.

func (GenericAclAclOutput) Removable added in v1.1.3

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (GenericAclAclOutput) Sharing added in v1.1.3

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (GenericAclAclOutput) ToGenericAclAclOutput added in v1.1.3

func (o GenericAclAclOutput) ToGenericAclAclOutput() GenericAclAclOutput

func (GenericAclAclOutput) ToGenericAclAclOutputWithContext added in v1.1.3

func (o GenericAclAclOutput) ToGenericAclAclOutputWithContext(ctx context.Context) GenericAclAclOutput

func (GenericAclAclOutput) ToGenericAclAclPtrOutput added in v1.1.3

func (o GenericAclAclOutput) ToGenericAclAclPtrOutput() GenericAclAclPtrOutput

func (GenericAclAclOutput) ToGenericAclAclPtrOutputWithContext added in v1.1.3

func (o GenericAclAclOutput) ToGenericAclAclPtrOutputWithContext(ctx context.Context) GenericAclAclPtrOutput

func (GenericAclAclOutput) Writes added in v1.1.3

Properties that indicate write permissions of the resource.

type GenericAclAclPtrInput added in v1.1.3

type GenericAclAclPtrInput interface {
	pulumi.Input

	ToGenericAclAclPtrOutput() GenericAclAclPtrOutput
	ToGenericAclAclPtrOutputWithContext(context.Context) GenericAclAclPtrOutput
}

GenericAclAclPtrInput is an input type that accepts GenericAclAclArgs, GenericAclAclPtr and GenericAclAclPtrOutput values. You can construct a concrete instance of `GenericAclAclPtrInput` via:

        GenericAclAclArgs{...}

or:

        nil

func GenericAclAclPtr added in v1.1.3

func GenericAclAclPtr(v *GenericAclAclArgs) GenericAclAclPtrInput

type GenericAclAclPtrOutput added in v1.1.3

type GenericAclAclPtrOutput struct{ *pulumi.OutputState }

func (GenericAclAclPtrOutput) App added in v1.1.3

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (GenericAclAclPtrOutput) CanChangePerms added in v1.1.3

func (o GenericAclAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (GenericAclAclPtrOutput) CanShareApp added in v1.1.3

Indicates if the active user can change sharing to app level. Defaults to true.

func (GenericAclAclPtrOutput) CanShareGlobal added in v1.1.3

func (o GenericAclAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (GenericAclAclPtrOutput) CanShareUser added in v1.1.3

func (o GenericAclAclPtrOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (GenericAclAclPtrOutput) CanWrite added in v1.1.3

Indicates if the active user can edit this object. Defaults to true.

func (GenericAclAclPtrOutput) Elem added in v1.1.3

func (GenericAclAclPtrOutput) ElementType added in v1.1.3

func (GenericAclAclPtrOutput) ElementType() reflect.Type

func (GenericAclAclPtrOutput) Owner added in v1.1.3

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (GenericAclAclPtrOutput) Reads added in v1.1.3

Properties that indicate resource read permissions.

func (GenericAclAclPtrOutput) Removable added in v1.1.3

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (GenericAclAclPtrOutput) Sharing added in v1.1.3

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (GenericAclAclPtrOutput) ToGenericAclAclPtrOutput added in v1.1.3

func (o GenericAclAclPtrOutput) ToGenericAclAclPtrOutput() GenericAclAclPtrOutput

func (GenericAclAclPtrOutput) ToGenericAclAclPtrOutputWithContext added in v1.1.3

func (o GenericAclAclPtrOutput) ToGenericAclAclPtrOutputWithContext(ctx context.Context) GenericAclAclPtrOutput

func (GenericAclAclPtrOutput) Writes added in v1.1.3

Properties that indicate write permissions of the resource.

type GenericAclArgs added in v1.1.3

type GenericAclArgs struct {
	// The ACL to apply to the object, including app/owner to properly identify the object.
	// Though technically optional, it should be explicitly set for this resource to really be valid. Some objects, such as
	// apps, require specific values for app and owner. Consult the REST API documentation regarding which values to use for
	// app and owner for objects that don't fit in the normal namespace.
	Acl GenericAclAclPtrInput
	// REST API Endpoint path to the object, relative to servicesNS/<owner>/<app>
	Path pulumi.StringInput
}

The set of arguments for constructing a GenericAcl resource.

func (GenericAclArgs) ElementType added in v1.1.3

func (GenericAclArgs) ElementType() reflect.Type

type GenericAclArray added in v1.1.3

type GenericAclArray []GenericAclInput

func (GenericAclArray) ElementType added in v1.1.3

func (GenericAclArray) ElementType() reflect.Type

func (GenericAclArray) ToGenericAclArrayOutput added in v1.1.3

func (i GenericAclArray) ToGenericAclArrayOutput() GenericAclArrayOutput

func (GenericAclArray) ToGenericAclArrayOutputWithContext added in v1.1.3

func (i GenericAclArray) ToGenericAclArrayOutputWithContext(ctx context.Context) GenericAclArrayOutput

type GenericAclArrayInput added in v1.1.3

type GenericAclArrayInput interface {
	pulumi.Input

	ToGenericAclArrayOutput() GenericAclArrayOutput
	ToGenericAclArrayOutputWithContext(context.Context) GenericAclArrayOutput
}

GenericAclArrayInput is an input type that accepts GenericAclArray and GenericAclArrayOutput values. You can construct a concrete instance of `GenericAclArrayInput` via:

GenericAclArray{ GenericAclArgs{...} }

type GenericAclArrayOutput added in v1.1.3

type GenericAclArrayOutput struct{ *pulumi.OutputState }

func (GenericAclArrayOutput) ElementType added in v1.1.3

func (GenericAclArrayOutput) ElementType() reflect.Type

func (GenericAclArrayOutput) Index added in v1.1.3

func (GenericAclArrayOutput) ToGenericAclArrayOutput added in v1.1.3

func (o GenericAclArrayOutput) ToGenericAclArrayOutput() GenericAclArrayOutput

func (GenericAclArrayOutput) ToGenericAclArrayOutputWithContext added in v1.1.3

func (o GenericAclArrayOutput) ToGenericAclArrayOutputWithContext(ctx context.Context) GenericAclArrayOutput

type GenericAclInput added in v1.1.3

type GenericAclInput interface {
	pulumi.Input

	ToGenericAclOutput() GenericAclOutput
	ToGenericAclOutputWithContext(ctx context.Context) GenericAclOutput
}

type GenericAclMap added in v1.1.3

type GenericAclMap map[string]GenericAclInput

func (GenericAclMap) ElementType added in v1.1.3

func (GenericAclMap) ElementType() reflect.Type

func (GenericAclMap) ToGenericAclMapOutput added in v1.1.3

func (i GenericAclMap) ToGenericAclMapOutput() GenericAclMapOutput

func (GenericAclMap) ToGenericAclMapOutputWithContext added in v1.1.3

func (i GenericAclMap) ToGenericAclMapOutputWithContext(ctx context.Context) GenericAclMapOutput

type GenericAclMapInput added in v1.1.3

type GenericAclMapInput interface {
	pulumi.Input

	ToGenericAclMapOutput() GenericAclMapOutput
	ToGenericAclMapOutputWithContext(context.Context) GenericAclMapOutput
}

GenericAclMapInput is an input type that accepts GenericAclMap and GenericAclMapOutput values. You can construct a concrete instance of `GenericAclMapInput` via:

GenericAclMap{ "key": GenericAclArgs{...} }

type GenericAclMapOutput added in v1.1.3

type GenericAclMapOutput struct{ *pulumi.OutputState }

func (GenericAclMapOutput) ElementType added in v1.1.3

func (GenericAclMapOutput) ElementType() reflect.Type

func (GenericAclMapOutput) MapIndex added in v1.1.3

func (GenericAclMapOutput) ToGenericAclMapOutput added in v1.1.3

func (o GenericAclMapOutput) ToGenericAclMapOutput() GenericAclMapOutput

func (GenericAclMapOutput) ToGenericAclMapOutputWithContext added in v1.1.3

func (o GenericAclMapOutput) ToGenericAclMapOutputWithContext(ctx context.Context) GenericAclMapOutput

type GenericAclOutput added in v1.1.3

type GenericAclOutput struct{ *pulumi.OutputState }

func (GenericAclOutput) Acl added in v1.1.5

The ACL to apply to the object, including app/owner to properly identify the object. Though technically optional, it should be explicitly set for this resource to really be valid. Some objects, such as apps, require specific values for app and owner. Consult the REST API documentation regarding which values to use for app and owner for objects that don't fit in the normal namespace.

func (GenericAclOutput) ElementType added in v1.1.3

func (GenericAclOutput) ElementType() reflect.Type

func (GenericAclOutput) Path added in v1.1.5

REST API Endpoint path to the object, relative to servicesNS/<owner>/<app>

func (GenericAclOutput) ToGenericAclOutput added in v1.1.3

func (o GenericAclOutput) ToGenericAclOutput() GenericAclOutput

func (GenericAclOutput) ToGenericAclOutputWithContext added in v1.1.3

func (o GenericAclOutput) ToGenericAclOutputWithContext(ctx context.Context) GenericAclOutput

type GenericAclState added in v1.1.3

type GenericAclState struct {
	// The ACL to apply to the object, including app/owner to properly identify the object.
	// Though technically optional, it should be explicitly set for this resource to really be valid. Some objects, such as
	// apps, require specific values for app and owner. Consult the REST API documentation regarding which values to use for
	// app and owner for objects that don't fit in the normal namespace.
	Acl GenericAclAclPtrInput
	// REST API Endpoint path to the object, relative to servicesNS/<owner>/<app>
	Path pulumi.StringPtrInput
}

func (GenericAclState) ElementType added in v1.1.3

func (GenericAclState) ElementType() reflect.Type

type GlobalHttpEventCollector

type GlobalHttpEventCollector struct {
	pulumi.CustomResourceState

	// Number of threads used by HTTP Input server.
	DedicatedIoThreads pulumi.IntOutput `pulumi:"dedicatedIoThreads"`
	// Input disabled indicator.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// Enable SSL protocol for HTTP data input. `true` = SSL enabled, `false` = SSL disabled.
	EnableSsl pulumi.BoolOutput `pulumi:"enableSsl"`
	// Maximum number of simultaneous HTTP connections accepted. Adjusting this value may cause server performance issues and is not generally recommended. Possible values for this setting vary by OS.
	MaxSockets pulumi.IntOutput `pulumi:"maxSockets"`
	// Maximum number of threads that can be used by active HTTP transactions. Adjusting this value may cause server performance issues and is not generally recommended. Possible values for this setting vary by OS.
	MaxThreads pulumi.IntOutput `pulumi:"maxThreads"`
	// HTTP data input IP port.
	Port pulumi.IntOutput `pulumi:"port"`
	// Indicates whether the event collector input writes its configuration to a deployment server repository. When this setting is set to 1 (enabled), the input writes its configuration to the directory specified as repositoryLocation in serverclass.conf.
	// Copy the full contents of the splunkHttpinput app directory to this directory for the configuration to work. When enabled, only the tokens defined in the splunkHttpinput app in this repository are viewable and editable on the API and the Data Inputs page in Splunk Web. When disabled, the input writes its configuration to $SPLUNK_HOME/etc/apps by default. Defaults to 0 (disabled).
	UseDeploymentServer pulumi.IntOutput `pulumi:"useDeploymentServer"`
}

## # Resource: GlobalHttpEventCollector

Update Global HTTP Event Collector input configuration.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewGlobalHttpEventCollector(ctx, "http", &splunk.GlobalHttpEventCollectorArgs{
			Disabled:  pulumi.Bool(false),
			EnableSsl: pulumi.Bool(true),
			Port:      pulumi.Int(8088),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetGlobalHttpEventCollector

func GetGlobalHttpEventCollector(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GlobalHttpEventCollectorState, opts ...pulumi.ResourceOption) (*GlobalHttpEventCollector, error)

GetGlobalHttpEventCollector gets an existing GlobalHttpEventCollector resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGlobalHttpEventCollector

func NewGlobalHttpEventCollector(ctx *pulumi.Context,
	name string, args *GlobalHttpEventCollectorArgs, opts ...pulumi.ResourceOption) (*GlobalHttpEventCollector, error)

NewGlobalHttpEventCollector registers a new resource with the given unique name, arguments, and options.

func (*GlobalHttpEventCollector) ElementType

func (*GlobalHttpEventCollector) ElementType() reflect.Type

func (*GlobalHttpEventCollector) ToGlobalHttpEventCollectorOutput

func (i *GlobalHttpEventCollector) ToGlobalHttpEventCollectorOutput() GlobalHttpEventCollectorOutput

func (*GlobalHttpEventCollector) ToGlobalHttpEventCollectorOutputWithContext

func (i *GlobalHttpEventCollector) ToGlobalHttpEventCollectorOutputWithContext(ctx context.Context) GlobalHttpEventCollectorOutput

type GlobalHttpEventCollectorArgs

type GlobalHttpEventCollectorArgs struct {
	// Number of threads used by HTTP Input server.
	DedicatedIoThreads pulumi.IntPtrInput
	// Input disabled indicator.
	Disabled pulumi.BoolPtrInput
	// Enable SSL protocol for HTTP data input. `true` = SSL enabled, `false` = SSL disabled.
	EnableSsl pulumi.BoolPtrInput
	// Maximum number of simultaneous HTTP connections accepted. Adjusting this value may cause server performance issues and is not generally recommended. Possible values for this setting vary by OS.
	MaxSockets pulumi.IntPtrInput
	// Maximum number of threads that can be used by active HTTP transactions. Adjusting this value may cause server performance issues and is not generally recommended. Possible values for this setting vary by OS.
	MaxThreads pulumi.IntPtrInput
	// HTTP data input IP port.
	Port pulumi.IntPtrInput
	// Indicates whether the event collector input writes its configuration to a deployment server repository. When this setting is set to 1 (enabled), the input writes its configuration to the directory specified as repositoryLocation in serverclass.conf.
	// Copy the full contents of the splunkHttpinput app directory to this directory for the configuration to work. When enabled, only the tokens defined in the splunkHttpinput app in this repository are viewable and editable on the API and the Data Inputs page in Splunk Web. When disabled, the input writes its configuration to $SPLUNK_HOME/etc/apps by default. Defaults to 0 (disabled).
	UseDeploymentServer pulumi.IntPtrInput
}

The set of arguments for constructing a GlobalHttpEventCollector resource.

func (GlobalHttpEventCollectorArgs) ElementType

type GlobalHttpEventCollectorArray added in v0.2.1

type GlobalHttpEventCollectorArray []GlobalHttpEventCollectorInput

func (GlobalHttpEventCollectorArray) ElementType added in v0.2.1

func (GlobalHttpEventCollectorArray) ToGlobalHttpEventCollectorArrayOutput added in v0.2.1

func (i GlobalHttpEventCollectorArray) ToGlobalHttpEventCollectorArrayOutput() GlobalHttpEventCollectorArrayOutput

func (GlobalHttpEventCollectorArray) ToGlobalHttpEventCollectorArrayOutputWithContext added in v0.2.1

func (i GlobalHttpEventCollectorArray) ToGlobalHttpEventCollectorArrayOutputWithContext(ctx context.Context) GlobalHttpEventCollectorArrayOutput

type GlobalHttpEventCollectorArrayInput added in v0.2.1

type GlobalHttpEventCollectorArrayInput interface {
	pulumi.Input

	ToGlobalHttpEventCollectorArrayOutput() GlobalHttpEventCollectorArrayOutput
	ToGlobalHttpEventCollectorArrayOutputWithContext(context.Context) GlobalHttpEventCollectorArrayOutput
}

GlobalHttpEventCollectorArrayInput is an input type that accepts GlobalHttpEventCollectorArray and GlobalHttpEventCollectorArrayOutput values. You can construct a concrete instance of `GlobalHttpEventCollectorArrayInput` via:

GlobalHttpEventCollectorArray{ GlobalHttpEventCollectorArgs{...} }

type GlobalHttpEventCollectorArrayOutput added in v0.2.1

type GlobalHttpEventCollectorArrayOutput struct{ *pulumi.OutputState }

func (GlobalHttpEventCollectorArrayOutput) ElementType added in v0.2.1

func (GlobalHttpEventCollectorArrayOutput) Index added in v0.2.1

func (GlobalHttpEventCollectorArrayOutput) ToGlobalHttpEventCollectorArrayOutput added in v0.2.1

func (o GlobalHttpEventCollectorArrayOutput) ToGlobalHttpEventCollectorArrayOutput() GlobalHttpEventCollectorArrayOutput

func (GlobalHttpEventCollectorArrayOutput) ToGlobalHttpEventCollectorArrayOutputWithContext added in v0.2.1

func (o GlobalHttpEventCollectorArrayOutput) ToGlobalHttpEventCollectorArrayOutputWithContext(ctx context.Context) GlobalHttpEventCollectorArrayOutput

type GlobalHttpEventCollectorInput

type GlobalHttpEventCollectorInput interface {
	pulumi.Input

	ToGlobalHttpEventCollectorOutput() GlobalHttpEventCollectorOutput
	ToGlobalHttpEventCollectorOutputWithContext(ctx context.Context) GlobalHttpEventCollectorOutput
}

type GlobalHttpEventCollectorMap added in v0.2.1

type GlobalHttpEventCollectorMap map[string]GlobalHttpEventCollectorInput

func (GlobalHttpEventCollectorMap) ElementType added in v0.2.1

func (GlobalHttpEventCollectorMap) ToGlobalHttpEventCollectorMapOutput added in v0.2.1

func (i GlobalHttpEventCollectorMap) ToGlobalHttpEventCollectorMapOutput() GlobalHttpEventCollectorMapOutput

func (GlobalHttpEventCollectorMap) ToGlobalHttpEventCollectorMapOutputWithContext added in v0.2.1

func (i GlobalHttpEventCollectorMap) ToGlobalHttpEventCollectorMapOutputWithContext(ctx context.Context) GlobalHttpEventCollectorMapOutput

type GlobalHttpEventCollectorMapInput added in v0.2.1

type GlobalHttpEventCollectorMapInput interface {
	pulumi.Input

	ToGlobalHttpEventCollectorMapOutput() GlobalHttpEventCollectorMapOutput
	ToGlobalHttpEventCollectorMapOutputWithContext(context.Context) GlobalHttpEventCollectorMapOutput
}

GlobalHttpEventCollectorMapInput is an input type that accepts GlobalHttpEventCollectorMap and GlobalHttpEventCollectorMapOutput values. You can construct a concrete instance of `GlobalHttpEventCollectorMapInput` via:

GlobalHttpEventCollectorMap{ "key": GlobalHttpEventCollectorArgs{...} }

type GlobalHttpEventCollectorMapOutput added in v0.2.1

type GlobalHttpEventCollectorMapOutput struct{ *pulumi.OutputState }

func (GlobalHttpEventCollectorMapOutput) ElementType added in v0.2.1

func (GlobalHttpEventCollectorMapOutput) MapIndex added in v0.2.1

func (GlobalHttpEventCollectorMapOutput) ToGlobalHttpEventCollectorMapOutput added in v0.2.1

func (o GlobalHttpEventCollectorMapOutput) ToGlobalHttpEventCollectorMapOutput() GlobalHttpEventCollectorMapOutput

func (GlobalHttpEventCollectorMapOutput) ToGlobalHttpEventCollectorMapOutputWithContext added in v0.2.1

func (o GlobalHttpEventCollectorMapOutput) ToGlobalHttpEventCollectorMapOutputWithContext(ctx context.Context) GlobalHttpEventCollectorMapOutput

type GlobalHttpEventCollectorOutput

type GlobalHttpEventCollectorOutput struct{ *pulumi.OutputState }

func (GlobalHttpEventCollectorOutput) DedicatedIoThreads added in v1.1.5

func (o GlobalHttpEventCollectorOutput) DedicatedIoThreads() pulumi.IntOutput

Number of threads used by HTTP Input server.

func (GlobalHttpEventCollectorOutput) Disabled added in v1.1.5

Input disabled indicator.

func (GlobalHttpEventCollectorOutput) ElementType

func (GlobalHttpEventCollectorOutput) EnableSsl added in v1.1.5

Enable SSL protocol for HTTP data input. `true` = SSL enabled, `false` = SSL disabled.

func (GlobalHttpEventCollectorOutput) MaxSockets added in v1.1.5

Maximum number of simultaneous HTTP connections accepted. Adjusting this value may cause server performance issues and is not generally recommended. Possible values for this setting vary by OS.

func (GlobalHttpEventCollectorOutput) MaxThreads added in v1.1.5

Maximum number of threads that can be used by active HTTP transactions. Adjusting this value may cause server performance issues and is not generally recommended. Possible values for this setting vary by OS.

func (GlobalHttpEventCollectorOutput) Port added in v1.1.5

HTTP data input IP port.

func (GlobalHttpEventCollectorOutput) ToGlobalHttpEventCollectorOutput

func (o GlobalHttpEventCollectorOutput) ToGlobalHttpEventCollectorOutput() GlobalHttpEventCollectorOutput

func (GlobalHttpEventCollectorOutput) ToGlobalHttpEventCollectorOutputWithContext

func (o GlobalHttpEventCollectorOutput) ToGlobalHttpEventCollectorOutputWithContext(ctx context.Context) GlobalHttpEventCollectorOutput

func (GlobalHttpEventCollectorOutput) UseDeploymentServer added in v1.1.5

func (o GlobalHttpEventCollectorOutput) UseDeploymentServer() pulumi.IntOutput

Indicates whether the event collector input writes its configuration to a deployment server repository. When this setting is set to 1 (enabled), the input writes its configuration to the directory specified as repositoryLocation in serverclass.conf. Copy the full contents of the splunkHttpinput app directory to this directory for the configuration to work. When enabled, only the tokens defined in the splunkHttpinput app in this repository are viewable and editable on the API and the Data Inputs page in Splunk Web. When disabled, the input writes its configuration to $SPLUNK_HOME/etc/apps by default. Defaults to 0 (disabled).

type GlobalHttpEventCollectorState

type GlobalHttpEventCollectorState struct {
	// Number of threads used by HTTP Input server.
	DedicatedIoThreads pulumi.IntPtrInput
	// Input disabled indicator.
	Disabled pulumi.BoolPtrInput
	// Enable SSL protocol for HTTP data input. `true` = SSL enabled, `false` = SSL disabled.
	EnableSsl pulumi.BoolPtrInput
	// Maximum number of simultaneous HTTP connections accepted. Adjusting this value may cause server performance issues and is not generally recommended. Possible values for this setting vary by OS.
	MaxSockets pulumi.IntPtrInput
	// Maximum number of threads that can be used by active HTTP transactions. Adjusting this value may cause server performance issues and is not generally recommended. Possible values for this setting vary by OS.
	MaxThreads pulumi.IntPtrInput
	// HTTP data input IP port.
	Port pulumi.IntPtrInput
	// Indicates whether the event collector input writes its configuration to a deployment server repository. When this setting is set to 1 (enabled), the input writes its configuration to the directory specified as repositoryLocation in serverclass.conf.
	// Copy the full contents of the splunkHttpinput app directory to this directory for the configuration to work. When enabled, only the tokens defined in the splunkHttpinput app in this repository are viewable and editable on the API and the Data Inputs page in Splunk Web. When disabled, the input writes its configuration to $SPLUNK_HOME/etc/apps by default. Defaults to 0 (disabled).
	UseDeploymentServer pulumi.IntPtrInput
}

func (GlobalHttpEventCollectorState) ElementType

type Indexes

type Indexes struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl IndexesAclOutput `pulumi:"acl"`
	// Controls how many events make up a block for block signatures. If this is set to 0, block signing is disabled for this index. <br>A recommended value is 100.
	BlockSignSize pulumi.IntOutput `pulumi:"blockSignSize"`
	// Suggestion for the bucket rebuild process for the size of the time-series (tsidx) file to make.
	// <be>Caution: This is an advanced parameter. Inappropriate use of this parameter causes splunkd to not start if rebuild is required. Do not set this parameter unless instructed by Splunk Support.
	// Default value, auto, varies by the amount of physical RAM on the host<br>
	// less than 2GB RAM = 67108864 (64MB) tsidx
	// 2GB to 8GB RAM = 134217728 (128MB) tsidx
	// more than 8GB RAM = 268435456 (256MB) tsidx<br>
	// Values other than "auto" must be 16MB-1GB. Highest legal value (of the numerical part) is 4294967295 You can specify the value using a size suffix: "16777216" or "16MB" are equivalent.
	BucketRebuildMemoryHint pulumi.StringOutput `pulumi:"bucketRebuildMemoryHint"`
	// An absolute path that contains the colddbs for the index. The path must be readable and writable. Cold databases are opened as needed when searching.
	ColdPath pulumi.StringOutput `pulumi:"coldPath"`
	// Destination path for the frozen archive. Use as an alternative to a coldToFrozenScript. Splunk software automatically puts frozen buckets in this directory.
	// <br>
	// Bucket freezing policy is as follows:<br>
	// New style buckets (4.2 and on): removes all files but the rawdata<br>
	// To thaw, run splunk rebuild <bucket dir> on the bucket, then move to the thawed directory<br>
	// Old style buckets (Pre-4.2): gzip all the .data and .tsidx files<br>
	// To thaw, gunzip the zipped files and move the bucket into the thawed directory<br>
	// If both coldToFrozenDir and coldToFrozenScript are specified, coldToFrozenDir takes precedence
	ColdToFrozenDir pulumi.StringOutput `pulumi:"coldToFrozenDir"`
	// Path to the archiving script.
	// <br>If your script requires a program to run it (for example, python), specify the program followed by the path. The script must be in $SPLUNK_HOME/bin or one of its subdirectories.
	// <br>Splunk software ships with an example archiving script in $SPLUNK_HOME/bin called coldToFrozenExample.py. DO NOT use this example script directly. It uses a default path, and if modified in place any changes are overwritten on upgrade.
	// <br>It is best to copy the example script to a new file in bin and modify it for your system. Most importantly, change the default archive path to an existing directory that fits your needs.
	ColdToFrozenScript pulumi.StringOutput `pulumi:"coldToFrozenScript"`
	// This parameter is ignored. The splunkd process always compresses raw data.
	CompressRawdata pulumi.BoolOutput `pulumi:"compressRawdata"`
	// Valid values: (event | metric). Specifies the type of index.
	Datatype pulumi.StringOutput `pulumi:"datatype"`
	// Enables asynchronous "online fsck" bucket repair, which runs concurrently with Splunk software.
	// When enabled, you do not have to wait until buckets are repaired to start the Splunk platform. However, you might observe a slight performance degratation.
	EnableOnlineBucketRepair pulumi.BoolOutput `pulumi:"enableOnlineBucketRepair"`
	// Number of seconds after which indexed data rolls to frozen.
	// Defaults to 188697600 (6 years).Freezing data means it is removed from the index. If you need to archive your data, refer to coldToFrozenDir and coldToFrozenScript parameter documentation.
	FrozenTimePeriodInSecs pulumi.IntOutput `pulumi:"frozenTimePeriodInSecs"`
	// An absolute path that contains the hot and warm buckets for the index.
	// Required. Splunk software does not start if an index lacks a valid homePath.
	// <br>Caution: The path must be readable and writable.
	HomePath pulumi.StringOutput `pulumi:"homePath"`
	// Valid values are: Integer[m|s|h|d].
	// <br>If a warm or cold bucket is older than the specified age, do not create or rebuild its bloomfilter. Specify 0 to never rebuild bloomfilters.
	MaxBloomBackfillBucketAge pulumi.StringOutput `pulumi:"maxBloomBackfillBucketAge"`
	// The number of concurrent optimize processes that can run against a hot bucket.
	// This number should be increased if instructed by Splunk Support. Typically the default value should suffice.
	MaxConcurrentOptimizes pulumi.IntOutput `pulumi:"maxConcurrentOptimizes"`
	// The maximum size in MB for a hot DB to reach before a roll to warm is triggered. Specifying "auto" or "autoHighVolume" causes Splunk software to autotune this parameter (recommended).
	// Use "autoHighVolume" for high volume indexes (such as the main index); otherwise, use "auto". A "high volume index" would typically be considered one that gets over 10GB of data per day.
	MaxDataSize pulumi.StringOutput `pulumi:"maxDataSize"`
	// Maximum hot buckets that can exist per index. Defaults to 3.
	// <br>When maxHotBuckets is exceeded, Splunk software rolls the least recently used (LRU) hot bucket to warm. Both normal hot buckets and quarantined hot buckets count towards this total. This setting operates independently of maxHotIdleSecs, which can also cause hot buckets to roll.
	MaxHotBuckets pulumi.IntOutput `pulumi:"maxHotBuckets"`
	// Maximum life, in seconds, of a hot bucket. Defaults to 0. If a hot bucket exceeds maxHotIdleSecs, Splunk software rolls it to warm. This setting operates independently of maxHotBuckets, which can also cause hot buckets to roll. A value of 0 turns off the idle check (equivalent to INFINITE idle time).
	MaxHotIdleSecs pulumi.IntOutput `pulumi:"maxHotIdleSecs"`
	// Upper bound of target maximum timespan of hot/warm buckets in seconds. Defaults to 7776000 seconds (90 days).
	MaxHotSpanSecs pulumi.IntOutput `pulumi:"maxHotSpanSecs"`
	// The amount of memory, expressed in MB, to allocate for buffering a single tsidx file into memory before flushing to disk. Defaults to 5. The default is recommended for all environments.
	MaxMemMb pulumi.IntOutput `pulumi:"maxMemMb"`
	// Upper limit, in seconds, on how long an event can sit in raw slice. Applies only if replication is enabled for this index. Otherwise ignored. If there are any acknowledged events sharing this raw slice, this paramater does not apply. In this case, maxTimeUnreplicatedWithAcks applies. Highest legal value is 2147483647. To disable this parameter, set to 0.
	MaxMetaEntries pulumi.IntOutput `pulumi:"maxMetaEntries"`
	// Upper limit, in seconds, on how long an event can sit in raw slice. Applies only if replication is enabled for this index. Otherwise ignored.
	// If there are any acknowledged events sharing this raw slice, this paramater does not apply. In this case, maxTimeUnreplicatedWithAcks applies.
	// Highest legal value is 2147483647. To disable this parameter, set to 0.
	MaxTimeUnreplicatedNoAcks pulumi.IntOutput `pulumi:"maxTimeUnreplicatedNoAcks"`
	// Upper limit, in seconds, on how long events can sit unacknowledged in a raw slice. Applies only if you have enabled acks on forwarders and have replication enabled (with clustering).
	// Note: This is an advanced parameter. Make sure you understand the settings on all forwarders before changing this. This number should not exceed ack timeout configured on any forwarder, and should actually be set to at most half of the minimum value of that timeout. You can find this setting in outputs.conf readTimeout setting under the tcpout stanza.
	// To disable, set to 0, but this is NOT recommended. Highest legal value is 2147483647.
	MaxTimeUnreplicatedWithAcks pulumi.IntOutput `pulumi:"maxTimeUnreplicatedWithAcks"`
	// The maximum size of an index (in MB). If an index grows larger than the maximum size, the oldest data is frozen.
	MaxTotalDataSizeMb pulumi.IntOutput `pulumi:"maxTotalDataSizeMb"`
	// The maximum number of warm buckets. If this number is exceeded, the warm bucket/s with the lowest value for their latest times is moved to cold.
	MaxWarmDbCount pulumi.IntOutput `pulumi:"maxWarmDbCount"`
	// Specify an integer (or "disable") for this parameter.
	// This parameter sets how frequently splunkd forces a filesystem sync while compressing journal slices.
	// During this period, uncompressed slices are left on disk even after they are compressed. Then splunkd forces a filesystem sync of the compressed journal and removes the accumulated uncompressed files.
	// If 0 is specified, splunkd forces a filesystem sync after every slice completes compressing. Specifying "disable" disables syncing entirely: uncompressed slices are removed as soon as compression is complete.
	MinRawFileSyncSecs pulumi.StringOutput `pulumi:"minRawFileSyncSecs"`
	// Minimum size of the queue that stores events in memory before committing them to a tsidx file.
	MinStreamGroupQueueSize pulumi.IntOutput `pulumi:"minStreamGroupQueueSize"`
	// The name of the index to create.
	Name pulumi.StringOutput `pulumi:"name"`
	// Related to serviceMetaPeriod. If set, it enables metadata sync every <integer> seconds, but only for records where the sync can be done efficiently in-place, without requiring a full re-write of the metadata file. Records that require full re-write are be sync'ed at serviceMetaPeriod.
	// partialServiceMetaPeriod specifies, in seconds, how frequently it should sync. Zero means that this feature is turned off and serviceMetaPeriod is the only time when metadata sync happens.
	// If the value of partialServiceMetaPeriod is greater than serviceMetaPeriod, this setting has no effect.
	// By default it is turned off (zero).
	PartialServiceMetaPeriod pulumi.IntOutput `pulumi:"partialServiceMetaPeriod"`
	// Specifies, in seconds, how often the indexer checks the status of the child OS processes it launched to see if it can launch new processes for queued requests. Defaults to 15.
	// If set to 0, the indexer checks child process status every second.
	// Highest legal value is 4294967295.
	ProcessTrackerServiceInterval pulumi.IntOutput `pulumi:"processTrackerServiceInterval"`
	// Events with timestamp of quarantineFutureSecs newer than "now" are dropped into quarantine bucket. Defaults to 2592000 (30 days).
	// This is a mechanism to prevent main hot buckets from being polluted with fringe events.
	QuarantineFutureSecs pulumi.IntOutput `pulumi:"quarantineFutureSecs"`
	// Events with timestamp of quarantinePastSecs older than "now" are dropped into quarantine bucket. Defaults to 77760000 (900 days). This is a mechanism to prevent the main hot buckets from being polluted with fringe events.
	QuarantinePastSecs pulumi.IntOutput `pulumi:"quarantinePastSecs"`
	// Target uncompressed size in bytes for individual raw slice in the rawdata journal of the index. Defaults to 131072 (128KB). 0 is not a valid value. If 0 is specified, rawChunkSizeBytes is set to the default value.
	RawChunkSizeBytes pulumi.IntOutput `pulumi:"rawChunkSizeBytes"`
	// Index replication control. This parameter applies to only clustering slaves.
	// auto = Use the master index replication configuration value.
	// 0 = Turn off replication for this index.
	RepFactor pulumi.StringOutput `pulumi:"repFactor"`
	// How frequently (in seconds) to check if a new hot bucket needs to be created. Also, how frequently to check if there are any warm/cold buckets that should be rolled/frozen.
	RotatePeriodInSecs pulumi.IntOutput `pulumi:"rotatePeriodInSecs"`
	// Defines how frequently metadata is synced to disk, in seconds. Defaults to 25 (seconds).
	// You may want to set this to a higher value if the sum of your metadata file sizes is larger than many tens of megabytes, to avoid the hit on I/O in the indexing fast path.
	ServiceMetaPeriod pulumi.IntOutput `pulumi:"serviceMetaPeriod"`
	// When true, a sync operation is called before file descriptor is closed on metadata file updates. This functionality improves integrity of metadata files, especially in regards to operating system crashes/machine failures.
	SyncMeta pulumi.BoolOutput `pulumi:"syncMeta"`
	// An absolute path that contains the thawed (resurrected) databases for the index.
	// Cannot be defined in terms of a volume definition.
	// Required. Splunk software does not start if an index lacks a valid thawedPath.
	ThawedPath pulumi.StringOutput `pulumi:"thawedPath"`
	// Defines how frequently Splunk software checks for index throttling condition, in seconds. Defaults to 15 (seconds).
	ThrottleCheckPeriod pulumi.IntOutput `pulumi:"throttleCheckPeriod"`
	// Location to store datamodel acceleration TSIDX data for this index. Restart splunkd after changing this parameter.
	// If specified, it must be defined in terms of a volume definition.
	TstatsHomePath pulumi.StringOutput `pulumi:"tstatsHomePath"`
	// Path to a script to run when moving data from warm to cold.
	// This attribute is supported for backwards compatibility with Splunk software versions older than 4.0. Contact Splunk support if you need help configuring this setting.
	WarmToColdScript pulumi.StringOutput `pulumi:"warmToColdScript"`
}

## # Resource: Indexes

Create and manage data indexes.

## Authorization and authentication

By default, all users can list all indexes. However, if the indexesListAll capability is enabled in authorize.conf, access to all indexes is limited to only those roles with this capability. To enable indexesListAll capability restrictions on the data/indexes endpoint, create a [capability::indexes_list_all] stanza in authorize.conf. Specify indexes_list_all=enabled for any role permitted to list all indexes from this endpoint.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewIndexes(ctx, "user01-index", &splunk.IndexesArgs{
			MaxHotBuckets:      pulumi.Int(6),
			MaxTotalDataSizeMb: pulumi.Int(1000000),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetIndexes

func GetIndexes(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IndexesState, opts ...pulumi.ResourceOption) (*Indexes, error)

GetIndexes gets an existing Indexes resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIndexes

func NewIndexes(ctx *pulumi.Context,
	name string, args *IndexesArgs, opts ...pulumi.ResourceOption) (*Indexes, error)

NewIndexes registers a new resource with the given unique name, arguments, and options.

func (*Indexes) ElementType

func (*Indexes) ElementType() reflect.Type

func (*Indexes) ToIndexesOutput

func (i *Indexes) ToIndexesOutput() IndexesOutput

func (*Indexes) ToIndexesOutputWithContext

func (i *Indexes) ToIndexesOutputWithContext(ctx context.Context) IndexesOutput

type IndexesAcl

type IndexesAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type IndexesAclArgs

type IndexesAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (IndexesAclArgs) ElementType

func (IndexesAclArgs) ElementType() reflect.Type

func (IndexesAclArgs) ToIndexesAclOutput

func (i IndexesAclArgs) ToIndexesAclOutput() IndexesAclOutput

func (IndexesAclArgs) ToIndexesAclOutputWithContext

func (i IndexesAclArgs) ToIndexesAclOutputWithContext(ctx context.Context) IndexesAclOutput

func (IndexesAclArgs) ToIndexesAclPtrOutput

func (i IndexesAclArgs) ToIndexesAclPtrOutput() IndexesAclPtrOutput

func (IndexesAclArgs) ToIndexesAclPtrOutputWithContext

func (i IndexesAclArgs) ToIndexesAclPtrOutputWithContext(ctx context.Context) IndexesAclPtrOutput

type IndexesAclInput

type IndexesAclInput interface {
	pulumi.Input

	ToIndexesAclOutput() IndexesAclOutput
	ToIndexesAclOutputWithContext(context.Context) IndexesAclOutput
}

IndexesAclInput is an input type that accepts IndexesAclArgs and IndexesAclOutput values. You can construct a concrete instance of `IndexesAclInput` via:

IndexesAclArgs{...}

type IndexesAclOutput

type IndexesAclOutput struct{ *pulumi.OutputState }

func (IndexesAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (IndexesAclOutput) CanChangePerms

func (o IndexesAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (IndexesAclOutput) CanShareApp

func (o IndexesAclOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (IndexesAclOutput) CanShareGlobal

func (o IndexesAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (IndexesAclOutput) CanShareUser

func (o IndexesAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (IndexesAclOutput) CanWrite

func (o IndexesAclOutput) CanWrite() pulumi.BoolPtrOutput

Indicates if the active user can edit this object. Defaults to true.

func (IndexesAclOutput) ElementType

func (IndexesAclOutput) ElementType() reflect.Type

func (IndexesAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (IndexesAclOutput) Reads

Properties that indicate resource read permissions.

func (IndexesAclOutput) Removable

func (o IndexesAclOutput) Removable() pulumi.BoolPtrOutput

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (IndexesAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (IndexesAclOutput) ToIndexesAclOutput

func (o IndexesAclOutput) ToIndexesAclOutput() IndexesAclOutput

func (IndexesAclOutput) ToIndexesAclOutputWithContext

func (o IndexesAclOutput) ToIndexesAclOutputWithContext(ctx context.Context) IndexesAclOutput

func (IndexesAclOutput) ToIndexesAclPtrOutput

func (o IndexesAclOutput) ToIndexesAclPtrOutput() IndexesAclPtrOutput

func (IndexesAclOutput) ToIndexesAclPtrOutputWithContext

func (o IndexesAclOutput) ToIndexesAclPtrOutputWithContext(ctx context.Context) IndexesAclPtrOutput

func (IndexesAclOutput) Writes

Properties that indicate write permissions of the resource.

type IndexesAclPtrInput

type IndexesAclPtrInput interface {
	pulumi.Input

	ToIndexesAclPtrOutput() IndexesAclPtrOutput
	ToIndexesAclPtrOutputWithContext(context.Context) IndexesAclPtrOutput
}

IndexesAclPtrInput is an input type that accepts IndexesAclArgs, IndexesAclPtr and IndexesAclPtrOutput values. You can construct a concrete instance of `IndexesAclPtrInput` via:

        IndexesAclArgs{...}

or:

        nil

func IndexesAclPtr

func IndexesAclPtr(v *IndexesAclArgs) IndexesAclPtrInput

type IndexesAclPtrOutput

type IndexesAclPtrOutput struct{ *pulumi.OutputState }

func (IndexesAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (IndexesAclPtrOutput) CanChangePerms

func (o IndexesAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (IndexesAclPtrOutput) CanShareApp

func (o IndexesAclPtrOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (IndexesAclPtrOutput) CanShareGlobal

func (o IndexesAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (IndexesAclPtrOutput) CanShareUser

func (o IndexesAclPtrOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (IndexesAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (IndexesAclPtrOutput) Elem

func (IndexesAclPtrOutput) ElementType

func (IndexesAclPtrOutput) ElementType() reflect.Type

func (IndexesAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (IndexesAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (IndexesAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (IndexesAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (IndexesAclPtrOutput) ToIndexesAclPtrOutput

func (o IndexesAclPtrOutput) ToIndexesAclPtrOutput() IndexesAclPtrOutput

func (IndexesAclPtrOutput) ToIndexesAclPtrOutputWithContext

func (o IndexesAclPtrOutput) ToIndexesAclPtrOutputWithContext(ctx context.Context) IndexesAclPtrOutput

func (IndexesAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type IndexesArgs

type IndexesArgs struct {
	// The app/user context that is the namespace for the resource
	Acl IndexesAclPtrInput
	// Controls how many events make up a block for block signatures. If this is set to 0, block signing is disabled for this index. <br>A recommended value is 100.
	BlockSignSize pulumi.IntPtrInput
	// Suggestion for the bucket rebuild process for the size of the time-series (tsidx) file to make.
	// <be>Caution: This is an advanced parameter. Inappropriate use of this parameter causes splunkd to not start if rebuild is required. Do not set this parameter unless instructed by Splunk Support.
	// Default value, auto, varies by the amount of physical RAM on the host<br>
	// less than 2GB RAM = 67108864 (64MB) tsidx
	// 2GB to 8GB RAM = 134217728 (128MB) tsidx
	// more than 8GB RAM = 268435456 (256MB) tsidx<br>
	// Values other than "auto" must be 16MB-1GB. Highest legal value (of the numerical part) is 4294967295 You can specify the value using a size suffix: "16777216" or "16MB" are equivalent.
	BucketRebuildMemoryHint pulumi.StringPtrInput
	// An absolute path that contains the colddbs for the index. The path must be readable and writable. Cold databases are opened as needed when searching.
	ColdPath pulumi.StringPtrInput
	// Destination path for the frozen archive. Use as an alternative to a coldToFrozenScript. Splunk software automatically puts frozen buckets in this directory.
	// <br>
	// Bucket freezing policy is as follows:<br>
	// New style buckets (4.2 and on): removes all files but the rawdata<br>
	// To thaw, run splunk rebuild <bucket dir> on the bucket, then move to the thawed directory<br>
	// Old style buckets (Pre-4.2): gzip all the .data and .tsidx files<br>
	// To thaw, gunzip the zipped files and move the bucket into the thawed directory<br>
	// If both coldToFrozenDir and coldToFrozenScript are specified, coldToFrozenDir takes precedence
	ColdToFrozenDir pulumi.StringPtrInput
	// Path to the archiving script.
	// <br>If your script requires a program to run it (for example, python), specify the program followed by the path. The script must be in $SPLUNK_HOME/bin or one of its subdirectories.
	// <br>Splunk software ships with an example archiving script in $SPLUNK_HOME/bin called coldToFrozenExample.py. DO NOT use this example script directly. It uses a default path, and if modified in place any changes are overwritten on upgrade.
	// <br>It is best to copy the example script to a new file in bin and modify it for your system. Most importantly, change the default archive path to an existing directory that fits your needs.
	ColdToFrozenScript pulumi.StringPtrInput
	// This parameter is ignored. The splunkd process always compresses raw data.
	CompressRawdata pulumi.BoolPtrInput
	// Valid values: (event | metric). Specifies the type of index.
	Datatype pulumi.StringPtrInput
	// Enables asynchronous "online fsck" bucket repair, which runs concurrently with Splunk software.
	// When enabled, you do not have to wait until buckets are repaired to start the Splunk platform. However, you might observe a slight performance degratation.
	EnableOnlineBucketRepair pulumi.BoolPtrInput
	// Number of seconds after which indexed data rolls to frozen.
	// Defaults to 188697600 (6 years).Freezing data means it is removed from the index. If you need to archive your data, refer to coldToFrozenDir and coldToFrozenScript parameter documentation.
	FrozenTimePeriodInSecs pulumi.IntPtrInput
	// An absolute path that contains the hot and warm buckets for the index.
	// Required. Splunk software does not start if an index lacks a valid homePath.
	// <br>Caution: The path must be readable and writable.
	HomePath pulumi.StringPtrInput
	// Valid values are: Integer[m|s|h|d].
	// <br>If a warm or cold bucket is older than the specified age, do not create or rebuild its bloomfilter. Specify 0 to never rebuild bloomfilters.
	MaxBloomBackfillBucketAge pulumi.StringPtrInput
	// The number of concurrent optimize processes that can run against a hot bucket.
	// This number should be increased if instructed by Splunk Support. Typically the default value should suffice.
	MaxConcurrentOptimizes pulumi.IntPtrInput
	// The maximum size in MB for a hot DB to reach before a roll to warm is triggered. Specifying "auto" or "autoHighVolume" causes Splunk software to autotune this parameter (recommended).
	// Use "autoHighVolume" for high volume indexes (such as the main index); otherwise, use "auto". A "high volume index" would typically be considered one that gets over 10GB of data per day.
	MaxDataSize pulumi.StringPtrInput
	// Maximum hot buckets that can exist per index. Defaults to 3.
	// <br>When maxHotBuckets is exceeded, Splunk software rolls the least recently used (LRU) hot bucket to warm. Both normal hot buckets and quarantined hot buckets count towards this total. This setting operates independently of maxHotIdleSecs, which can also cause hot buckets to roll.
	MaxHotBuckets pulumi.IntPtrInput
	// Maximum life, in seconds, of a hot bucket. Defaults to 0. If a hot bucket exceeds maxHotIdleSecs, Splunk software rolls it to warm. This setting operates independently of maxHotBuckets, which can also cause hot buckets to roll. A value of 0 turns off the idle check (equivalent to INFINITE idle time).
	MaxHotIdleSecs pulumi.IntPtrInput
	// Upper bound of target maximum timespan of hot/warm buckets in seconds. Defaults to 7776000 seconds (90 days).
	MaxHotSpanSecs pulumi.IntPtrInput
	// The amount of memory, expressed in MB, to allocate for buffering a single tsidx file into memory before flushing to disk. Defaults to 5. The default is recommended for all environments.
	MaxMemMb pulumi.IntPtrInput
	// Upper limit, in seconds, on how long an event can sit in raw slice. Applies only if replication is enabled for this index. Otherwise ignored. If there are any acknowledged events sharing this raw slice, this paramater does not apply. In this case, maxTimeUnreplicatedWithAcks applies. Highest legal value is 2147483647. To disable this parameter, set to 0.
	MaxMetaEntries pulumi.IntPtrInput
	// Upper limit, in seconds, on how long an event can sit in raw slice. Applies only if replication is enabled for this index. Otherwise ignored.
	// If there are any acknowledged events sharing this raw slice, this paramater does not apply. In this case, maxTimeUnreplicatedWithAcks applies.
	// Highest legal value is 2147483647. To disable this parameter, set to 0.
	MaxTimeUnreplicatedNoAcks pulumi.IntPtrInput
	// Upper limit, in seconds, on how long events can sit unacknowledged in a raw slice. Applies only if you have enabled acks on forwarders and have replication enabled (with clustering).
	// Note: This is an advanced parameter. Make sure you understand the settings on all forwarders before changing this. This number should not exceed ack timeout configured on any forwarder, and should actually be set to at most half of the minimum value of that timeout. You can find this setting in outputs.conf readTimeout setting under the tcpout stanza.
	// To disable, set to 0, but this is NOT recommended. Highest legal value is 2147483647.
	MaxTimeUnreplicatedWithAcks pulumi.IntPtrInput
	// The maximum size of an index (in MB). If an index grows larger than the maximum size, the oldest data is frozen.
	MaxTotalDataSizeMb pulumi.IntPtrInput
	// The maximum number of warm buckets. If this number is exceeded, the warm bucket/s with the lowest value for their latest times is moved to cold.
	MaxWarmDbCount pulumi.IntPtrInput
	// Specify an integer (or "disable") for this parameter.
	// This parameter sets how frequently splunkd forces a filesystem sync while compressing journal slices.
	// During this period, uncompressed slices are left on disk even after they are compressed. Then splunkd forces a filesystem sync of the compressed journal and removes the accumulated uncompressed files.
	// If 0 is specified, splunkd forces a filesystem sync after every slice completes compressing. Specifying "disable" disables syncing entirely: uncompressed slices are removed as soon as compression is complete.
	MinRawFileSyncSecs pulumi.StringPtrInput
	// Minimum size of the queue that stores events in memory before committing them to a tsidx file.
	MinStreamGroupQueueSize pulumi.IntPtrInput
	// The name of the index to create.
	Name pulumi.StringPtrInput
	// Related to serviceMetaPeriod. If set, it enables metadata sync every <integer> seconds, but only for records where the sync can be done efficiently in-place, without requiring a full re-write of the metadata file. Records that require full re-write are be sync'ed at serviceMetaPeriod.
	// partialServiceMetaPeriod specifies, in seconds, how frequently it should sync. Zero means that this feature is turned off and serviceMetaPeriod is the only time when metadata sync happens.
	// If the value of partialServiceMetaPeriod is greater than serviceMetaPeriod, this setting has no effect.
	// By default it is turned off (zero).
	PartialServiceMetaPeriod pulumi.IntPtrInput
	// Specifies, in seconds, how often the indexer checks the status of the child OS processes it launched to see if it can launch new processes for queued requests. Defaults to 15.
	// If set to 0, the indexer checks child process status every second.
	// Highest legal value is 4294967295.
	ProcessTrackerServiceInterval pulumi.IntPtrInput
	// Events with timestamp of quarantineFutureSecs newer than "now" are dropped into quarantine bucket. Defaults to 2592000 (30 days).
	// This is a mechanism to prevent main hot buckets from being polluted with fringe events.
	QuarantineFutureSecs pulumi.IntPtrInput
	// Events with timestamp of quarantinePastSecs older than "now" are dropped into quarantine bucket. Defaults to 77760000 (900 days). This is a mechanism to prevent the main hot buckets from being polluted with fringe events.
	QuarantinePastSecs pulumi.IntPtrInput
	// Target uncompressed size in bytes for individual raw slice in the rawdata journal of the index. Defaults to 131072 (128KB). 0 is not a valid value. If 0 is specified, rawChunkSizeBytes is set to the default value.
	RawChunkSizeBytes pulumi.IntPtrInput
	// Index replication control. This parameter applies to only clustering slaves.
	// auto = Use the master index replication configuration value.
	// 0 = Turn off replication for this index.
	RepFactor pulumi.StringPtrInput
	// How frequently (in seconds) to check if a new hot bucket needs to be created. Also, how frequently to check if there are any warm/cold buckets that should be rolled/frozen.
	RotatePeriodInSecs pulumi.IntPtrInput
	// Defines how frequently metadata is synced to disk, in seconds. Defaults to 25 (seconds).
	// You may want to set this to a higher value if the sum of your metadata file sizes is larger than many tens of megabytes, to avoid the hit on I/O in the indexing fast path.
	ServiceMetaPeriod pulumi.IntPtrInput
	// When true, a sync operation is called before file descriptor is closed on metadata file updates. This functionality improves integrity of metadata files, especially in regards to operating system crashes/machine failures.
	SyncMeta pulumi.BoolPtrInput
	// An absolute path that contains the thawed (resurrected) databases for the index.
	// Cannot be defined in terms of a volume definition.
	// Required. Splunk software does not start if an index lacks a valid thawedPath.
	ThawedPath pulumi.StringPtrInput
	// Defines how frequently Splunk software checks for index throttling condition, in seconds. Defaults to 15 (seconds).
	ThrottleCheckPeriod pulumi.IntPtrInput
	// Location to store datamodel acceleration TSIDX data for this index. Restart splunkd after changing this parameter.
	// If specified, it must be defined in terms of a volume definition.
	TstatsHomePath pulumi.StringPtrInput
	// Path to a script to run when moving data from warm to cold.
	// This attribute is supported for backwards compatibility with Splunk software versions older than 4.0. Contact Splunk support if you need help configuring this setting.
	WarmToColdScript pulumi.StringPtrInput
}

The set of arguments for constructing a Indexes resource.

func (IndexesArgs) ElementType

func (IndexesArgs) ElementType() reflect.Type

type IndexesArray added in v0.2.1

type IndexesArray []IndexesInput

func (IndexesArray) ElementType added in v0.2.1

func (IndexesArray) ElementType() reflect.Type

func (IndexesArray) ToIndexesArrayOutput added in v0.2.1

func (i IndexesArray) ToIndexesArrayOutput() IndexesArrayOutput

func (IndexesArray) ToIndexesArrayOutputWithContext added in v0.2.1

func (i IndexesArray) ToIndexesArrayOutputWithContext(ctx context.Context) IndexesArrayOutput

type IndexesArrayInput added in v0.2.1

type IndexesArrayInput interface {
	pulumi.Input

	ToIndexesArrayOutput() IndexesArrayOutput
	ToIndexesArrayOutputWithContext(context.Context) IndexesArrayOutput
}

IndexesArrayInput is an input type that accepts IndexesArray and IndexesArrayOutput values. You can construct a concrete instance of `IndexesArrayInput` via:

IndexesArray{ IndexesArgs{...} }

type IndexesArrayOutput added in v0.2.1

type IndexesArrayOutput struct{ *pulumi.OutputState }

func (IndexesArrayOutput) ElementType added in v0.2.1

func (IndexesArrayOutput) ElementType() reflect.Type

func (IndexesArrayOutput) Index added in v0.2.1

func (IndexesArrayOutput) ToIndexesArrayOutput added in v0.2.1

func (o IndexesArrayOutput) ToIndexesArrayOutput() IndexesArrayOutput

func (IndexesArrayOutput) ToIndexesArrayOutputWithContext added in v0.2.1

func (o IndexesArrayOutput) ToIndexesArrayOutputWithContext(ctx context.Context) IndexesArrayOutput

type IndexesInput

type IndexesInput interface {
	pulumi.Input

	ToIndexesOutput() IndexesOutput
	ToIndexesOutputWithContext(ctx context.Context) IndexesOutput
}

type IndexesMap added in v0.2.1

type IndexesMap map[string]IndexesInput

func (IndexesMap) ElementType added in v0.2.1

func (IndexesMap) ElementType() reflect.Type

func (IndexesMap) ToIndexesMapOutput added in v0.2.1

func (i IndexesMap) ToIndexesMapOutput() IndexesMapOutput

func (IndexesMap) ToIndexesMapOutputWithContext added in v0.2.1

func (i IndexesMap) ToIndexesMapOutputWithContext(ctx context.Context) IndexesMapOutput

type IndexesMapInput added in v0.2.1

type IndexesMapInput interface {
	pulumi.Input

	ToIndexesMapOutput() IndexesMapOutput
	ToIndexesMapOutputWithContext(context.Context) IndexesMapOutput
}

IndexesMapInput is an input type that accepts IndexesMap and IndexesMapOutput values. You can construct a concrete instance of `IndexesMapInput` via:

IndexesMap{ "key": IndexesArgs{...} }

type IndexesMapOutput added in v0.2.1

type IndexesMapOutput struct{ *pulumi.OutputState }

func (IndexesMapOutput) ElementType added in v0.2.1

func (IndexesMapOutput) ElementType() reflect.Type

func (IndexesMapOutput) MapIndex added in v0.2.1

func (IndexesMapOutput) ToIndexesMapOutput added in v0.2.1

func (o IndexesMapOutput) ToIndexesMapOutput() IndexesMapOutput

func (IndexesMapOutput) ToIndexesMapOutputWithContext added in v0.2.1

func (o IndexesMapOutput) ToIndexesMapOutputWithContext(ctx context.Context) IndexesMapOutput

type IndexesOutput

type IndexesOutput struct{ *pulumi.OutputState }

func (IndexesOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (IndexesOutput) BlockSignSize added in v1.1.5

func (o IndexesOutput) BlockSignSize() pulumi.IntOutput

Controls how many events make up a block for block signatures. If this is set to 0, block signing is disabled for this index. <br>A recommended value is 100.

func (IndexesOutput) BucketRebuildMemoryHint added in v1.1.5

func (o IndexesOutput) BucketRebuildMemoryHint() pulumi.StringOutput

Suggestion for the bucket rebuild process for the size of the time-series (tsidx) file to make. <be>Caution: This is an advanced parameter. Inappropriate use of this parameter causes splunkd to not start if rebuild is required. Do not set this parameter unless instructed by Splunk Support. Default value, auto, varies by the amount of physical RAM on the host<br> less than 2GB RAM = 67108864 (64MB) tsidx 2GB to 8GB RAM = 134217728 (128MB) tsidx more than 8GB RAM = 268435456 (256MB) tsidx<br> Values other than "auto" must be 16MB-1GB. Highest legal value (of the numerical part) is 4294967295 You can specify the value using a size suffix: "16777216" or "16MB" are equivalent.

func (IndexesOutput) ColdPath added in v1.1.5

func (o IndexesOutput) ColdPath() pulumi.StringOutput

An absolute path that contains the colddbs for the index. The path must be readable and writable. Cold databases are opened as needed when searching.

func (IndexesOutput) ColdToFrozenDir added in v1.1.5

func (o IndexesOutput) ColdToFrozenDir() pulumi.StringOutput

Destination path for the frozen archive. Use as an alternative to a coldToFrozenScript. Splunk software automatically puts frozen buckets in this directory. <br> Bucket freezing policy is as follows:<br> New style buckets (4.2 and on): removes all files but the rawdata<br> To thaw, run splunk rebuild <bucket dir> on the bucket, then move to the thawed directory<br> Old style buckets (Pre-4.2): gzip all the .data and .tsidx files<br> To thaw, gunzip the zipped files and move the bucket into the thawed directory<br> If both coldToFrozenDir and coldToFrozenScript are specified, coldToFrozenDir takes precedence

func (IndexesOutput) ColdToFrozenScript added in v1.1.5

func (o IndexesOutput) ColdToFrozenScript() pulumi.StringOutput

Path to the archiving script. <br>If your script requires a program to run it (for example, python), specify the program followed by the path. The script must be in $SPLUNK_HOME/bin or one of its subdirectories. <br>Splunk software ships with an example archiving script in $SPLUNK_HOME/bin called coldToFrozenExample.py. DO NOT use this example script directly. It uses a default path, and if modified in place any changes are overwritten on upgrade. <br>It is best to copy the example script to a new file in bin and modify it for your system. Most importantly, change the default archive path to an existing directory that fits your needs.

func (IndexesOutput) CompressRawdata added in v1.1.5

func (o IndexesOutput) CompressRawdata() pulumi.BoolOutput

This parameter is ignored. The splunkd process always compresses raw data.

func (IndexesOutput) Datatype added in v1.1.5

func (o IndexesOutput) Datatype() pulumi.StringOutput

Valid values: (event | metric). Specifies the type of index.

func (IndexesOutput) ElementType

func (IndexesOutput) ElementType() reflect.Type

func (IndexesOutput) EnableOnlineBucketRepair added in v1.1.5

func (o IndexesOutput) EnableOnlineBucketRepair() pulumi.BoolOutput

Enables asynchronous "online fsck" bucket repair, which runs concurrently with Splunk software. When enabled, you do not have to wait until buckets are repaired to start the Splunk platform. However, you might observe a slight performance degratation.

func (IndexesOutput) FrozenTimePeriodInSecs added in v1.1.5

func (o IndexesOutput) FrozenTimePeriodInSecs() pulumi.IntOutput

Number of seconds after which indexed data rolls to frozen. Defaults to 188697600 (6 years).Freezing data means it is removed from the index. If you need to archive your data, refer to coldToFrozenDir and coldToFrozenScript parameter documentation.

func (IndexesOutput) HomePath added in v1.1.5

func (o IndexesOutput) HomePath() pulumi.StringOutput

An absolute path that contains the hot and warm buckets for the index. Required. Splunk software does not start if an index lacks a valid homePath. <br>Caution: The path must be readable and writable.

func (IndexesOutput) MaxBloomBackfillBucketAge added in v1.1.5

func (o IndexesOutput) MaxBloomBackfillBucketAge() pulumi.StringOutput

Valid values are: Integer[m|s|h|d]. <br>If a warm or cold bucket is older than the specified age, do not create or rebuild its bloomfilter. Specify 0 to never rebuild bloomfilters.

func (IndexesOutput) MaxConcurrentOptimizes added in v1.1.5

func (o IndexesOutput) MaxConcurrentOptimizes() pulumi.IntOutput

The number of concurrent optimize processes that can run against a hot bucket. This number should be increased if instructed by Splunk Support. Typically the default value should suffice.

func (IndexesOutput) MaxDataSize added in v1.1.5

func (o IndexesOutput) MaxDataSize() pulumi.StringOutput

The maximum size in MB for a hot DB to reach before a roll to warm is triggered. Specifying "auto" or "autoHighVolume" causes Splunk software to autotune this parameter (recommended). Use "autoHighVolume" for high volume indexes (such as the main index); otherwise, use "auto". A "high volume index" would typically be considered one that gets over 10GB of data per day.

func (IndexesOutput) MaxHotBuckets added in v1.1.5

func (o IndexesOutput) MaxHotBuckets() pulumi.IntOutput

Maximum hot buckets that can exist per index. Defaults to 3. <br>When maxHotBuckets is exceeded, Splunk software rolls the least recently used (LRU) hot bucket to warm. Both normal hot buckets and quarantined hot buckets count towards this total. This setting operates independently of maxHotIdleSecs, which can also cause hot buckets to roll.

func (IndexesOutput) MaxHotIdleSecs added in v1.1.5

func (o IndexesOutput) MaxHotIdleSecs() pulumi.IntOutput

Maximum life, in seconds, of a hot bucket. Defaults to 0. If a hot bucket exceeds maxHotIdleSecs, Splunk software rolls it to warm. This setting operates independently of maxHotBuckets, which can also cause hot buckets to roll. A value of 0 turns off the idle check (equivalent to INFINITE idle time).

func (IndexesOutput) MaxHotSpanSecs added in v1.1.5

func (o IndexesOutput) MaxHotSpanSecs() pulumi.IntOutput

Upper bound of target maximum timespan of hot/warm buckets in seconds. Defaults to 7776000 seconds (90 days).

func (IndexesOutput) MaxMemMb added in v1.1.5

func (o IndexesOutput) MaxMemMb() pulumi.IntOutput

The amount of memory, expressed in MB, to allocate for buffering a single tsidx file into memory before flushing to disk. Defaults to 5. The default is recommended for all environments.

func (IndexesOutput) MaxMetaEntries added in v1.1.5

func (o IndexesOutput) MaxMetaEntries() pulumi.IntOutput

Upper limit, in seconds, on how long an event can sit in raw slice. Applies only if replication is enabled for this index. Otherwise ignored. If there are any acknowledged events sharing this raw slice, this paramater does not apply. In this case, maxTimeUnreplicatedWithAcks applies. Highest legal value is 2147483647. To disable this parameter, set to 0.

func (IndexesOutput) MaxTimeUnreplicatedNoAcks added in v1.1.5

func (o IndexesOutput) MaxTimeUnreplicatedNoAcks() pulumi.IntOutput

Upper limit, in seconds, on how long an event can sit in raw slice. Applies only if replication is enabled for this index. Otherwise ignored. If there are any acknowledged events sharing this raw slice, this paramater does not apply. In this case, maxTimeUnreplicatedWithAcks applies. Highest legal value is 2147483647. To disable this parameter, set to 0.

func (IndexesOutput) MaxTimeUnreplicatedWithAcks added in v1.1.5

func (o IndexesOutput) MaxTimeUnreplicatedWithAcks() pulumi.IntOutput

Upper limit, in seconds, on how long events can sit unacknowledged in a raw slice. Applies only if you have enabled acks on forwarders and have replication enabled (with clustering). Note: This is an advanced parameter. Make sure you understand the settings on all forwarders before changing this. This number should not exceed ack timeout configured on any forwarder, and should actually be set to at most half of the minimum value of that timeout. You can find this setting in outputs.conf readTimeout setting under the tcpout stanza. To disable, set to 0, but this is NOT recommended. Highest legal value is 2147483647.

func (IndexesOutput) MaxTotalDataSizeMb added in v1.1.5

func (o IndexesOutput) MaxTotalDataSizeMb() pulumi.IntOutput

The maximum size of an index (in MB). If an index grows larger than the maximum size, the oldest data is frozen.

func (IndexesOutput) MaxWarmDbCount added in v1.1.5

func (o IndexesOutput) MaxWarmDbCount() pulumi.IntOutput

The maximum number of warm buckets. If this number is exceeded, the warm bucket/s with the lowest value for their latest times is moved to cold.

func (IndexesOutput) MinRawFileSyncSecs added in v1.1.5

func (o IndexesOutput) MinRawFileSyncSecs() pulumi.StringOutput

Specify an integer (or "disable") for this parameter. This parameter sets how frequently splunkd forces a filesystem sync while compressing journal slices. During this period, uncompressed slices are left on disk even after they are compressed. Then splunkd forces a filesystem sync of the compressed journal and removes the accumulated uncompressed files. If 0 is specified, splunkd forces a filesystem sync after every slice completes compressing. Specifying "disable" disables syncing entirely: uncompressed slices are removed as soon as compression is complete.

func (IndexesOutput) MinStreamGroupQueueSize added in v1.1.5

func (o IndexesOutput) MinStreamGroupQueueSize() pulumi.IntOutput

Minimum size of the queue that stores events in memory before committing them to a tsidx file.

func (IndexesOutput) Name added in v1.1.5

The name of the index to create.

func (IndexesOutput) PartialServiceMetaPeriod added in v1.1.5

func (o IndexesOutput) PartialServiceMetaPeriod() pulumi.IntOutput

Related to serviceMetaPeriod. If set, it enables metadata sync every <integer> seconds, but only for records where the sync can be done efficiently in-place, without requiring a full re-write of the metadata file. Records that require full re-write are be sync'ed at serviceMetaPeriod. partialServiceMetaPeriod specifies, in seconds, how frequently it should sync. Zero means that this feature is turned off and serviceMetaPeriod is the only time when metadata sync happens. If the value of partialServiceMetaPeriod is greater than serviceMetaPeriod, this setting has no effect. By default it is turned off (zero).

func (IndexesOutput) ProcessTrackerServiceInterval added in v1.1.5

func (o IndexesOutput) ProcessTrackerServiceInterval() pulumi.IntOutput

Specifies, in seconds, how often the indexer checks the status of the child OS processes it launched to see if it can launch new processes for queued requests. Defaults to 15. If set to 0, the indexer checks child process status every second. Highest legal value is 4294967295.

func (IndexesOutput) QuarantineFutureSecs added in v1.1.5

func (o IndexesOutput) QuarantineFutureSecs() pulumi.IntOutput

Events with timestamp of quarantineFutureSecs newer than "now" are dropped into quarantine bucket. Defaults to 2592000 (30 days). This is a mechanism to prevent main hot buckets from being polluted with fringe events.

func (IndexesOutput) QuarantinePastSecs added in v1.1.5

func (o IndexesOutput) QuarantinePastSecs() pulumi.IntOutput

Events with timestamp of quarantinePastSecs older than "now" are dropped into quarantine bucket. Defaults to 77760000 (900 days). This is a mechanism to prevent the main hot buckets from being polluted with fringe events.

func (IndexesOutput) RawChunkSizeBytes added in v1.1.5

func (o IndexesOutput) RawChunkSizeBytes() pulumi.IntOutput

Target uncompressed size in bytes for individual raw slice in the rawdata journal of the index. Defaults to 131072 (128KB). 0 is not a valid value. If 0 is specified, rawChunkSizeBytes is set to the default value.

func (IndexesOutput) RepFactor added in v1.1.5

func (o IndexesOutput) RepFactor() pulumi.StringOutput

Index replication control. This parameter applies to only clustering slaves. auto = Use the master index replication configuration value. 0 = Turn off replication for this index.

func (IndexesOutput) RotatePeriodInSecs added in v1.1.5

func (o IndexesOutput) RotatePeriodInSecs() pulumi.IntOutput

How frequently (in seconds) to check if a new hot bucket needs to be created. Also, how frequently to check if there are any warm/cold buckets that should be rolled/frozen.

func (IndexesOutput) ServiceMetaPeriod added in v1.1.5

func (o IndexesOutput) ServiceMetaPeriod() pulumi.IntOutput

Defines how frequently metadata is synced to disk, in seconds. Defaults to 25 (seconds). You may want to set this to a higher value if the sum of your metadata file sizes is larger than many tens of megabytes, to avoid the hit on I/O in the indexing fast path.

func (IndexesOutput) SyncMeta added in v1.1.5

func (o IndexesOutput) SyncMeta() pulumi.BoolOutput

When true, a sync operation is called before file descriptor is closed on metadata file updates. This functionality improves integrity of metadata files, especially in regards to operating system crashes/machine failures.

func (IndexesOutput) ThawedPath added in v1.1.5

func (o IndexesOutput) ThawedPath() pulumi.StringOutput

An absolute path that contains the thawed (resurrected) databases for the index. Cannot be defined in terms of a volume definition. Required. Splunk software does not start if an index lacks a valid thawedPath.

func (IndexesOutput) ThrottleCheckPeriod added in v1.1.5

func (o IndexesOutput) ThrottleCheckPeriod() pulumi.IntOutput

Defines how frequently Splunk software checks for index throttling condition, in seconds. Defaults to 15 (seconds).

func (IndexesOutput) ToIndexesOutput

func (o IndexesOutput) ToIndexesOutput() IndexesOutput

func (IndexesOutput) ToIndexesOutputWithContext

func (o IndexesOutput) ToIndexesOutputWithContext(ctx context.Context) IndexesOutput

func (IndexesOutput) TstatsHomePath added in v1.1.5

func (o IndexesOutput) TstatsHomePath() pulumi.StringOutput

Location to store datamodel acceleration TSIDX data for this index. Restart splunkd after changing this parameter. If specified, it must be defined in terms of a volume definition.

func (IndexesOutput) WarmToColdScript added in v1.1.5

func (o IndexesOutput) WarmToColdScript() pulumi.StringOutput

Path to a script to run when moving data from warm to cold. This attribute is supported for backwards compatibility with Splunk software versions older than 4.0. Contact Splunk support if you need help configuring this setting.

type IndexesState

type IndexesState struct {
	// The app/user context that is the namespace for the resource
	Acl IndexesAclPtrInput
	// Controls how many events make up a block for block signatures. If this is set to 0, block signing is disabled for this index. <br>A recommended value is 100.
	BlockSignSize pulumi.IntPtrInput
	// Suggestion for the bucket rebuild process for the size of the time-series (tsidx) file to make.
	// <be>Caution: This is an advanced parameter. Inappropriate use of this parameter causes splunkd to not start if rebuild is required. Do not set this parameter unless instructed by Splunk Support.
	// Default value, auto, varies by the amount of physical RAM on the host<br>
	// less than 2GB RAM = 67108864 (64MB) tsidx
	// 2GB to 8GB RAM = 134217728 (128MB) tsidx
	// more than 8GB RAM = 268435456 (256MB) tsidx<br>
	// Values other than "auto" must be 16MB-1GB. Highest legal value (of the numerical part) is 4294967295 You can specify the value using a size suffix: "16777216" or "16MB" are equivalent.
	BucketRebuildMemoryHint pulumi.StringPtrInput
	// An absolute path that contains the colddbs for the index. The path must be readable and writable. Cold databases are opened as needed when searching.
	ColdPath pulumi.StringPtrInput
	// Destination path for the frozen archive. Use as an alternative to a coldToFrozenScript. Splunk software automatically puts frozen buckets in this directory.
	// <br>
	// Bucket freezing policy is as follows:<br>
	// New style buckets (4.2 and on): removes all files but the rawdata<br>
	// To thaw, run splunk rebuild <bucket dir> on the bucket, then move to the thawed directory<br>
	// Old style buckets (Pre-4.2): gzip all the .data and .tsidx files<br>
	// To thaw, gunzip the zipped files and move the bucket into the thawed directory<br>
	// If both coldToFrozenDir and coldToFrozenScript are specified, coldToFrozenDir takes precedence
	ColdToFrozenDir pulumi.StringPtrInput
	// Path to the archiving script.
	// <br>If your script requires a program to run it (for example, python), specify the program followed by the path. The script must be in $SPLUNK_HOME/bin or one of its subdirectories.
	// <br>Splunk software ships with an example archiving script in $SPLUNK_HOME/bin called coldToFrozenExample.py. DO NOT use this example script directly. It uses a default path, and if modified in place any changes are overwritten on upgrade.
	// <br>It is best to copy the example script to a new file in bin and modify it for your system. Most importantly, change the default archive path to an existing directory that fits your needs.
	ColdToFrozenScript pulumi.StringPtrInput
	// This parameter is ignored. The splunkd process always compresses raw data.
	CompressRawdata pulumi.BoolPtrInput
	// Valid values: (event | metric). Specifies the type of index.
	Datatype pulumi.StringPtrInput
	// Enables asynchronous "online fsck" bucket repair, which runs concurrently with Splunk software.
	// When enabled, you do not have to wait until buckets are repaired to start the Splunk platform. However, you might observe a slight performance degratation.
	EnableOnlineBucketRepair pulumi.BoolPtrInput
	// Number of seconds after which indexed data rolls to frozen.
	// Defaults to 188697600 (6 years).Freezing data means it is removed from the index. If you need to archive your data, refer to coldToFrozenDir and coldToFrozenScript parameter documentation.
	FrozenTimePeriodInSecs pulumi.IntPtrInput
	// An absolute path that contains the hot and warm buckets for the index.
	// Required. Splunk software does not start if an index lacks a valid homePath.
	// <br>Caution: The path must be readable and writable.
	HomePath pulumi.StringPtrInput
	// Valid values are: Integer[m|s|h|d].
	// <br>If a warm or cold bucket is older than the specified age, do not create or rebuild its bloomfilter. Specify 0 to never rebuild bloomfilters.
	MaxBloomBackfillBucketAge pulumi.StringPtrInput
	// The number of concurrent optimize processes that can run against a hot bucket.
	// This number should be increased if instructed by Splunk Support. Typically the default value should suffice.
	MaxConcurrentOptimizes pulumi.IntPtrInput
	// The maximum size in MB for a hot DB to reach before a roll to warm is triggered. Specifying "auto" or "autoHighVolume" causes Splunk software to autotune this parameter (recommended).
	// Use "autoHighVolume" for high volume indexes (such as the main index); otherwise, use "auto". A "high volume index" would typically be considered one that gets over 10GB of data per day.
	MaxDataSize pulumi.StringPtrInput
	// Maximum hot buckets that can exist per index. Defaults to 3.
	// <br>When maxHotBuckets is exceeded, Splunk software rolls the least recently used (LRU) hot bucket to warm. Both normal hot buckets and quarantined hot buckets count towards this total. This setting operates independently of maxHotIdleSecs, which can also cause hot buckets to roll.
	MaxHotBuckets pulumi.IntPtrInput
	// Maximum life, in seconds, of a hot bucket. Defaults to 0. If a hot bucket exceeds maxHotIdleSecs, Splunk software rolls it to warm. This setting operates independently of maxHotBuckets, which can also cause hot buckets to roll. A value of 0 turns off the idle check (equivalent to INFINITE idle time).
	MaxHotIdleSecs pulumi.IntPtrInput
	// Upper bound of target maximum timespan of hot/warm buckets in seconds. Defaults to 7776000 seconds (90 days).
	MaxHotSpanSecs pulumi.IntPtrInput
	// The amount of memory, expressed in MB, to allocate for buffering a single tsidx file into memory before flushing to disk. Defaults to 5. The default is recommended for all environments.
	MaxMemMb pulumi.IntPtrInput
	// Upper limit, in seconds, on how long an event can sit in raw slice. Applies only if replication is enabled for this index. Otherwise ignored. If there are any acknowledged events sharing this raw slice, this paramater does not apply. In this case, maxTimeUnreplicatedWithAcks applies. Highest legal value is 2147483647. To disable this parameter, set to 0.
	MaxMetaEntries pulumi.IntPtrInput
	// Upper limit, in seconds, on how long an event can sit in raw slice. Applies only if replication is enabled for this index. Otherwise ignored.
	// If there are any acknowledged events sharing this raw slice, this paramater does not apply. In this case, maxTimeUnreplicatedWithAcks applies.
	// Highest legal value is 2147483647. To disable this parameter, set to 0.
	MaxTimeUnreplicatedNoAcks pulumi.IntPtrInput
	// Upper limit, in seconds, on how long events can sit unacknowledged in a raw slice. Applies only if you have enabled acks on forwarders and have replication enabled (with clustering).
	// Note: This is an advanced parameter. Make sure you understand the settings on all forwarders before changing this. This number should not exceed ack timeout configured on any forwarder, and should actually be set to at most half of the minimum value of that timeout. You can find this setting in outputs.conf readTimeout setting under the tcpout stanza.
	// To disable, set to 0, but this is NOT recommended. Highest legal value is 2147483647.
	MaxTimeUnreplicatedWithAcks pulumi.IntPtrInput
	// The maximum size of an index (in MB). If an index grows larger than the maximum size, the oldest data is frozen.
	MaxTotalDataSizeMb pulumi.IntPtrInput
	// The maximum number of warm buckets. If this number is exceeded, the warm bucket/s with the lowest value for their latest times is moved to cold.
	MaxWarmDbCount pulumi.IntPtrInput
	// Specify an integer (or "disable") for this parameter.
	// This parameter sets how frequently splunkd forces a filesystem sync while compressing journal slices.
	// During this period, uncompressed slices are left on disk even after they are compressed. Then splunkd forces a filesystem sync of the compressed journal and removes the accumulated uncompressed files.
	// If 0 is specified, splunkd forces a filesystem sync after every slice completes compressing. Specifying "disable" disables syncing entirely: uncompressed slices are removed as soon as compression is complete.
	MinRawFileSyncSecs pulumi.StringPtrInput
	// Minimum size of the queue that stores events in memory before committing them to a tsidx file.
	MinStreamGroupQueueSize pulumi.IntPtrInput
	// The name of the index to create.
	Name pulumi.StringPtrInput
	// Related to serviceMetaPeriod. If set, it enables metadata sync every <integer> seconds, but only for records where the sync can be done efficiently in-place, without requiring a full re-write of the metadata file. Records that require full re-write are be sync'ed at serviceMetaPeriod.
	// partialServiceMetaPeriod specifies, in seconds, how frequently it should sync. Zero means that this feature is turned off and serviceMetaPeriod is the only time when metadata sync happens.
	// If the value of partialServiceMetaPeriod is greater than serviceMetaPeriod, this setting has no effect.
	// By default it is turned off (zero).
	PartialServiceMetaPeriod pulumi.IntPtrInput
	// Specifies, in seconds, how often the indexer checks the status of the child OS processes it launched to see if it can launch new processes for queued requests. Defaults to 15.
	// If set to 0, the indexer checks child process status every second.
	// Highest legal value is 4294967295.
	ProcessTrackerServiceInterval pulumi.IntPtrInput
	// Events with timestamp of quarantineFutureSecs newer than "now" are dropped into quarantine bucket. Defaults to 2592000 (30 days).
	// This is a mechanism to prevent main hot buckets from being polluted with fringe events.
	QuarantineFutureSecs pulumi.IntPtrInput
	// Events with timestamp of quarantinePastSecs older than "now" are dropped into quarantine bucket. Defaults to 77760000 (900 days). This is a mechanism to prevent the main hot buckets from being polluted with fringe events.
	QuarantinePastSecs pulumi.IntPtrInput
	// Target uncompressed size in bytes for individual raw slice in the rawdata journal of the index. Defaults to 131072 (128KB). 0 is not a valid value. If 0 is specified, rawChunkSizeBytes is set to the default value.
	RawChunkSizeBytes pulumi.IntPtrInput
	// Index replication control. This parameter applies to only clustering slaves.
	// auto = Use the master index replication configuration value.
	// 0 = Turn off replication for this index.
	RepFactor pulumi.StringPtrInput
	// How frequently (in seconds) to check if a new hot bucket needs to be created. Also, how frequently to check if there are any warm/cold buckets that should be rolled/frozen.
	RotatePeriodInSecs pulumi.IntPtrInput
	// Defines how frequently metadata is synced to disk, in seconds. Defaults to 25 (seconds).
	// You may want to set this to a higher value if the sum of your metadata file sizes is larger than many tens of megabytes, to avoid the hit on I/O in the indexing fast path.
	ServiceMetaPeriod pulumi.IntPtrInput
	// When true, a sync operation is called before file descriptor is closed on metadata file updates. This functionality improves integrity of metadata files, especially in regards to operating system crashes/machine failures.
	SyncMeta pulumi.BoolPtrInput
	// An absolute path that contains the thawed (resurrected) databases for the index.
	// Cannot be defined in terms of a volume definition.
	// Required. Splunk software does not start if an index lacks a valid thawedPath.
	ThawedPath pulumi.StringPtrInput
	// Defines how frequently Splunk software checks for index throttling condition, in seconds. Defaults to 15 (seconds).
	ThrottleCheckPeriod pulumi.IntPtrInput
	// Location to store datamodel acceleration TSIDX data for this index. Restart splunkd after changing this parameter.
	// If specified, it must be defined in terms of a volume definition.
	TstatsHomePath pulumi.StringPtrInput
	// Path to a script to run when moving data from warm to cold.
	// This attribute is supported for backwards compatibility with Splunk software versions older than 4.0. Contact Splunk support if you need help configuring this setting.
	WarmToColdScript pulumi.StringPtrInput
}

func (IndexesState) ElementType

func (IndexesState) ElementType() reflect.Type

type InputsHttpEventCollector

type InputsHttpEventCollector struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl InputsHttpEventCollectorAclOutput `pulumi:"acl"`
	// Input disabled indicator
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// Default host value for events with this token
	Host pulumi.StringOutput `pulumi:"host"`
	// Index to store generated events
	Index pulumi.StringOutput `pulumi:"index"`
	// Set of indexes allowed for events with this token
	Indexes pulumi.StringArrayOutput `pulumi:"indexes"`
	// Token name (inputs.conf key)
	Name pulumi.StringOutput `pulumi:"name"`
	// Default source for events with this token
	Source pulumi.StringOutput `pulumi:"source"`
	// Default source type for events with this token
	Sourcetype pulumi.StringOutput `pulumi:"sourcetype"`
	// Token value for sending data to collector/event endpoint
	Token pulumi.StringOutput `pulumi:"token"`
	// Indexer acknowledgement for this token
	UseAck pulumi.IntOutput `pulumi:"useAck"`
}

## # Resource: InputsHttpEventCollector

Create or update HTTP Event Collector input configuration tokens.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewInputsHttpEventCollector(ctx, "hec-token-01", &splunk.InputsHttpEventCollectorArgs{
			Acl: &splunk.InputsHttpEventCollectorAclArgs{
				Owner: pulumi.String("user01"),
				Reads: pulumi.StringArray{
					pulumi.String("admin"),
				},
				Sharing: pulumi.String("global"),
				Writes: pulumi.StringArray{
					pulumi.String("admin"),
				},
			},
			Disabled: pulumi.Bool(false),
			Index:    pulumi.String("main"),
			Indexes: pulumi.StringArray{
				pulumi.String("main"),
				pulumi.String("history"),
				pulumi.String("summary"),
			},
			Source:     pulumi.String("new:source"),
			Sourcetype: pulumi.String("new:sourcetype"),
			UseAck:     pulumi.Int(0),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetInputsHttpEventCollector

func GetInputsHttpEventCollector(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InputsHttpEventCollectorState, opts ...pulumi.ResourceOption) (*InputsHttpEventCollector, error)

GetInputsHttpEventCollector gets an existing InputsHttpEventCollector resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInputsHttpEventCollector

func NewInputsHttpEventCollector(ctx *pulumi.Context,
	name string, args *InputsHttpEventCollectorArgs, opts ...pulumi.ResourceOption) (*InputsHttpEventCollector, error)

NewInputsHttpEventCollector registers a new resource with the given unique name, arguments, and options.

func (*InputsHttpEventCollector) ElementType

func (*InputsHttpEventCollector) ElementType() reflect.Type

func (*InputsHttpEventCollector) ToInputsHttpEventCollectorOutput

func (i *InputsHttpEventCollector) ToInputsHttpEventCollectorOutput() InputsHttpEventCollectorOutput

func (*InputsHttpEventCollector) ToInputsHttpEventCollectorOutputWithContext

func (i *InputsHttpEventCollector) ToInputsHttpEventCollectorOutputWithContext(ctx context.Context) InputsHttpEventCollectorOutput

type InputsHttpEventCollectorAcl

type InputsHttpEventCollectorAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type InputsHttpEventCollectorAclArgs

type InputsHttpEventCollectorAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (InputsHttpEventCollectorAclArgs) ElementType

func (InputsHttpEventCollectorAclArgs) ToInputsHttpEventCollectorAclOutput

func (i InputsHttpEventCollectorAclArgs) ToInputsHttpEventCollectorAclOutput() InputsHttpEventCollectorAclOutput

func (InputsHttpEventCollectorAclArgs) ToInputsHttpEventCollectorAclOutputWithContext

func (i InputsHttpEventCollectorAclArgs) ToInputsHttpEventCollectorAclOutputWithContext(ctx context.Context) InputsHttpEventCollectorAclOutput

func (InputsHttpEventCollectorAclArgs) ToInputsHttpEventCollectorAclPtrOutput

func (i InputsHttpEventCollectorAclArgs) ToInputsHttpEventCollectorAclPtrOutput() InputsHttpEventCollectorAclPtrOutput

func (InputsHttpEventCollectorAclArgs) ToInputsHttpEventCollectorAclPtrOutputWithContext

func (i InputsHttpEventCollectorAclArgs) ToInputsHttpEventCollectorAclPtrOutputWithContext(ctx context.Context) InputsHttpEventCollectorAclPtrOutput

type InputsHttpEventCollectorAclInput

type InputsHttpEventCollectorAclInput interface {
	pulumi.Input

	ToInputsHttpEventCollectorAclOutput() InputsHttpEventCollectorAclOutput
	ToInputsHttpEventCollectorAclOutputWithContext(context.Context) InputsHttpEventCollectorAclOutput
}

InputsHttpEventCollectorAclInput is an input type that accepts InputsHttpEventCollectorAclArgs and InputsHttpEventCollectorAclOutput values. You can construct a concrete instance of `InputsHttpEventCollectorAclInput` via:

InputsHttpEventCollectorAclArgs{...}

type InputsHttpEventCollectorAclOutput

type InputsHttpEventCollectorAclOutput struct{ *pulumi.OutputState }

func (InputsHttpEventCollectorAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsHttpEventCollectorAclOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsHttpEventCollectorAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsHttpEventCollectorAclOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsHttpEventCollectorAclOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsHttpEventCollectorAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsHttpEventCollectorAclOutput) ElementType

func (InputsHttpEventCollectorAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsHttpEventCollectorAclOutput) Reads

Properties that indicate resource read permissions.

func (InputsHttpEventCollectorAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsHttpEventCollectorAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsHttpEventCollectorAclOutput) ToInputsHttpEventCollectorAclOutput

func (o InputsHttpEventCollectorAclOutput) ToInputsHttpEventCollectorAclOutput() InputsHttpEventCollectorAclOutput

func (InputsHttpEventCollectorAclOutput) ToInputsHttpEventCollectorAclOutputWithContext

func (o InputsHttpEventCollectorAclOutput) ToInputsHttpEventCollectorAclOutputWithContext(ctx context.Context) InputsHttpEventCollectorAclOutput

func (InputsHttpEventCollectorAclOutput) ToInputsHttpEventCollectorAclPtrOutput

func (o InputsHttpEventCollectorAclOutput) ToInputsHttpEventCollectorAclPtrOutput() InputsHttpEventCollectorAclPtrOutput

func (InputsHttpEventCollectorAclOutput) ToInputsHttpEventCollectorAclPtrOutputWithContext

func (o InputsHttpEventCollectorAclOutput) ToInputsHttpEventCollectorAclPtrOutputWithContext(ctx context.Context) InputsHttpEventCollectorAclPtrOutput

func (InputsHttpEventCollectorAclOutput) Writes

Properties that indicate write permissions of the resource.

type InputsHttpEventCollectorAclPtrInput

type InputsHttpEventCollectorAclPtrInput interface {
	pulumi.Input

	ToInputsHttpEventCollectorAclPtrOutput() InputsHttpEventCollectorAclPtrOutput
	ToInputsHttpEventCollectorAclPtrOutputWithContext(context.Context) InputsHttpEventCollectorAclPtrOutput
}

InputsHttpEventCollectorAclPtrInput is an input type that accepts InputsHttpEventCollectorAclArgs, InputsHttpEventCollectorAclPtr and InputsHttpEventCollectorAclPtrOutput values. You can construct a concrete instance of `InputsHttpEventCollectorAclPtrInput` via:

        InputsHttpEventCollectorAclArgs{...}

or:

        nil

type InputsHttpEventCollectorAclPtrOutput

type InputsHttpEventCollectorAclPtrOutput struct{ *pulumi.OutputState }

func (InputsHttpEventCollectorAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsHttpEventCollectorAclPtrOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsHttpEventCollectorAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsHttpEventCollectorAclPtrOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsHttpEventCollectorAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsHttpEventCollectorAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsHttpEventCollectorAclPtrOutput) Elem

func (InputsHttpEventCollectorAclPtrOutput) ElementType

func (InputsHttpEventCollectorAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsHttpEventCollectorAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (InputsHttpEventCollectorAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsHttpEventCollectorAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsHttpEventCollectorAclPtrOutput) ToInputsHttpEventCollectorAclPtrOutput

func (o InputsHttpEventCollectorAclPtrOutput) ToInputsHttpEventCollectorAclPtrOutput() InputsHttpEventCollectorAclPtrOutput

func (InputsHttpEventCollectorAclPtrOutput) ToInputsHttpEventCollectorAclPtrOutputWithContext

func (o InputsHttpEventCollectorAclPtrOutput) ToInputsHttpEventCollectorAclPtrOutputWithContext(ctx context.Context) InputsHttpEventCollectorAclPtrOutput

func (InputsHttpEventCollectorAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type InputsHttpEventCollectorArgs

type InputsHttpEventCollectorArgs struct {
	// The app/user context that is the namespace for the resource
	Acl InputsHttpEventCollectorAclPtrInput
	// Input disabled indicator
	Disabled pulumi.BoolPtrInput
	// Default host value for events with this token
	Host pulumi.StringPtrInput
	// Index to store generated events
	Index pulumi.StringPtrInput
	// Set of indexes allowed for events with this token
	Indexes pulumi.StringArrayInput
	// Token name (inputs.conf key)
	Name pulumi.StringPtrInput
	// Default source for events with this token
	Source pulumi.StringPtrInput
	// Default source type for events with this token
	Sourcetype pulumi.StringPtrInput
	// Token value for sending data to collector/event endpoint
	Token pulumi.StringPtrInput
	// Indexer acknowledgement for this token
	UseAck pulumi.IntPtrInput
}

The set of arguments for constructing a InputsHttpEventCollector resource.

func (InputsHttpEventCollectorArgs) ElementType

type InputsHttpEventCollectorArray added in v0.2.1

type InputsHttpEventCollectorArray []InputsHttpEventCollectorInput

func (InputsHttpEventCollectorArray) ElementType added in v0.2.1

func (InputsHttpEventCollectorArray) ToInputsHttpEventCollectorArrayOutput added in v0.2.1

func (i InputsHttpEventCollectorArray) ToInputsHttpEventCollectorArrayOutput() InputsHttpEventCollectorArrayOutput

func (InputsHttpEventCollectorArray) ToInputsHttpEventCollectorArrayOutputWithContext added in v0.2.1

func (i InputsHttpEventCollectorArray) ToInputsHttpEventCollectorArrayOutputWithContext(ctx context.Context) InputsHttpEventCollectorArrayOutput

type InputsHttpEventCollectorArrayInput added in v0.2.1

type InputsHttpEventCollectorArrayInput interface {
	pulumi.Input

	ToInputsHttpEventCollectorArrayOutput() InputsHttpEventCollectorArrayOutput
	ToInputsHttpEventCollectorArrayOutputWithContext(context.Context) InputsHttpEventCollectorArrayOutput
}

InputsHttpEventCollectorArrayInput is an input type that accepts InputsHttpEventCollectorArray and InputsHttpEventCollectorArrayOutput values. You can construct a concrete instance of `InputsHttpEventCollectorArrayInput` via:

InputsHttpEventCollectorArray{ InputsHttpEventCollectorArgs{...} }

type InputsHttpEventCollectorArrayOutput added in v0.2.1

type InputsHttpEventCollectorArrayOutput struct{ *pulumi.OutputState }

func (InputsHttpEventCollectorArrayOutput) ElementType added in v0.2.1

func (InputsHttpEventCollectorArrayOutput) Index added in v0.2.1

func (InputsHttpEventCollectorArrayOutput) ToInputsHttpEventCollectorArrayOutput added in v0.2.1

func (o InputsHttpEventCollectorArrayOutput) ToInputsHttpEventCollectorArrayOutput() InputsHttpEventCollectorArrayOutput

func (InputsHttpEventCollectorArrayOutput) ToInputsHttpEventCollectorArrayOutputWithContext added in v0.2.1

func (o InputsHttpEventCollectorArrayOutput) ToInputsHttpEventCollectorArrayOutputWithContext(ctx context.Context) InputsHttpEventCollectorArrayOutput

type InputsHttpEventCollectorInput

type InputsHttpEventCollectorInput interface {
	pulumi.Input

	ToInputsHttpEventCollectorOutput() InputsHttpEventCollectorOutput
	ToInputsHttpEventCollectorOutputWithContext(ctx context.Context) InputsHttpEventCollectorOutput
}

type InputsHttpEventCollectorMap added in v0.2.1

type InputsHttpEventCollectorMap map[string]InputsHttpEventCollectorInput

func (InputsHttpEventCollectorMap) ElementType added in v0.2.1

func (InputsHttpEventCollectorMap) ToInputsHttpEventCollectorMapOutput added in v0.2.1

func (i InputsHttpEventCollectorMap) ToInputsHttpEventCollectorMapOutput() InputsHttpEventCollectorMapOutput

func (InputsHttpEventCollectorMap) ToInputsHttpEventCollectorMapOutputWithContext added in v0.2.1

func (i InputsHttpEventCollectorMap) ToInputsHttpEventCollectorMapOutputWithContext(ctx context.Context) InputsHttpEventCollectorMapOutput

type InputsHttpEventCollectorMapInput added in v0.2.1

type InputsHttpEventCollectorMapInput interface {
	pulumi.Input

	ToInputsHttpEventCollectorMapOutput() InputsHttpEventCollectorMapOutput
	ToInputsHttpEventCollectorMapOutputWithContext(context.Context) InputsHttpEventCollectorMapOutput
}

InputsHttpEventCollectorMapInput is an input type that accepts InputsHttpEventCollectorMap and InputsHttpEventCollectorMapOutput values. You can construct a concrete instance of `InputsHttpEventCollectorMapInput` via:

InputsHttpEventCollectorMap{ "key": InputsHttpEventCollectorArgs{...} }

type InputsHttpEventCollectorMapOutput added in v0.2.1

type InputsHttpEventCollectorMapOutput struct{ *pulumi.OutputState }

func (InputsHttpEventCollectorMapOutput) ElementType added in v0.2.1

func (InputsHttpEventCollectorMapOutput) MapIndex added in v0.2.1

func (InputsHttpEventCollectorMapOutput) ToInputsHttpEventCollectorMapOutput added in v0.2.1

func (o InputsHttpEventCollectorMapOutput) ToInputsHttpEventCollectorMapOutput() InputsHttpEventCollectorMapOutput

func (InputsHttpEventCollectorMapOutput) ToInputsHttpEventCollectorMapOutputWithContext added in v0.2.1

func (o InputsHttpEventCollectorMapOutput) ToInputsHttpEventCollectorMapOutputWithContext(ctx context.Context) InputsHttpEventCollectorMapOutput

type InputsHttpEventCollectorOutput

type InputsHttpEventCollectorOutput struct{ *pulumi.OutputState }

func (InputsHttpEventCollectorOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (InputsHttpEventCollectorOutput) Disabled added in v1.1.5

Input disabled indicator

func (InputsHttpEventCollectorOutput) ElementType

func (InputsHttpEventCollectorOutput) Host added in v1.1.5

Default host value for events with this token

func (InputsHttpEventCollectorOutput) Index added in v1.1.5

Index to store generated events

func (InputsHttpEventCollectorOutput) Indexes added in v1.1.5

Set of indexes allowed for events with this token

func (InputsHttpEventCollectorOutput) Name added in v1.1.5

Token name (inputs.conf key)

func (InputsHttpEventCollectorOutput) Source added in v1.1.5

Default source for events with this token

func (InputsHttpEventCollectorOutput) Sourcetype added in v1.1.5

Default source type for events with this token

func (InputsHttpEventCollectorOutput) ToInputsHttpEventCollectorOutput

func (o InputsHttpEventCollectorOutput) ToInputsHttpEventCollectorOutput() InputsHttpEventCollectorOutput

func (InputsHttpEventCollectorOutput) ToInputsHttpEventCollectorOutputWithContext

func (o InputsHttpEventCollectorOutput) ToInputsHttpEventCollectorOutputWithContext(ctx context.Context) InputsHttpEventCollectorOutput

func (InputsHttpEventCollectorOutput) Token added in v1.1.5

Token value for sending data to collector/event endpoint

func (InputsHttpEventCollectorOutput) UseAck added in v1.1.5

Indexer acknowledgement for this token

type InputsHttpEventCollectorState

type InputsHttpEventCollectorState struct {
	// The app/user context that is the namespace for the resource
	Acl InputsHttpEventCollectorAclPtrInput
	// Input disabled indicator
	Disabled pulumi.BoolPtrInput
	// Default host value for events with this token
	Host pulumi.StringPtrInput
	// Index to store generated events
	Index pulumi.StringPtrInput
	// Set of indexes allowed for events with this token
	Indexes pulumi.StringArrayInput
	// Token name (inputs.conf key)
	Name pulumi.StringPtrInput
	// Default source for events with this token
	Source pulumi.StringPtrInput
	// Default source type for events with this token
	Sourcetype pulumi.StringPtrInput
	// Token value for sending data to collector/event endpoint
	Token pulumi.StringPtrInput
	// Indexer acknowledgement for this token
	UseAck pulumi.IntPtrInput
}

func (InputsHttpEventCollectorState) ElementType

type InputsMonitor

type InputsMonitor struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl InputsMonitorAclOutput `pulumi:"acl"`
	// Specify a regular expression for a file path. The file path that matches this regular expression is not indexed.
	Blacklist pulumi.StringOutput `pulumi:"blacklist"`
	// A string that modifies the file tracking identity for files in this input. The magic value <SOURCE> invokes special behavior.
	CrcSalt pulumi.StringOutput `pulumi:"crcSalt"`
	// Indicates if input monitoring is disabled.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// If set to true, files that are seen for the first time is read from the end.
	FollowTail pulumi.BoolOutput `pulumi:"followTail"`
	// The value to populate in the host field for events from this data input.
	Host pulumi.StringOutput `pulumi:"host"`
	// Specify a regular expression for a file path. If the path for a file matches this regular expression, the captured value is used to populate the host field for events from this data input. The regular expression must have one capture group.
	HostRegex pulumi.StringOutput `pulumi:"hostRegex"`
	// Use the specified slash-separate segment of the filepath as the host field value.
	HostSegment pulumi.IntOutput `pulumi:"hostSegment"`
	// Specify a time value. If the modification time of a file being monitored falls outside of this rolling time window, the file is no longer being monitored.
	IgnoreOlderThan pulumi.StringOutput `pulumi:"ignoreOlderThan"`
	// Which index events from this input should be stored in. Defaults to default.
	Index pulumi.StringOutput `pulumi:"index"`
	// The file or directory path to monitor on the system.
	Name pulumi.StringOutput `pulumi:"name"`
	// Setting this to false prevents monitoring of any subdirectories encountered within this data input.
	Recursive pulumi.BoolOutput `pulumi:"recursive"`
	// The value to populate in the source field for events from this data input. The same source should not be used for multiple data inputs.
	RenameSource pulumi.StringOutput `pulumi:"renameSource"`
	// The value to populate in the sourcetype field for incoming events.
	Sourcetype pulumi.StringOutput `pulumi:"sourcetype"`
	// When Splunk software reaches the end of a file that is being read, the file is kept open for a minimum of the number of seconds specified in this value. After this period has elapsed, the file is checked again for more data.
	TimeBeforeClose pulumi.IntOutput `pulumi:"timeBeforeClose"`
	// Specify a regular expression for a file path. Only file paths that match this regular expression are indexed.
	Whitelist pulumi.StringOutput `pulumi:"whitelist"`
}

## # Resource: InputsMonitor

Create or update a new file or directory monitor input.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewInputsMonitor(ctx, "monitor", &splunk.InputsMonitorArgs{
			Recursive:  pulumi.Bool(true),
			Sourcetype: pulumi.String("text"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetInputsMonitor

func GetInputsMonitor(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InputsMonitorState, opts ...pulumi.ResourceOption) (*InputsMonitor, error)

GetInputsMonitor gets an existing InputsMonitor resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInputsMonitor

func NewInputsMonitor(ctx *pulumi.Context,
	name string, args *InputsMonitorArgs, opts ...pulumi.ResourceOption) (*InputsMonitor, error)

NewInputsMonitor registers a new resource with the given unique name, arguments, and options.

func (*InputsMonitor) ElementType

func (*InputsMonitor) ElementType() reflect.Type

func (*InputsMonitor) ToInputsMonitorOutput

func (i *InputsMonitor) ToInputsMonitorOutput() InputsMonitorOutput

func (*InputsMonitor) ToInputsMonitorOutputWithContext

func (i *InputsMonitor) ToInputsMonitorOutputWithContext(ctx context.Context) InputsMonitorOutput

type InputsMonitorAcl

type InputsMonitorAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type InputsMonitorAclArgs

type InputsMonitorAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (InputsMonitorAclArgs) ElementType

func (InputsMonitorAclArgs) ElementType() reflect.Type

func (InputsMonitorAclArgs) ToInputsMonitorAclOutput

func (i InputsMonitorAclArgs) ToInputsMonitorAclOutput() InputsMonitorAclOutput

func (InputsMonitorAclArgs) ToInputsMonitorAclOutputWithContext

func (i InputsMonitorAclArgs) ToInputsMonitorAclOutputWithContext(ctx context.Context) InputsMonitorAclOutput

func (InputsMonitorAclArgs) ToInputsMonitorAclPtrOutput

func (i InputsMonitorAclArgs) ToInputsMonitorAclPtrOutput() InputsMonitorAclPtrOutput

func (InputsMonitorAclArgs) ToInputsMonitorAclPtrOutputWithContext

func (i InputsMonitorAclArgs) ToInputsMonitorAclPtrOutputWithContext(ctx context.Context) InputsMonitorAclPtrOutput

type InputsMonitorAclInput

type InputsMonitorAclInput interface {
	pulumi.Input

	ToInputsMonitorAclOutput() InputsMonitorAclOutput
	ToInputsMonitorAclOutputWithContext(context.Context) InputsMonitorAclOutput
}

InputsMonitorAclInput is an input type that accepts InputsMonitorAclArgs and InputsMonitorAclOutput values. You can construct a concrete instance of `InputsMonitorAclInput` via:

InputsMonitorAclArgs{...}

type InputsMonitorAclOutput

type InputsMonitorAclOutput struct{ *pulumi.OutputState }

func (InputsMonitorAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsMonitorAclOutput) CanChangePerms

func (o InputsMonitorAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsMonitorAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsMonitorAclOutput) CanShareGlobal

func (o InputsMonitorAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsMonitorAclOutput) CanShareUser

func (o InputsMonitorAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsMonitorAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsMonitorAclOutput) ElementType

func (InputsMonitorAclOutput) ElementType() reflect.Type

func (InputsMonitorAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsMonitorAclOutput) Reads

Properties that indicate resource read permissions.

func (InputsMonitorAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsMonitorAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsMonitorAclOutput) ToInputsMonitorAclOutput

func (o InputsMonitorAclOutput) ToInputsMonitorAclOutput() InputsMonitorAclOutput

func (InputsMonitorAclOutput) ToInputsMonitorAclOutputWithContext

func (o InputsMonitorAclOutput) ToInputsMonitorAclOutputWithContext(ctx context.Context) InputsMonitorAclOutput

func (InputsMonitorAclOutput) ToInputsMonitorAclPtrOutput

func (o InputsMonitorAclOutput) ToInputsMonitorAclPtrOutput() InputsMonitorAclPtrOutput

func (InputsMonitorAclOutput) ToInputsMonitorAclPtrOutputWithContext

func (o InputsMonitorAclOutput) ToInputsMonitorAclPtrOutputWithContext(ctx context.Context) InputsMonitorAclPtrOutput

func (InputsMonitorAclOutput) Writes

Properties that indicate write permissions of the resource.

type InputsMonitorAclPtrInput

type InputsMonitorAclPtrInput interface {
	pulumi.Input

	ToInputsMonitorAclPtrOutput() InputsMonitorAclPtrOutput
	ToInputsMonitorAclPtrOutputWithContext(context.Context) InputsMonitorAclPtrOutput
}

InputsMonitorAclPtrInput is an input type that accepts InputsMonitorAclArgs, InputsMonitorAclPtr and InputsMonitorAclPtrOutput values. You can construct a concrete instance of `InputsMonitorAclPtrInput` via:

        InputsMonitorAclArgs{...}

or:

        nil

type InputsMonitorAclPtrOutput

type InputsMonitorAclPtrOutput struct{ *pulumi.OutputState }

func (InputsMonitorAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsMonitorAclPtrOutput) CanChangePerms

func (o InputsMonitorAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsMonitorAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsMonitorAclPtrOutput) CanShareGlobal

func (o InputsMonitorAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsMonitorAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsMonitorAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsMonitorAclPtrOutput) Elem

func (InputsMonitorAclPtrOutput) ElementType

func (InputsMonitorAclPtrOutput) ElementType() reflect.Type

func (InputsMonitorAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsMonitorAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (InputsMonitorAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsMonitorAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsMonitorAclPtrOutput) ToInputsMonitorAclPtrOutput

func (o InputsMonitorAclPtrOutput) ToInputsMonitorAclPtrOutput() InputsMonitorAclPtrOutput

func (InputsMonitorAclPtrOutput) ToInputsMonitorAclPtrOutputWithContext

func (o InputsMonitorAclPtrOutput) ToInputsMonitorAclPtrOutputWithContext(ctx context.Context) InputsMonitorAclPtrOutput

func (InputsMonitorAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type InputsMonitorArgs

type InputsMonitorArgs struct {
	// The app/user context that is the namespace for the resource
	Acl InputsMonitorAclPtrInput
	// Specify a regular expression for a file path. The file path that matches this regular expression is not indexed.
	Blacklist pulumi.StringPtrInput
	// A string that modifies the file tracking identity for files in this input. The magic value <SOURCE> invokes special behavior.
	CrcSalt pulumi.StringPtrInput
	// Indicates if input monitoring is disabled.
	Disabled pulumi.BoolPtrInput
	// If set to true, files that are seen for the first time is read from the end.
	FollowTail pulumi.BoolPtrInput
	// The value to populate in the host field for events from this data input.
	Host pulumi.StringPtrInput
	// Specify a regular expression for a file path. If the path for a file matches this regular expression, the captured value is used to populate the host field for events from this data input. The regular expression must have one capture group.
	HostRegex pulumi.StringPtrInput
	// Use the specified slash-separate segment of the filepath as the host field value.
	HostSegment pulumi.IntPtrInput
	// Specify a time value. If the modification time of a file being monitored falls outside of this rolling time window, the file is no longer being monitored.
	IgnoreOlderThan pulumi.StringPtrInput
	// Which index events from this input should be stored in. Defaults to default.
	Index pulumi.StringPtrInput
	// The file or directory path to monitor on the system.
	Name pulumi.StringPtrInput
	// Setting this to false prevents monitoring of any subdirectories encountered within this data input.
	Recursive pulumi.BoolPtrInput
	// The value to populate in the source field for events from this data input. The same source should not be used for multiple data inputs.
	RenameSource pulumi.StringPtrInput
	// The value to populate in the sourcetype field for incoming events.
	Sourcetype pulumi.StringPtrInput
	// When Splunk software reaches the end of a file that is being read, the file is kept open for a minimum of the number of seconds specified in this value. After this period has elapsed, the file is checked again for more data.
	TimeBeforeClose pulumi.IntPtrInput
	// Specify a regular expression for a file path. Only file paths that match this regular expression are indexed.
	Whitelist pulumi.StringPtrInput
}

The set of arguments for constructing a InputsMonitor resource.

func (InputsMonitorArgs) ElementType

func (InputsMonitorArgs) ElementType() reflect.Type

type InputsMonitorArray added in v0.2.1

type InputsMonitorArray []InputsMonitorInput

func (InputsMonitorArray) ElementType added in v0.2.1

func (InputsMonitorArray) ElementType() reflect.Type

func (InputsMonitorArray) ToInputsMonitorArrayOutput added in v0.2.1

func (i InputsMonitorArray) ToInputsMonitorArrayOutput() InputsMonitorArrayOutput

func (InputsMonitorArray) ToInputsMonitorArrayOutputWithContext added in v0.2.1

func (i InputsMonitorArray) ToInputsMonitorArrayOutputWithContext(ctx context.Context) InputsMonitorArrayOutput

type InputsMonitorArrayInput added in v0.2.1

type InputsMonitorArrayInput interface {
	pulumi.Input

	ToInputsMonitorArrayOutput() InputsMonitorArrayOutput
	ToInputsMonitorArrayOutputWithContext(context.Context) InputsMonitorArrayOutput
}

InputsMonitorArrayInput is an input type that accepts InputsMonitorArray and InputsMonitorArrayOutput values. You can construct a concrete instance of `InputsMonitorArrayInput` via:

InputsMonitorArray{ InputsMonitorArgs{...} }

type InputsMonitorArrayOutput added in v0.2.1

type InputsMonitorArrayOutput struct{ *pulumi.OutputState }

func (InputsMonitorArrayOutput) ElementType added in v0.2.1

func (InputsMonitorArrayOutput) ElementType() reflect.Type

func (InputsMonitorArrayOutput) Index added in v0.2.1

func (InputsMonitorArrayOutput) ToInputsMonitorArrayOutput added in v0.2.1

func (o InputsMonitorArrayOutput) ToInputsMonitorArrayOutput() InputsMonitorArrayOutput

func (InputsMonitorArrayOutput) ToInputsMonitorArrayOutputWithContext added in v0.2.1

func (o InputsMonitorArrayOutput) ToInputsMonitorArrayOutputWithContext(ctx context.Context) InputsMonitorArrayOutput

type InputsMonitorInput

type InputsMonitorInput interface {
	pulumi.Input

	ToInputsMonitorOutput() InputsMonitorOutput
	ToInputsMonitorOutputWithContext(ctx context.Context) InputsMonitorOutput
}

type InputsMonitorMap added in v0.2.1

type InputsMonitorMap map[string]InputsMonitorInput

func (InputsMonitorMap) ElementType added in v0.2.1

func (InputsMonitorMap) ElementType() reflect.Type

func (InputsMonitorMap) ToInputsMonitorMapOutput added in v0.2.1

func (i InputsMonitorMap) ToInputsMonitorMapOutput() InputsMonitorMapOutput

func (InputsMonitorMap) ToInputsMonitorMapOutputWithContext added in v0.2.1

func (i InputsMonitorMap) ToInputsMonitorMapOutputWithContext(ctx context.Context) InputsMonitorMapOutput

type InputsMonitorMapInput added in v0.2.1

type InputsMonitorMapInput interface {
	pulumi.Input

	ToInputsMonitorMapOutput() InputsMonitorMapOutput
	ToInputsMonitorMapOutputWithContext(context.Context) InputsMonitorMapOutput
}

InputsMonitorMapInput is an input type that accepts InputsMonitorMap and InputsMonitorMapOutput values. You can construct a concrete instance of `InputsMonitorMapInput` via:

InputsMonitorMap{ "key": InputsMonitorArgs{...} }

type InputsMonitorMapOutput added in v0.2.1

type InputsMonitorMapOutput struct{ *pulumi.OutputState }

func (InputsMonitorMapOutput) ElementType added in v0.2.1

func (InputsMonitorMapOutput) ElementType() reflect.Type

func (InputsMonitorMapOutput) MapIndex added in v0.2.1

func (InputsMonitorMapOutput) ToInputsMonitorMapOutput added in v0.2.1

func (o InputsMonitorMapOutput) ToInputsMonitorMapOutput() InputsMonitorMapOutput

func (InputsMonitorMapOutput) ToInputsMonitorMapOutputWithContext added in v0.2.1

func (o InputsMonitorMapOutput) ToInputsMonitorMapOutputWithContext(ctx context.Context) InputsMonitorMapOutput

type InputsMonitorOutput

type InputsMonitorOutput struct{ *pulumi.OutputState }

func (InputsMonitorOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (InputsMonitorOutput) Blacklist added in v1.1.5

func (o InputsMonitorOutput) Blacklist() pulumi.StringOutput

Specify a regular expression for a file path. The file path that matches this regular expression is not indexed.

func (InputsMonitorOutput) CrcSalt added in v1.1.5

A string that modifies the file tracking identity for files in this input. The magic value <SOURCE> invokes special behavior.

func (InputsMonitorOutput) Disabled added in v1.1.5

func (o InputsMonitorOutput) Disabled() pulumi.BoolOutput

Indicates if input monitoring is disabled.

func (InputsMonitorOutput) ElementType

func (InputsMonitorOutput) ElementType() reflect.Type

func (InputsMonitorOutput) FollowTail added in v1.1.5

func (o InputsMonitorOutput) FollowTail() pulumi.BoolOutput

If set to true, files that are seen for the first time is read from the end.

func (InputsMonitorOutput) Host added in v1.1.5

The value to populate in the host field for events from this data input.

func (InputsMonitorOutput) HostRegex added in v1.1.5

func (o InputsMonitorOutput) HostRegex() pulumi.StringOutput

Specify a regular expression for a file path. If the path for a file matches this regular expression, the captured value is used to populate the host field for events from this data input. The regular expression must have one capture group.

func (InputsMonitorOutput) HostSegment added in v1.1.5

func (o InputsMonitorOutput) HostSegment() pulumi.IntOutput

Use the specified slash-separate segment of the filepath as the host field value.

func (InputsMonitorOutput) IgnoreOlderThan added in v1.1.5

func (o InputsMonitorOutput) IgnoreOlderThan() pulumi.StringOutput

Specify a time value. If the modification time of a file being monitored falls outside of this rolling time window, the file is no longer being monitored.

func (InputsMonitorOutput) Index added in v1.1.5

Which index events from this input should be stored in. Defaults to default.

func (InputsMonitorOutput) Name added in v1.1.5

The file or directory path to monitor on the system.

func (InputsMonitorOutput) Recursive added in v1.1.5

func (o InputsMonitorOutput) Recursive() pulumi.BoolOutput

Setting this to false prevents monitoring of any subdirectories encountered within this data input.

func (InputsMonitorOutput) RenameSource added in v1.1.5

func (o InputsMonitorOutput) RenameSource() pulumi.StringOutput

The value to populate in the source field for events from this data input. The same source should not be used for multiple data inputs.

func (InputsMonitorOutput) Sourcetype added in v1.1.5

func (o InputsMonitorOutput) Sourcetype() pulumi.StringOutput

The value to populate in the sourcetype field for incoming events.

func (InputsMonitorOutput) TimeBeforeClose added in v1.1.5

func (o InputsMonitorOutput) TimeBeforeClose() pulumi.IntOutput

When Splunk software reaches the end of a file that is being read, the file is kept open for a minimum of the number of seconds specified in this value. After this period has elapsed, the file is checked again for more data.

func (InputsMonitorOutput) ToInputsMonitorOutput

func (o InputsMonitorOutput) ToInputsMonitorOutput() InputsMonitorOutput

func (InputsMonitorOutput) ToInputsMonitorOutputWithContext

func (o InputsMonitorOutput) ToInputsMonitorOutputWithContext(ctx context.Context) InputsMonitorOutput

func (InputsMonitorOutput) Whitelist added in v1.1.5

func (o InputsMonitorOutput) Whitelist() pulumi.StringOutput

Specify a regular expression for a file path. Only file paths that match this regular expression are indexed.

type InputsMonitorState

type InputsMonitorState struct {
	// The app/user context that is the namespace for the resource
	Acl InputsMonitorAclPtrInput
	// Specify a regular expression for a file path. The file path that matches this regular expression is not indexed.
	Blacklist pulumi.StringPtrInput
	// A string that modifies the file tracking identity for files in this input. The magic value <SOURCE> invokes special behavior.
	CrcSalt pulumi.StringPtrInput
	// Indicates if input monitoring is disabled.
	Disabled pulumi.BoolPtrInput
	// If set to true, files that are seen for the first time is read from the end.
	FollowTail pulumi.BoolPtrInput
	// The value to populate in the host field for events from this data input.
	Host pulumi.StringPtrInput
	// Specify a regular expression for a file path. If the path for a file matches this regular expression, the captured value is used to populate the host field for events from this data input. The regular expression must have one capture group.
	HostRegex pulumi.StringPtrInput
	// Use the specified slash-separate segment of the filepath as the host field value.
	HostSegment pulumi.IntPtrInput
	// Specify a time value. If the modification time of a file being monitored falls outside of this rolling time window, the file is no longer being monitored.
	IgnoreOlderThan pulumi.StringPtrInput
	// Which index events from this input should be stored in. Defaults to default.
	Index pulumi.StringPtrInput
	// The file or directory path to monitor on the system.
	Name pulumi.StringPtrInput
	// Setting this to false prevents monitoring of any subdirectories encountered within this data input.
	Recursive pulumi.BoolPtrInput
	// The value to populate in the source field for events from this data input. The same source should not be used for multiple data inputs.
	RenameSource pulumi.StringPtrInput
	// The value to populate in the sourcetype field for incoming events.
	Sourcetype pulumi.StringPtrInput
	// When Splunk software reaches the end of a file that is being read, the file is kept open for a minimum of the number of seconds specified in this value. After this period has elapsed, the file is checked again for more data.
	TimeBeforeClose pulumi.IntPtrInput
	// Specify a regular expression for a file path. Only file paths that match this regular expression are indexed.
	Whitelist pulumi.StringPtrInput
}

func (InputsMonitorState) ElementType

func (InputsMonitorState) ElementType() reflect.Type

type InputsScript

type InputsScript struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl InputsScriptAclOutput `pulumi:"acl"`
	// Specifies whether the input script is disabled.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// Sets the host for events from this input. Defaults to whatever host sent the event.
	Host pulumi.StringOutput `pulumi:"host"`
	// Sets the index for events from this input. Defaults to the main index.
	Index pulumi.StringOutput `pulumi:"index"`
	// Specify an integer or cron schedule. This parameter specifies how often to execute the specified script, in seconds or a valid cron schedule. If you specify a cron schedule, the script is not executed on start-up.
	Interval pulumi.IntOutput `pulumi:"interval"`
	// Specify the name of the scripted input.
	Name pulumi.StringOutput `pulumi:"name"`
	// User to run the script as. If you provide a username, Splunk software generates an auth token for that user and passes it to the script.
	Passauth pulumi.StringOutput `pulumi:"passauth"`
	// Specify a new name for the source field for the script.
	RenameSource pulumi.StringOutput `pulumi:"renameSource"`
	// Sets the source key/field for events from this input. Defaults to the input file path.
	// Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
	Source pulumi.StringOutput `pulumi:"source"`
	// Sets the sourcetype key/field for events from this input. If unset, Splunk software picks a source type based on various aspects of the data. As a convenience, the chosen string is prepended with 'sourcetype::'. There is no hard-coded default.
	// Sets the sourcetype key initial value. The key is used during parsing/indexing, in particular to set the source type field during indexing. It is also the source type field used at search time.
	Sourcetype pulumi.StringOutput `pulumi:"sourcetype"`
}

## # Resource: InputsScript

Create or update scripted inputs.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewInputsScript(ctx, "script", &splunk.InputsScriptArgs{
			Interval: pulumi.Int(360),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetInputsScript

func GetInputsScript(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InputsScriptState, opts ...pulumi.ResourceOption) (*InputsScript, error)

GetInputsScript gets an existing InputsScript resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInputsScript

func NewInputsScript(ctx *pulumi.Context,
	name string, args *InputsScriptArgs, opts ...pulumi.ResourceOption) (*InputsScript, error)

NewInputsScript registers a new resource with the given unique name, arguments, and options.

func (*InputsScript) ElementType

func (*InputsScript) ElementType() reflect.Type

func (*InputsScript) ToInputsScriptOutput

func (i *InputsScript) ToInputsScriptOutput() InputsScriptOutput

func (*InputsScript) ToInputsScriptOutputWithContext

func (i *InputsScript) ToInputsScriptOutputWithContext(ctx context.Context) InputsScriptOutput

type InputsScriptAcl

type InputsScriptAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type InputsScriptAclArgs

type InputsScriptAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (InputsScriptAclArgs) ElementType

func (InputsScriptAclArgs) ElementType() reflect.Type

func (InputsScriptAclArgs) ToInputsScriptAclOutput

func (i InputsScriptAclArgs) ToInputsScriptAclOutput() InputsScriptAclOutput

func (InputsScriptAclArgs) ToInputsScriptAclOutputWithContext

func (i InputsScriptAclArgs) ToInputsScriptAclOutputWithContext(ctx context.Context) InputsScriptAclOutput

func (InputsScriptAclArgs) ToInputsScriptAclPtrOutput

func (i InputsScriptAclArgs) ToInputsScriptAclPtrOutput() InputsScriptAclPtrOutput

func (InputsScriptAclArgs) ToInputsScriptAclPtrOutputWithContext

func (i InputsScriptAclArgs) ToInputsScriptAclPtrOutputWithContext(ctx context.Context) InputsScriptAclPtrOutput

type InputsScriptAclInput

type InputsScriptAclInput interface {
	pulumi.Input

	ToInputsScriptAclOutput() InputsScriptAclOutput
	ToInputsScriptAclOutputWithContext(context.Context) InputsScriptAclOutput
}

InputsScriptAclInput is an input type that accepts InputsScriptAclArgs and InputsScriptAclOutput values. You can construct a concrete instance of `InputsScriptAclInput` via:

InputsScriptAclArgs{...}

type InputsScriptAclOutput

type InputsScriptAclOutput struct{ *pulumi.OutputState }

func (InputsScriptAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsScriptAclOutput) CanChangePerms

func (o InputsScriptAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsScriptAclOutput) CanShareApp

func (o InputsScriptAclOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsScriptAclOutput) CanShareGlobal

func (o InputsScriptAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsScriptAclOutput) CanShareUser

func (o InputsScriptAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsScriptAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsScriptAclOutput) ElementType

func (InputsScriptAclOutput) ElementType() reflect.Type

func (InputsScriptAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsScriptAclOutput) Reads

Properties that indicate resource read permissions.

func (InputsScriptAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsScriptAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsScriptAclOutput) ToInputsScriptAclOutput

func (o InputsScriptAclOutput) ToInputsScriptAclOutput() InputsScriptAclOutput

func (InputsScriptAclOutput) ToInputsScriptAclOutputWithContext

func (o InputsScriptAclOutput) ToInputsScriptAclOutputWithContext(ctx context.Context) InputsScriptAclOutput

func (InputsScriptAclOutput) ToInputsScriptAclPtrOutput

func (o InputsScriptAclOutput) ToInputsScriptAclPtrOutput() InputsScriptAclPtrOutput

func (InputsScriptAclOutput) ToInputsScriptAclPtrOutputWithContext

func (o InputsScriptAclOutput) ToInputsScriptAclPtrOutputWithContext(ctx context.Context) InputsScriptAclPtrOutput

func (InputsScriptAclOutput) Writes

Properties that indicate write permissions of the resource.

type InputsScriptAclPtrInput

type InputsScriptAclPtrInput interface {
	pulumi.Input

	ToInputsScriptAclPtrOutput() InputsScriptAclPtrOutput
	ToInputsScriptAclPtrOutputWithContext(context.Context) InputsScriptAclPtrOutput
}

InputsScriptAclPtrInput is an input type that accepts InputsScriptAclArgs, InputsScriptAclPtr and InputsScriptAclPtrOutput values. You can construct a concrete instance of `InputsScriptAclPtrInput` via:

        InputsScriptAclArgs{...}

or:

        nil

type InputsScriptAclPtrOutput

type InputsScriptAclPtrOutput struct{ *pulumi.OutputState }

func (InputsScriptAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsScriptAclPtrOutput) CanChangePerms

func (o InputsScriptAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsScriptAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsScriptAclPtrOutput) CanShareGlobal

func (o InputsScriptAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsScriptAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsScriptAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsScriptAclPtrOutput) Elem

func (InputsScriptAclPtrOutput) ElementType

func (InputsScriptAclPtrOutput) ElementType() reflect.Type

func (InputsScriptAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsScriptAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (InputsScriptAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsScriptAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsScriptAclPtrOutput) ToInputsScriptAclPtrOutput

func (o InputsScriptAclPtrOutput) ToInputsScriptAclPtrOutput() InputsScriptAclPtrOutput

func (InputsScriptAclPtrOutput) ToInputsScriptAclPtrOutputWithContext

func (o InputsScriptAclPtrOutput) ToInputsScriptAclPtrOutputWithContext(ctx context.Context) InputsScriptAclPtrOutput

func (InputsScriptAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type InputsScriptArgs

type InputsScriptArgs struct {
	// The app/user context that is the namespace for the resource
	Acl InputsScriptAclPtrInput
	// Specifies whether the input script is disabled.
	Disabled pulumi.BoolPtrInput
	// Sets the host for events from this input. Defaults to whatever host sent the event.
	Host pulumi.StringPtrInput
	// Sets the index for events from this input. Defaults to the main index.
	Index pulumi.StringPtrInput
	// Specify an integer or cron schedule. This parameter specifies how often to execute the specified script, in seconds or a valid cron schedule. If you specify a cron schedule, the script is not executed on start-up.
	Interval pulumi.IntInput
	// Specify the name of the scripted input.
	Name pulumi.StringPtrInput
	// User to run the script as. If you provide a username, Splunk software generates an auth token for that user and passes it to the script.
	Passauth pulumi.StringPtrInput
	// Specify a new name for the source field for the script.
	RenameSource pulumi.StringPtrInput
	// Sets the source key/field for events from this input. Defaults to the input file path.
	// Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
	Source pulumi.StringPtrInput
	// Sets the sourcetype key/field for events from this input. If unset, Splunk software picks a source type based on various aspects of the data. As a convenience, the chosen string is prepended with 'sourcetype::'. There is no hard-coded default.
	// Sets the sourcetype key initial value. The key is used during parsing/indexing, in particular to set the source type field during indexing. It is also the source type field used at search time.
	Sourcetype pulumi.StringPtrInput
}

The set of arguments for constructing a InputsScript resource.

func (InputsScriptArgs) ElementType

func (InputsScriptArgs) ElementType() reflect.Type

type InputsScriptArray added in v0.2.1

type InputsScriptArray []InputsScriptInput

func (InputsScriptArray) ElementType added in v0.2.1

func (InputsScriptArray) ElementType() reflect.Type

func (InputsScriptArray) ToInputsScriptArrayOutput added in v0.2.1

func (i InputsScriptArray) ToInputsScriptArrayOutput() InputsScriptArrayOutput

func (InputsScriptArray) ToInputsScriptArrayOutputWithContext added in v0.2.1

func (i InputsScriptArray) ToInputsScriptArrayOutputWithContext(ctx context.Context) InputsScriptArrayOutput

type InputsScriptArrayInput added in v0.2.1

type InputsScriptArrayInput interface {
	pulumi.Input

	ToInputsScriptArrayOutput() InputsScriptArrayOutput
	ToInputsScriptArrayOutputWithContext(context.Context) InputsScriptArrayOutput
}

InputsScriptArrayInput is an input type that accepts InputsScriptArray and InputsScriptArrayOutput values. You can construct a concrete instance of `InputsScriptArrayInput` via:

InputsScriptArray{ InputsScriptArgs{...} }

type InputsScriptArrayOutput added in v0.2.1

type InputsScriptArrayOutput struct{ *pulumi.OutputState }

func (InputsScriptArrayOutput) ElementType added in v0.2.1

func (InputsScriptArrayOutput) ElementType() reflect.Type

func (InputsScriptArrayOutput) Index added in v0.2.1

func (InputsScriptArrayOutput) ToInputsScriptArrayOutput added in v0.2.1

func (o InputsScriptArrayOutput) ToInputsScriptArrayOutput() InputsScriptArrayOutput

func (InputsScriptArrayOutput) ToInputsScriptArrayOutputWithContext added in v0.2.1

func (o InputsScriptArrayOutput) ToInputsScriptArrayOutputWithContext(ctx context.Context) InputsScriptArrayOutput

type InputsScriptInput

type InputsScriptInput interface {
	pulumi.Input

	ToInputsScriptOutput() InputsScriptOutput
	ToInputsScriptOutputWithContext(ctx context.Context) InputsScriptOutput
}

type InputsScriptMap added in v0.2.1

type InputsScriptMap map[string]InputsScriptInput

func (InputsScriptMap) ElementType added in v0.2.1

func (InputsScriptMap) ElementType() reflect.Type

func (InputsScriptMap) ToInputsScriptMapOutput added in v0.2.1

func (i InputsScriptMap) ToInputsScriptMapOutput() InputsScriptMapOutput

func (InputsScriptMap) ToInputsScriptMapOutputWithContext added in v0.2.1

func (i InputsScriptMap) ToInputsScriptMapOutputWithContext(ctx context.Context) InputsScriptMapOutput

type InputsScriptMapInput added in v0.2.1

type InputsScriptMapInput interface {
	pulumi.Input

	ToInputsScriptMapOutput() InputsScriptMapOutput
	ToInputsScriptMapOutputWithContext(context.Context) InputsScriptMapOutput
}

InputsScriptMapInput is an input type that accepts InputsScriptMap and InputsScriptMapOutput values. You can construct a concrete instance of `InputsScriptMapInput` via:

InputsScriptMap{ "key": InputsScriptArgs{...} }

type InputsScriptMapOutput added in v0.2.1

type InputsScriptMapOutput struct{ *pulumi.OutputState }

func (InputsScriptMapOutput) ElementType added in v0.2.1

func (InputsScriptMapOutput) ElementType() reflect.Type

func (InputsScriptMapOutput) MapIndex added in v0.2.1

func (InputsScriptMapOutput) ToInputsScriptMapOutput added in v0.2.1

func (o InputsScriptMapOutput) ToInputsScriptMapOutput() InputsScriptMapOutput

func (InputsScriptMapOutput) ToInputsScriptMapOutputWithContext added in v0.2.1

func (o InputsScriptMapOutput) ToInputsScriptMapOutputWithContext(ctx context.Context) InputsScriptMapOutput

type InputsScriptOutput

type InputsScriptOutput struct{ *pulumi.OutputState }

func (InputsScriptOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (InputsScriptOutput) Disabled added in v1.1.5

func (o InputsScriptOutput) Disabled() pulumi.BoolOutput

Specifies whether the input script is disabled.

func (InputsScriptOutput) ElementType

func (InputsScriptOutput) ElementType() reflect.Type

func (InputsScriptOutput) Host added in v1.1.5

Sets the host for events from this input. Defaults to whatever host sent the event.

func (InputsScriptOutput) Index added in v1.1.5

Sets the index for events from this input. Defaults to the main index.

func (InputsScriptOutput) Interval added in v1.1.5

func (o InputsScriptOutput) Interval() pulumi.IntOutput

Specify an integer or cron schedule. This parameter specifies how often to execute the specified script, in seconds or a valid cron schedule. If you specify a cron schedule, the script is not executed on start-up.

func (InputsScriptOutput) Name added in v1.1.5

Specify the name of the scripted input.

func (InputsScriptOutput) Passauth added in v1.1.5

func (o InputsScriptOutput) Passauth() pulumi.StringOutput

User to run the script as. If you provide a username, Splunk software generates an auth token for that user and passes it to the script.

func (InputsScriptOutput) RenameSource added in v1.1.5

func (o InputsScriptOutput) RenameSource() pulumi.StringOutput

Specify a new name for the source field for the script.

func (InputsScriptOutput) Source added in v1.1.5

Sets the source key/field for events from this input. Defaults to the input file path. Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.

func (InputsScriptOutput) Sourcetype added in v1.1.5

func (o InputsScriptOutput) Sourcetype() pulumi.StringOutput

Sets the sourcetype key/field for events from this input. If unset, Splunk software picks a source type based on various aspects of the data. As a convenience, the chosen string is prepended with 'sourcetype::'. There is no hard-coded default. Sets the sourcetype key initial value. The key is used during parsing/indexing, in particular to set the source type field during indexing. It is also the source type field used at search time.

func (InputsScriptOutput) ToInputsScriptOutput

func (o InputsScriptOutput) ToInputsScriptOutput() InputsScriptOutput

func (InputsScriptOutput) ToInputsScriptOutputWithContext

func (o InputsScriptOutput) ToInputsScriptOutputWithContext(ctx context.Context) InputsScriptOutput

type InputsScriptState

type InputsScriptState struct {
	// The app/user context that is the namespace for the resource
	Acl InputsScriptAclPtrInput
	// Specifies whether the input script is disabled.
	Disabled pulumi.BoolPtrInput
	// Sets the host for events from this input. Defaults to whatever host sent the event.
	Host pulumi.StringPtrInput
	// Sets the index for events from this input. Defaults to the main index.
	Index pulumi.StringPtrInput
	// Specify an integer or cron schedule. This parameter specifies how often to execute the specified script, in seconds or a valid cron schedule. If you specify a cron schedule, the script is not executed on start-up.
	Interval pulumi.IntPtrInput
	// Specify the name of the scripted input.
	Name pulumi.StringPtrInput
	// User to run the script as. If you provide a username, Splunk software generates an auth token for that user and passes it to the script.
	Passauth pulumi.StringPtrInput
	// Specify a new name for the source field for the script.
	RenameSource pulumi.StringPtrInput
	// Sets the source key/field for events from this input. Defaults to the input file path.
	// Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
	Source pulumi.StringPtrInput
	// Sets the sourcetype key/field for events from this input. If unset, Splunk software picks a source type based on various aspects of the data. As a convenience, the chosen string is prepended with 'sourcetype::'. There is no hard-coded default.
	// Sets the sourcetype key initial value. The key is used during parsing/indexing, in particular to set the source type field during indexing. It is also the source type field used at search time.
	Sourcetype pulumi.StringPtrInput
}

func (InputsScriptState) ElementType

func (InputsScriptState) ElementType() reflect.Type

type InputsTcpCooked

type InputsTcpCooked struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl InputsTcpCookedAclOutput `pulumi:"acl"`
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringOutput `pulumi:"connectionHost"`
	// Indicates if input is disabled.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// Host from which the indexer gets data.
	Host pulumi.StringOutput `pulumi:"host"`
	// The port number of this input.
	Name pulumi.StringOutput `pulumi:"name"`
	// Restrict incoming connections on this port to the host specified here.
	RestrictToHost pulumi.StringOutput `pulumi:"restrictToHost"`
}

## # Resource: InputsTcpCooked

Create or update cooked TCP input information and create new containers for managing cooked data.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewInputsTcpCooked(ctx, "tcpCooked", &splunk.InputsTcpCookedArgs{
			ConnectionHost: pulumi.String("dns"),
			Disabled:       pulumi.Bool(false),
			RestrictToHost: pulumi.String("splunk"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetInputsTcpCooked

func GetInputsTcpCooked(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InputsTcpCookedState, opts ...pulumi.ResourceOption) (*InputsTcpCooked, error)

GetInputsTcpCooked gets an existing InputsTcpCooked resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInputsTcpCooked

func NewInputsTcpCooked(ctx *pulumi.Context,
	name string, args *InputsTcpCookedArgs, opts ...pulumi.ResourceOption) (*InputsTcpCooked, error)

NewInputsTcpCooked registers a new resource with the given unique name, arguments, and options.

func (*InputsTcpCooked) ElementType

func (*InputsTcpCooked) ElementType() reflect.Type

func (*InputsTcpCooked) ToInputsTcpCookedOutput

func (i *InputsTcpCooked) ToInputsTcpCookedOutput() InputsTcpCookedOutput

func (*InputsTcpCooked) ToInputsTcpCookedOutputWithContext

func (i *InputsTcpCooked) ToInputsTcpCookedOutputWithContext(ctx context.Context) InputsTcpCookedOutput

type InputsTcpCookedAcl

type InputsTcpCookedAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type InputsTcpCookedAclArgs

type InputsTcpCookedAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (InputsTcpCookedAclArgs) ElementType

func (InputsTcpCookedAclArgs) ElementType() reflect.Type

func (InputsTcpCookedAclArgs) ToInputsTcpCookedAclOutput

func (i InputsTcpCookedAclArgs) ToInputsTcpCookedAclOutput() InputsTcpCookedAclOutput

func (InputsTcpCookedAclArgs) ToInputsTcpCookedAclOutputWithContext

func (i InputsTcpCookedAclArgs) ToInputsTcpCookedAclOutputWithContext(ctx context.Context) InputsTcpCookedAclOutput

func (InputsTcpCookedAclArgs) ToInputsTcpCookedAclPtrOutput

func (i InputsTcpCookedAclArgs) ToInputsTcpCookedAclPtrOutput() InputsTcpCookedAclPtrOutput

func (InputsTcpCookedAclArgs) ToInputsTcpCookedAclPtrOutputWithContext

func (i InputsTcpCookedAclArgs) ToInputsTcpCookedAclPtrOutputWithContext(ctx context.Context) InputsTcpCookedAclPtrOutput

type InputsTcpCookedAclInput

type InputsTcpCookedAclInput interface {
	pulumi.Input

	ToInputsTcpCookedAclOutput() InputsTcpCookedAclOutput
	ToInputsTcpCookedAclOutputWithContext(context.Context) InputsTcpCookedAclOutput
}

InputsTcpCookedAclInput is an input type that accepts InputsTcpCookedAclArgs and InputsTcpCookedAclOutput values. You can construct a concrete instance of `InputsTcpCookedAclInput` via:

InputsTcpCookedAclArgs{...}

type InputsTcpCookedAclOutput

type InputsTcpCookedAclOutput struct{ *pulumi.OutputState }

func (InputsTcpCookedAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsTcpCookedAclOutput) CanChangePerms

func (o InputsTcpCookedAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsTcpCookedAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsTcpCookedAclOutput) CanShareGlobal

func (o InputsTcpCookedAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsTcpCookedAclOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsTcpCookedAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsTcpCookedAclOutput) ElementType

func (InputsTcpCookedAclOutput) ElementType() reflect.Type

func (InputsTcpCookedAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsTcpCookedAclOutput) Reads

Properties that indicate resource read permissions.

func (InputsTcpCookedAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsTcpCookedAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsTcpCookedAclOutput) ToInputsTcpCookedAclOutput

func (o InputsTcpCookedAclOutput) ToInputsTcpCookedAclOutput() InputsTcpCookedAclOutput

func (InputsTcpCookedAclOutput) ToInputsTcpCookedAclOutputWithContext

func (o InputsTcpCookedAclOutput) ToInputsTcpCookedAclOutputWithContext(ctx context.Context) InputsTcpCookedAclOutput

func (InputsTcpCookedAclOutput) ToInputsTcpCookedAclPtrOutput

func (o InputsTcpCookedAclOutput) ToInputsTcpCookedAclPtrOutput() InputsTcpCookedAclPtrOutput

func (InputsTcpCookedAclOutput) ToInputsTcpCookedAclPtrOutputWithContext

func (o InputsTcpCookedAclOutput) ToInputsTcpCookedAclPtrOutputWithContext(ctx context.Context) InputsTcpCookedAclPtrOutput

func (InputsTcpCookedAclOutput) Writes

Properties that indicate write permissions of the resource.

type InputsTcpCookedAclPtrInput

type InputsTcpCookedAclPtrInput interface {
	pulumi.Input

	ToInputsTcpCookedAclPtrOutput() InputsTcpCookedAclPtrOutput
	ToInputsTcpCookedAclPtrOutputWithContext(context.Context) InputsTcpCookedAclPtrOutput
}

InputsTcpCookedAclPtrInput is an input type that accepts InputsTcpCookedAclArgs, InputsTcpCookedAclPtr and InputsTcpCookedAclPtrOutput values. You can construct a concrete instance of `InputsTcpCookedAclPtrInput` via:

        InputsTcpCookedAclArgs{...}

or:

        nil

type InputsTcpCookedAclPtrOutput

type InputsTcpCookedAclPtrOutput struct{ *pulumi.OutputState }

func (InputsTcpCookedAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsTcpCookedAclPtrOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsTcpCookedAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsTcpCookedAclPtrOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsTcpCookedAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsTcpCookedAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsTcpCookedAclPtrOutput) Elem

func (InputsTcpCookedAclPtrOutput) ElementType

func (InputsTcpCookedAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsTcpCookedAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (InputsTcpCookedAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsTcpCookedAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsTcpCookedAclPtrOutput) ToInputsTcpCookedAclPtrOutput

func (o InputsTcpCookedAclPtrOutput) ToInputsTcpCookedAclPtrOutput() InputsTcpCookedAclPtrOutput

func (InputsTcpCookedAclPtrOutput) ToInputsTcpCookedAclPtrOutputWithContext

func (o InputsTcpCookedAclPtrOutput) ToInputsTcpCookedAclPtrOutputWithContext(ctx context.Context) InputsTcpCookedAclPtrOutput

func (InputsTcpCookedAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type InputsTcpCookedArgs

type InputsTcpCookedArgs struct {
	// The app/user context that is the namespace for the resource
	Acl InputsTcpCookedAclPtrInput
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringPtrInput
	// Indicates if input is disabled.
	Disabled pulumi.BoolPtrInput
	// Host from which the indexer gets data.
	Host pulumi.StringPtrInput
	// The port number of this input.
	Name pulumi.StringPtrInput
	// Restrict incoming connections on this port to the host specified here.
	RestrictToHost pulumi.StringPtrInput
}

The set of arguments for constructing a InputsTcpCooked resource.

func (InputsTcpCookedArgs) ElementType

func (InputsTcpCookedArgs) ElementType() reflect.Type

type InputsTcpCookedArray added in v0.2.1

type InputsTcpCookedArray []InputsTcpCookedInput

func (InputsTcpCookedArray) ElementType added in v0.2.1

func (InputsTcpCookedArray) ElementType() reflect.Type

func (InputsTcpCookedArray) ToInputsTcpCookedArrayOutput added in v0.2.1

func (i InputsTcpCookedArray) ToInputsTcpCookedArrayOutput() InputsTcpCookedArrayOutput

func (InputsTcpCookedArray) ToInputsTcpCookedArrayOutputWithContext added in v0.2.1

func (i InputsTcpCookedArray) ToInputsTcpCookedArrayOutputWithContext(ctx context.Context) InputsTcpCookedArrayOutput

type InputsTcpCookedArrayInput added in v0.2.1

type InputsTcpCookedArrayInput interface {
	pulumi.Input

	ToInputsTcpCookedArrayOutput() InputsTcpCookedArrayOutput
	ToInputsTcpCookedArrayOutputWithContext(context.Context) InputsTcpCookedArrayOutput
}

InputsTcpCookedArrayInput is an input type that accepts InputsTcpCookedArray and InputsTcpCookedArrayOutput values. You can construct a concrete instance of `InputsTcpCookedArrayInput` via:

InputsTcpCookedArray{ InputsTcpCookedArgs{...} }

type InputsTcpCookedArrayOutput added in v0.2.1

type InputsTcpCookedArrayOutput struct{ *pulumi.OutputState }

func (InputsTcpCookedArrayOutput) ElementType added in v0.2.1

func (InputsTcpCookedArrayOutput) ElementType() reflect.Type

func (InputsTcpCookedArrayOutput) Index added in v0.2.1

func (InputsTcpCookedArrayOutput) ToInputsTcpCookedArrayOutput added in v0.2.1

func (o InputsTcpCookedArrayOutput) ToInputsTcpCookedArrayOutput() InputsTcpCookedArrayOutput

func (InputsTcpCookedArrayOutput) ToInputsTcpCookedArrayOutputWithContext added in v0.2.1

func (o InputsTcpCookedArrayOutput) ToInputsTcpCookedArrayOutputWithContext(ctx context.Context) InputsTcpCookedArrayOutput

type InputsTcpCookedInput

type InputsTcpCookedInput interface {
	pulumi.Input

	ToInputsTcpCookedOutput() InputsTcpCookedOutput
	ToInputsTcpCookedOutputWithContext(ctx context.Context) InputsTcpCookedOutput
}

type InputsTcpCookedMap added in v0.2.1

type InputsTcpCookedMap map[string]InputsTcpCookedInput

func (InputsTcpCookedMap) ElementType added in v0.2.1

func (InputsTcpCookedMap) ElementType() reflect.Type

func (InputsTcpCookedMap) ToInputsTcpCookedMapOutput added in v0.2.1

func (i InputsTcpCookedMap) ToInputsTcpCookedMapOutput() InputsTcpCookedMapOutput

func (InputsTcpCookedMap) ToInputsTcpCookedMapOutputWithContext added in v0.2.1

func (i InputsTcpCookedMap) ToInputsTcpCookedMapOutputWithContext(ctx context.Context) InputsTcpCookedMapOutput

type InputsTcpCookedMapInput added in v0.2.1

type InputsTcpCookedMapInput interface {
	pulumi.Input

	ToInputsTcpCookedMapOutput() InputsTcpCookedMapOutput
	ToInputsTcpCookedMapOutputWithContext(context.Context) InputsTcpCookedMapOutput
}

InputsTcpCookedMapInput is an input type that accepts InputsTcpCookedMap and InputsTcpCookedMapOutput values. You can construct a concrete instance of `InputsTcpCookedMapInput` via:

InputsTcpCookedMap{ "key": InputsTcpCookedArgs{...} }

type InputsTcpCookedMapOutput added in v0.2.1

type InputsTcpCookedMapOutput struct{ *pulumi.OutputState }

func (InputsTcpCookedMapOutput) ElementType added in v0.2.1

func (InputsTcpCookedMapOutput) ElementType() reflect.Type

func (InputsTcpCookedMapOutput) MapIndex added in v0.2.1

func (InputsTcpCookedMapOutput) ToInputsTcpCookedMapOutput added in v0.2.1

func (o InputsTcpCookedMapOutput) ToInputsTcpCookedMapOutput() InputsTcpCookedMapOutput

func (InputsTcpCookedMapOutput) ToInputsTcpCookedMapOutputWithContext added in v0.2.1

func (o InputsTcpCookedMapOutput) ToInputsTcpCookedMapOutputWithContext(ctx context.Context) InputsTcpCookedMapOutput

type InputsTcpCookedOutput

type InputsTcpCookedOutput struct{ *pulumi.OutputState }

func (InputsTcpCookedOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (InputsTcpCookedOutput) ConnectionHost added in v1.1.5

func (o InputsTcpCookedOutput) ConnectionHost() pulumi.StringOutput

Valid values: (ip | dns | none) Set the host for the remote server that is sending data. ip sets the host to the IP address of the remote server sending data. dns sets the host to the reverse DNS entry for the IP address of the remote server sending data. none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname. Default value is dns.

func (InputsTcpCookedOutput) Disabled added in v1.1.5

Indicates if input is disabled.

func (InputsTcpCookedOutput) ElementType

func (InputsTcpCookedOutput) ElementType() reflect.Type

func (InputsTcpCookedOutput) Host added in v1.1.5

Host from which the indexer gets data.

func (InputsTcpCookedOutput) Name added in v1.1.5

The port number of this input.

func (InputsTcpCookedOutput) RestrictToHost added in v1.1.5

func (o InputsTcpCookedOutput) RestrictToHost() pulumi.StringOutput

Restrict incoming connections on this port to the host specified here.

func (InputsTcpCookedOutput) ToInputsTcpCookedOutput

func (o InputsTcpCookedOutput) ToInputsTcpCookedOutput() InputsTcpCookedOutput

func (InputsTcpCookedOutput) ToInputsTcpCookedOutputWithContext

func (o InputsTcpCookedOutput) ToInputsTcpCookedOutputWithContext(ctx context.Context) InputsTcpCookedOutput

type InputsTcpCookedState

type InputsTcpCookedState struct {
	// The app/user context that is the namespace for the resource
	Acl InputsTcpCookedAclPtrInput
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringPtrInput
	// Indicates if input is disabled.
	Disabled pulumi.BoolPtrInput
	// Host from which the indexer gets data.
	Host pulumi.StringPtrInput
	// The port number of this input.
	Name pulumi.StringPtrInput
	// Restrict incoming connections on this port to the host specified here.
	RestrictToHost pulumi.StringPtrInput
}

func (InputsTcpCookedState) ElementType

func (InputsTcpCookedState) ElementType() reflect.Type

type InputsTcpRaw

type InputsTcpRaw struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl InputsTcpRawAclOutput `pulumi:"acl"`
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringOutput `pulumi:"connectionHost"`
	// Indicates if input is disabled.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// Host from which the indexer gets data.
	Host pulumi.StringOutput `pulumi:"host"`
	// Index to store generated events. Defaults to default.
	Index pulumi.StringOutput `pulumi:"index"`
	// The input port which receives raw data.
	Name pulumi.StringOutput `pulumi:"name"`
	// Valid values: (parsingQueue | indexQueue)
	// Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
	// Set queue to parsingQueue to apply props.conf and other parsing rules to your data. For more information about props.conf and rules for timestamping and linebreaking, refer to props.conf and the online documentation at "Monitor files and directories with inputs.conf"
	// Set queue to indexQueue to send your data directly into the index.
	Queue pulumi.StringOutput `pulumi:"queue"`
	// Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
	// If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
	RawTcpDoneTimeout pulumi.IntOutput `pulumi:"rawTcpDoneTimeout"`
	// Allows for restricting this input to only accept data from the host specified here.
	RestrictToHost pulumi.StringOutput `pulumi:"restrictToHost"`
	// Sets the source key/field for events from this input. Defaults to the input file path.
	// Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
	Source pulumi.StringOutput `pulumi:"source"`
	// Set the source type for events from this input.
	// "sourcetype=" is automatically prepended to <string>.
	// Defaults to audittrail (if signedaudit=true) or fschange (if signedaudit=false).
	Sourcetype pulumi.StringOutput `pulumi:"sourcetype"`
}

## # Resource: InputsTcpRaw

Create or update raw TCP input information for managing raw tcp inputs from forwarders.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewInputsTcpRaw(ctx, "tcpRaw", &splunk.InputsTcpRawArgs{
			Disabled:   pulumi.Bool(false),
			Index:      pulumi.String("main"),
			Queue:      pulumi.String("indexQueue"),
			Source:     pulumi.String("new"),
			Sourcetype: pulumi.String("new"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetInputsTcpRaw

func GetInputsTcpRaw(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InputsTcpRawState, opts ...pulumi.ResourceOption) (*InputsTcpRaw, error)

GetInputsTcpRaw gets an existing InputsTcpRaw resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInputsTcpRaw

func NewInputsTcpRaw(ctx *pulumi.Context,
	name string, args *InputsTcpRawArgs, opts ...pulumi.ResourceOption) (*InputsTcpRaw, error)

NewInputsTcpRaw registers a new resource with the given unique name, arguments, and options.

func (*InputsTcpRaw) ElementType

func (*InputsTcpRaw) ElementType() reflect.Type

func (*InputsTcpRaw) ToInputsTcpRawOutput

func (i *InputsTcpRaw) ToInputsTcpRawOutput() InputsTcpRawOutput

func (*InputsTcpRaw) ToInputsTcpRawOutputWithContext

func (i *InputsTcpRaw) ToInputsTcpRawOutputWithContext(ctx context.Context) InputsTcpRawOutput

type InputsTcpRawAcl

type InputsTcpRawAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type InputsTcpRawAclArgs

type InputsTcpRawAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (InputsTcpRawAclArgs) ElementType

func (InputsTcpRawAclArgs) ElementType() reflect.Type

func (InputsTcpRawAclArgs) ToInputsTcpRawAclOutput

func (i InputsTcpRawAclArgs) ToInputsTcpRawAclOutput() InputsTcpRawAclOutput

func (InputsTcpRawAclArgs) ToInputsTcpRawAclOutputWithContext

func (i InputsTcpRawAclArgs) ToInputsTcpRawAclOutputWithContext(ctx context.Context) InputsTcpRawAclOutput

func (InputsTcpRawAclArgs) ToInputsTcpRawAclPtrOutput

func (i InputsTcpRawAclArgs) ToInputsTcpRawAclPtrOutput() InputsTcpRawAclPtrOutput

func (InputsTcpRawAclArgs) ToInputsTcpRawAclPtrOutputWithContext

func (i InputsTcpRawAclArgs) ToInputsTcpRawAclPtrOutputWithContext(ctx context.Context) InputsTcpRawAclPtrOutput

type InputsTcpRawAclInput

type InputsTcpRawAclInput interface {
	pulumi.Input

	ToInputsTcpRawAclOutput() InputsTcpRawAclOutput
	ToInputsTcpRawAclOutputWithContext(context.Context) InputsTcpRawAclOutput
}

InputsTcpRawAclInput is an input type that accepts InputsTcpRawAclArgs and InputsTcpRawAclOutput values. You can construct a concrete instance of `InputsTcpRawAclInput` via:

InputsTcpRawAclArgs{...}

type InputsTcpRawAclOutput

type InputsTcpRawAclOutput struct{ *pulumi.OutputState }

func (InputsTcpRawAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsTcpRawAclOutput) CanChangePerms

func (o InputsTcpRawAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsTcpRawAclOutput) CanShareApp

func (o InputsTcpRawAclOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsTcpRawAclOutput) CanShareGlobal

func (o InputsTcpRawAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsTcpRawAclOutput) CanShareUser

func (o InputsTcpRawAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsTcpRawAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsTcpRawAclOutput) ElementType

func (InputsTcpRawAclOutput) ElementType() reflect.Type

func (InputsTcpRawAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsTcpRawAclOutput) Reads

Properties that indicate resource read permissions.

func (InputsTcpRawAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsTcpRawAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsTcpRawAclOutput) ToInputsTcpRawAclOutput

func (o InputsTcpRawAclOutput) ToInputsTcpRawAclOutput() InputsTcpRawAclOutput

func (InputsTcpRawAclOutput) ToInputsTcpRawAclOutputWithContext

func (o InputsTcpRawAclOutput) ToInputsTcpRawAclOutputWithContext(ctx context.Context) InputsTcpRawAclOutput

func (InputsTcpRawAclOutput) ToInputsTcpRawAclPtrOutput

func (o InputsTcpRawAclOutput) ToInputsTcpRawAclPtrOutput() InputsTcpRawAclPtrOutput

func (InputsTcpRawAclOutput) ToInputsTcpRawAclPtrOutputWithContext

func (o InputsTcpRawAclOutput) ToInputsTcpRawAclPtrOutputWithContext(ctx context.Context) InputsTcpRawAclPtrOutput

func (InputsTcpRawAclOutput) Writes

Properties that indicate write permissions of the resource.

type InputsTcpRawAclPtrInput

type InputsTcpRawAclPtrInput interface {
	pulumi.Input

	ToInputsTcpRawAclPtrOutput() InputsTcpRawAclPtrOutput
	ToInputsTcpRawAclPtrOutputWithContext(context.Context) InputsTcpRawAclPtrOutput
}

InputsTcpRawAclPtrInput is an input type that accepts InputsTcpRawAclArgs, InputsTcpRawAclPtr and InputsTcpRawAclPtrOutput values. You can construct a concrete instance of `InputsTcpRawAclPtrInput` via:

        InputsTcpRawAclArgs{...}

or:

        nil

type InputsTcpRawAclPtrOutput

type InputsTcpRawAclPtrOutput struct{ *pulumi.OutputState }

func (InputsTcpRawAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsTcpRawAclPtrOutput) CanChangePerms

func (o InputsTcpRawAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsTcpRawAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsTcpRawAclPtrOutput) CanShareGlobal

func (o InputsTcpRawAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsTcpRawAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsTcpRawAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsTcpRawAclPtrOutput) Elem

func (InputsTcpRawAclPtrOutput) ElementType

func (InputsTcpRawAclPtrOutput) ElementType() reflect.Type

func (InputsTcpRawAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsTcpRawAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (InputsTcpRawAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsTcpRawAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsTcpRawAclPtrOutput) ToInputsTcpRawAclPtrOutput

func (o InputsTcpRawAclPtrOutput) ToInputsTcpRawAclPtrOutput() InputsTcpRawAclPtrOutput

func (InputsTcpRawAclPtrOutput) ToInputsTcpRawAclPtrOutputWithContext

func (o InputsTcpRawAclPtrOutput) ToInputsTcpRawAclPtrOutputWithContext(ctx context.Context) InputsTcpRawAclPtrOutput

func (InputsTcpRawAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type InputsTcpRawArgs

type InputsTcpRawArgs struct {
	// The app/user context that is the namespace for the resource
	Acl InputsTcpRawAclPtrInput
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringPtrInput
	// Indicates if input is disabled.
	Disabled pulumi.BoolPtrInput
	// Host from which the indexer gets data.
	Host pulumi.StringPtrInput
	// Index to store generated events. Defaults to default.
	Index pulumi.StringPtrInput
	// The input port which receives raw data.
	Name pulumi.StringPtrInput
	// Valid values: (parsingQueue | indexQueue)
	// Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
	// Set queue to parsingQueue to apply props.conf and other parsing rules to your data. For more information about props.conf and rules for timestamping and linebreaking, refer to props.conf and the online documentation at "Monitor files and directories with inputs.conf"
	// Set queue to indexQueue to send your data directly into the index.
	Queue pulumi.StringPtrInput
	// Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
	// If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
	RawTcpDoneTimeout pulumi.IntPtrInput
	// Allows for restricting this input to only accept data from the host specified here.
	RestrictToHost pulumi.StringPtrInput
	// Sets the source key/field for events from this input. Defaults to the input file path.
	// Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
	Source pulumi.StringPtrInput
	// Set the source type for events from this input.
	// "sourcetype=" is automatically prepended to <string>.
	// Defaults to audittrail (if signedaudit=true) or fschange (if signedaudit=false).
	Sourcetype pulumi.StringPtrInput
}

The set of arguments for constructing a InputsTcpRaw resource.

func (InputsTcpRawArgs) ElementType

func (InputsTcpRawArgs) ElementType() reflect.Type

type InputsTcpRawArray added in v0.2.1

type InputsTcpRawArray []InputsTcpRawInput

func (InputsTcpRawArray) ElementType added in v0.2.1

func (InputsTcpRawArray) ElementType() reflect.Type

func (InputsTcpRawArray) ToInputsTcpRawArrayOutput added in v0.2.1

func (i InputsTcpRawArray) ToInputsTcpRawArrayOutput() InputsTcpRawArrayOutput

func (InputsTcpRawArray) ToInputsTcpRawArrayOutputWithContext added in v0.2.1

func (i InputsTcpRawArray) ToInputsTcpRawArrayOutputWithContext(ctx context.Context) InputsTcpRawArrayOutput

type InputsTcpRawArrayInput added in v0.2.1

type InputsTcpRawArrayInput interface {
	pulumi.Input

	ToInputsTcpRawArrayOutput() InputsTcpRawArrayOutput
	ToInputsTcpRawArrayOutputWithContext(context.Context) InputsTcpRawArrayOutput
}

InputsTcpRawArrayInput is an input type that accepts InputsTcpRawArray and InputsTcpRawArrayOutput values. You can construct a concrete instance of `InputsTcpRawArrayInput` via:

InputsTcpRawArray{ InputsTcpRawArgs{...} }

type InputsTcpRawArrayOutput added in v0.2.1

type InputsTcpRawArrayOutput struct{ *pulumi.OutputState }

func (InputsTcpRawArrayOutput) ElementType added in v0.2.1

func (InputsTcpRawArrayOutput) ElementType() reflect.Type

func (InputsTcpRawArrayOutput) Index added in v0.2.1

func (InputsTcpRawArrayOutput) ToInputsTcpRawArrayOutput added in v0.2.1

func (o InputsTcpRawArrayOutput) ToInputsTcpRawArrayOutput() InputsTcpRawArrayOutput

func (InputsTcpRawArrayOutput) ToInputsTcpRawArrayOutputWithContext added in v0.2.1

func (o InputsTcpRawArrayOutput) ToInputsTcpRawArrayOutputWithContext(ctx context.Context) InputsTcpRawArrayOutput

type InputsTcpRawInput

type InputsTcpRawInput interface {
	pulumi.Input

	ToInputsTcpRawOutput() InputsTcpRawOutput
	ToInputsTcpRawOutputWithContext(ctx context.Context) InputsTcpRawOutput
}

type InputsTcpRawMap added in v0.2.1

type InputsTcpRawMap map[string]InputsTcpRawInput

func (InputsTcpRawMap) ElementType added in v0.2.1

func (InputsTcpRawMap) ElementType() reflect.Type

func (InputsTcpRawMap) ToInputsTcpRawMapOutput added in v0.2.1

func (i InputsTcpRawMap) ToInputsTcpRawMapOutput() InputsTcpRawMapOutput

func (InputsTcpRawMap) ToInputsTcpRawMapOutputWithContext added in v0.2.1

func (i InputsTcpRawMap) ToInputsTcpRawMapOutputWithContext(ctx context.Context) InputsTcpRawMapOutput

type InputsTcpRawMapInput added in v0.2.1

type InputsTcpRawMapInput interface {
	pulumi.Input

	ToInputsTcpRawMapOutput() InputsTcpRawMapOutput
	ToInputsTcpRawMapOutputWithContext(context.Context) InputsTcpRawMapOutput
}

InputsTcpRawMapInput is an input type that accepts InputsTcpRawMap and InputsTcpRawMapOutput values. You can construct a concrete instance of `InputsTcpRawMapInput` via:

InputsTcpRawMap{ "key": InputsTcpRawArgs{...} }

type InputsTcpRawMapOutput added in v0.2.1

type InputsTcpRawMapOutput struct{ *pulumi.OutputState }

func (InputsTcpRawMapOutput) ElementType added in v0.2.1

func (InputsTcpRawMapOutput) ElementType() reflect.Type

func (InputsTcpRawMapOutput) MapIndex added in v0.2.1

func (InputsTcpRawMapOutput) ToInputsTcpRawMapOutput added in v0.2.1

func (o InputsTcpRawMapOutput) ToInputsTcpRawMapOutput() InputsTcpRawMapOutput

func (InputsTcpRawMapOutput) ToInputsTcpRawMapOutputWithContext added in v0.2.1

func (o InputsTcpRawMapOutput) ToInputsTcpRawMapOutputWithContext(ctx context.Context) InputsTcpRawMapOutput

type InputsTcpRawOutput

type InputsTcpRawOutput struct{ *pulumi.OutputState }

func (InputsTcpRawOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (InputsTcpRawOutput) ConnectionHost added in v1.1.5

func (o InputsTcpRawOutput) ConnectionHost() pulumi.StringOutput

Valid values: (ip | dns | none) Set the host for the remote server that is sending data. ip sets the host to the IP address of the remote server sending data. dns sets the host to the reverse DNS entry for the IP address of the remote server sending data. none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname. Default value is dns.

func (InputsTcpRawOutput) Disabled added in v1.1.5

func (o InputsTcpRawOutput) Disabled() pulumi.BoolOutput

Indicates if input is disabled.

func (InputsTcpRawOutput) ElementType

func (InputsTcpRawOutput) ElementType() reflect.Type

func (InputsTcpRawOutput) Host added in v1.1.5

Host from which the indexer gets data.

func (InputsTcpRawOutput) Index added in v1.1.5

Index to store generated events. Defaults to default.

func (InputsTcpRawOutput) Name added in v1.1.5

The input port which receives raw data.

func (InputsTcpRawOutput) Queue added in v1.1.5

Valid values: (parsingQueue | indexQueue) Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue. Set queue to parsingQueue to apply props.conf and other parsing rules to your data. For more information about props.conf and rules for timestamping and linebreaking, refer to props.conf and the online documentation at "Monitor files and directories with inputs.conf" Set queue to indexQueue to send your data directly into the index.

func (InputsTcpRawOutput) RawTcpDoneTimeout added in v1.1.5

func (o InputsTcpRawOutput) RawTcpDoneTimeout() pulumi.IntOutput

Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds. If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.

func (InputsTcpRawOutput) RestrictToHost added in v1.1.5

func (o InputsTcpRawOutput) RestrictToHost() pulumi.StringOutput

Allows for restricting this input to only accept data from the host specified here.

func (InputsTcpRawOutput) Source added in v1.1.5

Sets the source key/field for events from this input. Defaults to the input file path. Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.

func (InputsTcpRawOutput) Sourcetype added in v1.1.5

func (o InputsTcpRawOutput) Sourcetype() pulumi.StringOutput

Set the source type for events from this input. "sourcetype=" is automatically prepended to <string>. Defaults to audittrail (if signedaudit=true) or fschange (if signedaudit=false).

func (InputsTcpRawOutput) ToInputsTcpRawOutput

func (o InputsTcpRawOutput) ToInputsTcpRawOutput() InputsTcpRawOutput

func (InputsTcpRawOutput) ToInputsTcpRawOutputWithContext

func (o InputsTcpRawOutput) ToInputsTcpRawOutputWithContext(ctx context.Context) InputsTcpRawOutput

type InputsTcpRawState

type InputsTcpRawState struct {
	// The app/user context that is the namespace for the resource
	Acl InputsTcpRawAclPtrInput
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringPtrInput
	// Indicates if input is disabled.
	Disabled pulumi.BoolPtrInput
	// Host from which the indexer gets data.
	Host pulumi.StringPtrInput
	// Index to store generated events. Defaults to default.
	Index pulumi.StringPtrInput
	// The input port which receives raw data.
	Name pulumi.StringPtrInput
	// Valid values: (parsingQueue | indexQueue)
	// Specifies where the input processor should deposit the events it reads. Defaults to parsingQueue.
	// Set queue to parsingQueue to apply props.conf and other parsing rules to your data. For more information about props.conf and rules for timestamping and linebreaking, refer to props.conf and the online documentation at "Monitor files and directories with inputs.conf"
	// Set queue to indexQueue to send your data directly into the index.
	Queue pulumi.StringPtrInput
	// Specifies in seconds the timeout value for adding a Done-key. Default value is 10 seconds.
	// If a connection over the port specified by name remains idle after receiving data for specified number of seconds, it adds a Done-key. This implies the last event is completely received.
	RawTcpDoneTimeout pulumi.IntPtrInput
	// Allows for restricting this input to only accept data from the host specified here.
	RestrictToHost pulumi.StringPtrInput
	// Sets the source key/field for events from this input. Defaults to the input file path.
	// Sets the source key initial value. The key is used during parsing/indexing, in particular to set the source field during indexing. It is also the source field used at search time. As a convenience, the chosen string is prepended with 'source::'.
	Source pulumi.StringPtrInput
	// Set the source type for events from this input.
	// "sourcetype=" is automatically prepended to <string>.
	// Defaults to audittrail (if signedaudit=true) or fschange (if signedaudit=false).
	Sourcetype pulumi.StringPtrInput
}

func (InputsTcpRawState) ElementType

func (InputsTcpRawState) ElementType() reflect.Type

type InputsTcpSplunkTcpToken

type InputsTcpSplunkTcpToken struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl InputsTcpSplunkTcpTokenAclOutput `pulumi:"acl"`
	// Required. Name for the token to create.
	Name pulumi.StringOutput `pulumi:"name"`
	// Optional. Token value to use. If unspecified, a token is generated automatically.
	Token pulumi.StringOutput `pulumi:"token"`
}

## # Resource: InputsTcpSplunkTcpToken

Manage receiver access using tokens.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewInputsTcpSplunkTcpToken(ctx, "tcpSplunkTcpToken", &splunk.InputsTcpSplunkTcpTokenArgs{
			Token: pulumi.String("D66C45B3-7C28-48A1-A13A-027914146501"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetInputsTcpSplunkTcpToken

func GetInputsTcpSplunkTcpToken(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InputsTcpSplunkTcpTokenState, opts ...pulumi.ResourceOption) (*InputsTcpSplunkTcpToken, error)

GetInputsTcpSplunkTcpToken gets an existing InputsTcpSplunkTcpToken resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInputsTcpSplunkTcpToken

func NewInputsTcpSplunkTcpToken(ctx *pulumi.Context,
	name string, args *InputsTcpSplunkTcpTokenArgs, opts ...pulumi.ResourceOption) (*InputsTcpSplunkTcpToken, error)

NewInputsTcpSplunkTcpToken registers a new resource with the given unique name, arguments, and options.

func (*InputsTcpSplunkTcpToken) ElementType

func (*InputsTcpSplunkTcpToken) ElementType() reflect.Type

func (*InputsTcpSplunkTcpToken) ToInputsTcpSplunkTcpTokenOutput

func (i *InputsTcpSplunkTcpToken) ToInputsTcpSplunkTcpTokenOutput() InputsTcpSplunkTcpTokenOutput

func (*InputsTcpSplunkTcpToken) ToInputsTcpSplunkTcpTokenOutputWithContext

func (i *InputsTcpSplunkTcpToken) ToInputsTcpSplunkTcpTokenOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenOutput

type InputsTcpSplunkTcpTokenAcl

type InputsTcpSplunkTcpTokenAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type InputsTcpSplunkTcpTokenAclArgs

type InputsTcpSplunkTcpTokenAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (InputsTcpSplunkTcpTokenAclArgs) ElementType

func (InputsTcpSplunkTcpTokenAclArgs) ToInputsTcpSplunkTcpTokenAclOutput

func (i InputsTcpSplunkTcpTokenAclArgs) ToInputsTcpSplunkTcpTokenAclOutput() InputsTcpSplunkTcpTokenAclOutput

func (InputsTcpSplunkTcpTokenAclArgs) ToInputsTcpSplunkTcpTokenAclOutputWithContext

func (i InputsTcpSplunkTcpTokenAclArgs) ToInputsTcpSplunkTcpTokenAclOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenAclOutput

func (InputsTcpSplunkTcpTokenAclArgs) ToInputsTcpSplunkTcpTokenAclPtrOutput

func (i InputsTcpSplunkTcpTokenAclArgs) ToInputsTcpSplunkTcpTokenAclPtrOutput() InputsTcpSplunkTcpTokenAclPtrOutput

func (InputsTcpSplunkTcpTokenAclArgs) ToInputsTcpSplunkTcpTokenAclPtrOutputWithContext

func (i InputsTcpSplunkTcpTokenAclArgs) ToInputsTcpSplunkTcpTokenAclPtrOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenAclPtrOutput

type InputsTcpSplunkTcpTokenAclInput

type InputsTcpSplunkTcpTokenAclInput interface {
	pulumi.Input

	ToInputsTcpSplunkTcpTokenAclOutput() InputsTcpSplunkTcpTokenAclOutput
	ToInputsTcpSplunkTcpTokenAclOutputWithContext(context.Context) InputsTcpSplunkTcpTokenAclOutput
}

InputsTcpSplunkTcpTokenAclInput is an input type that accepts InputsTcpSplunkTcpTokenAclArgs and InputsTcpSplunkTcpTokenAclOutput values. You can construct a concrete instance of `InputsTcpSplunkTcpTokenAclInput` via:

InputsTcpSplunkTcpTokenAclArgs{...}

type InputsTcpSplunkTcpTokenAclOutput

type InputsTcpSplunkTcpTokenAclOutput struct{ *pulumi.OutputState }

func (InputsTcpSplunkTcpTokenAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsTcpSplunkTcpTokenAclOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsTcpSplunkTcpTokenAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsTcpSplunkTcpTokenAclOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsTcpSplunkTcpTokenAclOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsTcpSplunkTcpTokenAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsTcpSplunkTcpTokenAclOutput) ElementType

func (InputsTcpSplunkTcpTokenAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsTcpSplunkTcpTokenAclOutput) Reads

Properties that indicate resource read permissions.

func (InputsTcpSplunkTcpTokenAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsTcpSplunkTcpTokenAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsTcpSplunkTcpTokenAclOutput) ToInputsTcpSplunkTcpTokenAclOutput

func (o InputsTcpSplunkTcpTokenAclOutput) ToInputsTcpSplunkTcpTokenAclOutput() InputsTcpSplunkTcpTokenAclOutput

func (InputsTcpSplunkTcpTokenAclOutput) ToInputsTcpSplunkTcpTokenAclOutputWithContext

func (o InputsTcpSplunkTcpTokenAclOutput) ToInputsTcpSplunkTcpTokenAclOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenAclOutput

func (InputsTcpSplunkTcpTokenAclOutput) ToInputsTcpSplunkTcpTokenAclPtrOutput

func (o InputsTcpSplunkTcpTokenAclOutput) ToInputsTcpSplunkTcpTokenAclPtrOutput() InputsTcpSplunkTcpTokenAclPtrOutput

func (InputsTcpSplunkTcpTokenAclOutput) ToInputsTcpSplunkTcpTokenAclPtrOutputWithContext

func (o InputsTcpSplunkTcpTokenAclOutput) ToInputsTcpSplunkTcpTokenAclPtrOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenAclPtrOutput

func (InputsTcpSplunkTcpTokenAclOutput) Writes

Properties that indicate write permissions of the resource.

type InputsTcpSplunkTcpTokenAclPtrInput

type InputsTcpSplunkTcpTokenAclPtrInput interface {
	pulumi.Input

	ToInputsTcpSplunkTcpTokenAclPtrOutput() InputsTcpSplunkTcpTokenAclPtrOutput
	ToInputsTcpSplunkTcpTokenAclPtrOutputWithContext(context.Context) InputsTcpSplunkTcpTokenAclPtrOutput
}

InputsTcpSplunkTcpTokenAclPtrInput is an input type that accepts InputsTcpSplunkTcpTokenAclArgs, InputsTcpSplunkTcpTokenAclPtr and InputsTcpSplunkTcpTokenAclPtrOutput values. You can construct a concrete instance of `InputsTcpSplunkTcpTokenAclPtrInput` via:

        InputsTcpSplunkTcpTokenAclArgs{...}

or:

        nil

type InputsTcpSplunkTcpTokenAclPtrOutput

type InputsTcpSplunkTcpTokenAclPtrOutput struct{ *pulumi.OutputState }

func (InputsTcpSplunkTcpTokenAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsTcpSplunkTcpTokenAclPtrOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsTcpSplunkTcpTokenAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsTcpSplunkTcpTokenAclPtrOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsTcpSplunkTcpTokenAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsTcpSplunkTcpTokenAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsTcpSplunkTcpTokenAclPtrOutput) Elem

func (InputsTcpSplunkTcpTokenAclPtrOutput) ElementType

func (InputsTcpSplunkTcpTokenAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsTcpSplunkTcpTokenAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (InputsTcpSplunkTcpTokenAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsTcpSplunkTcpTokenAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsTcpSplunkTcpTokenAclPtrOutput) ToInputsTcpSplunkTcpTokenAclPtrOutput

func (o InputsTcpSplunkTcpTokenAclPtrOutput) ToInputsTcpSplunkTcpTokenAclPtrOutput() InputsTcpSplunkTcpTokenAclPtrOutput

func (InputsTcpSplunkTcpTokenAclPtrOutput) ToInputsTcpSplunkTcpTokenAclPtrOutputWithContext

func (o InputsTcpSplunkTcpTokenAclPtrOutput) ToInputsTcpSplunkTcpTokenAclPtrOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenAclPtrOutput

func (InputsTcpSplunkTcpTokenAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type InputsTcpSplunkTcpTokenArgs

type InputsTcpSplunkTcpTokenArgs struct {
	// The app/user context that is the namespace for the resource
	Acl InputsTcpSplunkTcpTokenAclPtrInput
	// Required. Name for the token to create.
	Name pulumi.StringPtrInput
	// Optional. Token value to use. If unspecified, a token is generated automatically.
	Token pulumi.StringPtrInput
}

The set of arguments for constructing a InputsTcpSplunkTcpToken resource.

func (InputsTcpSplunkTcpTokenArgs) ElementType

type InputsTcpSplunkTcpTokenArray added in v0.2.1

type InputsTcpSplunkTcpTokenArray []InputsTcpSplunkTcpTokenInput

func (InputsTcpSplunkTcpTokenArray) ElementType added in v0.2.1

func (InputsTcpSplunkTcpTokenArray) ToInputsTcpSplunkTcpTokenArrayOutput added in v0.2.1

func (i InputsTcpSplunkTcpTokenArray) ToInputsTcpSplunkTcpTokenArrayOutput() InputsTcpSplunkTcpTokenArrayOutput

func (InputsTcpSplunkTcpTokenArray) ToInputsTcpSplunkTcpTokenArrayOutputWithContext added in v0.2.1

func (i InputsTcpSplunkTcpTokenArray) ToInputsTcpSplunkTcpTokenArrayOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenArrayOutput

type InputsTcpSplunkTcpTokenArrayInput added in v0.2.1

type InputsTcpSplunkTcpTokenArrayInput interface {
	pulumi.Input

	ToInputsTcpSplunkTcpTokenArrayOutput() InputsTcpSplunkTcpTokenArrayOutput
	ToInputsTcpSplunkTcpTokenArrayOutputWithContext(context.Context) InputsTcpSplunkTcpTokenArrayOutput
}

InputsTcpSplunkTcpTokenArrayInput is an input type that accepts InputsTcpSplunkTcpTokenArray and InputsTcpSplunkTcpTokenArrayOutput values. You can construct a concrete instance of `InputsTcpSplunkTcpTokenArrayInput` via:

InputsTcpSplunkTcpTokenArray{ InputsTcpSplunkTcpTokenArgs{...} }

type InputsTcpSplunkTcpTokenArrayOutput added in v0.2.1

type InputsTcpSplunkTcpTokenArrayOutput struct{ *pulumi.OutputState }

func (InputsTcpSplunkTcpTokenArrayOutput) ElementType added in v0.2.1

func (InputsTcpSplunkTcpTokenArrayOutput) Index added in v0.2.1

func (InputsTcpSplunkTcpTokenArrayOutput) ToInputsTcpSplunkTcpTokenArrayOutput added in v0.2.1

func (o InputsTcpSplunkTcpTokenArrayOutput) ToInputsTcpSplunkTcpTokenArrayOutput() InputsTcpSplunkTcpTokenArrayOutput

func (InputsTcpSplunkTcpTokenArrayOutput) ToInputsTcpSplunkTcpTokenArrayOutputWithContext added in v0.2.1

func (o InputsTcpSplunkTcpTokenArrayOutput) ToInputsTcpSplunkTcpTokenArrayOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenArrayOutput

type InputsTcpSplunkTcpTokenInput

type InputsTcpSplunkTcpTokenInput interface {
	pulumi.Input

	ToInputsTcpSplunkTcpTokenOutput() InputsTcpSplunkTcpTokenOutput
	ToInputsTcpSplunkTcpTokenOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenOutput
}

type InputsTcpSplunkTcpTokenMap added in v0.2.1

type InputsTcpSplunkTcpTokenMap map[string]InputsTcpSplunkTcpTokenInput

func (InputsTcpSplunkTcpTokenMap) ElementType added in v0.2.1

func (InputsTcpSplunkTcpTokenMap) ElementType() reflect.Type

func (InputsTcpSplunkTcpTokenMap) ToInputsTcpSplunkTcpTokenMapOutput added in v0.2.1

func (i InputsTcpSplunkTcpTokenMap) ToInputsTcpSplunkTcpTokenMapOutput() InputsTcpSplunkTcpTokenMapOutput

func (InputsTcpSplunkTcpTokenMap) ToInputsTcpSplunkTcpTokenMapOutputWithContext added in v0.2.1

func (i InputsTcpSplunkTcpTokenMap) ToInputsTcpSplunkTcpTokenMapOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenMapOutput

type InputsTcpSplunkTcpTokenMapInput added in v0.2.1

type InputsTcpSplunkTcpTokenMapInput interface {
	pulumi.Input

	ToInputsTcpSplunkTcpTokenMapOutput() InputsTcpSplunkTcpTokenMapOutput
	ToInputsTcpSplunkTcpTokenMapOutputWithContext(context.Context) InputsTcpSplunkTcpTokenMapOutput
}

InputsTcpSplunkTcpTokenMapInput is an input type that accepts InputsTcpSplunkTcpTokenMap and InputsTcpSplunkTcpTokenMapOutput values. You can construct a concrete instance of `InputsTcpSplunkTcpTokenMapInput` via:

InputsTcpSplunkTcpTokenMap{ "key": InputsTcpSplunkTcpTokenArgs{...} }

type InputsTcpSplunkTcpTokenMapOutput added in v0.2.1

type InputsTcpSplunkTcpTokenMapOutput struct{ *pulumi.OutputState }

func (InputsTcpSplunkTcpTokenMapOutput) ElementType added in v0.2.1

func (InputsTcpSplunkTcpTokenMapOutput) MapIndex added in v0.2.1

func (InputsTcpSplunkTcpTokenMapOutput) ToInputsTcpSplunkTcpTokenMapOutput added in v0.2.1

func (o InputsTcpSplunkTcpTokenMapOutput) ToInputsTcpSplunkTcpTokenMapOutput() InputsTcpSplunkTcpTokenMapOutput

func (InputsTcpSplunkTcpTokenMapOutput) ToInputsTcpSplunkTcpTokenMapOutputWithContext added in v0.2.1

func (o InputsTcpSplunkTcpTokenMapOutput) ToInputsTcpSplunkTcpTokenMapOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenMapOutput

type InputsTcpSplunkTcpTokenOutput

type InputsTcpSplunkTcpTokenOutput struct{ *pulumi.OutputState }

func (InputsTcpSplunkTcpTokenOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (InputsTcpSplunkTcpTokenOutput) ElementType

func (InputsTcpSplunkTcpTokenOutput) Name added in v1.1.5

Required. Name for the token to create.

func (InputsTcpSplunkTcpTokenOutput) ToInputsTcpSplunkTcpTokenOutput

func (o InputsTcpSplunkTcpTokenOutput) ToInputsTcpSplunkTcpTokenOutput() InputsTcpSplunkTcpTokenOutput

func (InputsTcpSplunkTcpTokenOutput) ToInputsTcpSplunkTcpTokenOutputWithContext

func (o InputsTcpSplunkTcpTokenOutput) ToInputsTcpSplunkTcpTokenOutputWithContext(ctx context.Context) InputsTcpSplunkTcpTokenOutput

func (InputsTcpSplunkTcpTokenOutput) Token added in v1.1.5

Optional. Token value to use. If unspecified, a token is generated automatically.

type InputsTcpSplunkTcpTokenState

type InputsTcpSplunkTcpTokenState struct {
	// The app/user context that is the namespace for the resource
	Acl InputsTcpSplunkTcpTokenAclPtrInput
	// Required. Name for the token to create.
	Name pulumi.StringPtrInput
	// Optional. Token value to use. If unspecified, a token is generated automatically.
	Token pulumi.StringPtrInput
}

func (InputsTcpSplunkTcpTokenState) ElementType

type InputsTcpSsl

type InputsTcpSsl struct {
	pulumi.CustomResourceState

	// Indicates if input is disabled.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// Server certificate password, if any.
	Password pulumi.StringOutput `pulumi:"password"`
	// Determines whether a client must authenticate.
	RequireClientCert pulumi.BoolOutput `pulumi:"requireClientCert"`
	// Certificate authority list (root file)
	RootCa pulumi.StringOutput `pulumi:"rootCa"`
	// Full path to the server certificate.
	ServerCert pulumi.StringOutput `pulumi:"serverCert"`
}

## # Resource: InputsTcpSsl

Access or update the SSL configuration for the host.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewInputsTcpSsl(ctx, "test", &splunk.InputsTcpSslArgs{
			Disabled:          pulumi.Bool(false),
			RequireClientCert: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetInputsTcpSsl

func GetInputsTcpSsl(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InputsTcpSslState, opts ...pulumi.ResourceOption) (*InputsTcpSsl, error)

GetInputsTcpSsl gets an existing InputsTcpSsl resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInputsTcpSsl

func NewInputsTcpSsl(ctx *pulumi.Context,
	name string, args *InputsTcpSslArgs, opts ...pulumi.ResourceOption) (*InputsTcpSsl, error)

NewInputsTcpSsl registers a new resource with the given unique name, arguments, and options.

func (*InputsTcpSsl) ElementType

func (*InputsTcpSsl) ElementType() reflect.Type

func (*InputsTcpSsl) ToInputsTcpSslOutput

func (i *InputsTcpSsl) ToInputsTcpSslOutput() InputsTcpSslOutput

func (*InputsTcpSsl) ToInputsTcpSslOutputWithContext

func (i *InputsTcpSsl) ToInputsTcpSslOutputWithContext(ctx context.Context) InputsTcpSslOutput

type InputsTcpSslArgs

type InputsTcpSslArgs struct {
	// Indicates if input is disabled.
	Disabled pulumi.BoolPtrInput
	// Server certificate password, if any.
	Password pulumi.StringPtrInput
	// Determines whether a client must authenticate.
	RequireClientCert pulumi.BoolPtrInput
	// Certificate authority list (root file)
	RootCa pulumi.StringPtrInput
	// Full path to the server certificate.
	ServerCert pulumi.StringPtrInput
}

The set of arguments for constructing a InputsTcpSsl resource.

func (InputsTcpSslArgs) ElementType

func (InputsTcpSslArgs) ElementType() reflect.Type

type InputsTcpSslArray added in v0.2.1

type InputsTcpSslArray []InputsTcpSslInput

func (InputsTcpSslArray) ElementType added in v0.2.1

func (InputsTcpSslArray) ElementType() reflect.Type

func (InputsTcpSslArray) ToInputsTcpSslArrayOutput added in v0.2.1

func (i InputsTcpSslArray) ToInputsTcpSslArrayOutput() InputsTcpSslArrayOutput

func (InputsTcpSslArray) ToInputsTcpSslArrayOutputWithContext added in v0.2.1

func (i InputsTcpSslArray) ToInputsTcpSslArrayOutputWithContext(ctx context.Context) InputsTcpSslArrayOutput

type InputsTcpSslArrayInput added in v0.2.1

type InputsTcpSslArrayInput interface {
	pulumi.Input

	ToInputsTcpSslArrayOutput() InputsTcpSslArrayOutput
	ToInputsTcpSslArrayOutputWithContext(context.Context) InputsTcpSslArrayOutput
}

InputsTcpSslArrayInput is an input type that accepts InputsTcpSslArray and InputsTcpSslArrayOutput values. You can construct a concrete instance of `InputsTcpSslArrayInput` via:

InputsTcpSslArray{ InputsTcpSslArgs{...} }

type InputsTcpSslArrayOutput added in v0.2.1

type InputsTcpSslArrayOutput struct{ *pulumi.OutputState }

func (InputsTcpSslArrayOutput) ElementType added in v0.2.1

func (InputsTcpSslArrayOutput) ElementType() reflect.Type

func (InputsTcpSslArrayOutput) Index added in v0.2.1

func (InputsTcpSslArrayOutput) ToInputsTcpSslArrayOutput added in v0.2.1

func (o InputsTcpSslArrayOutput) ToInputsTcpSslArrayOutput() InputsTcpSslArrayOutput

func (InputsTcpSslArrayOutput) ToInputsTcpSslArrayOutputWithContext added in v0.2.1

func (o InputsTcpSslArrayOutput) ToInputsTcpSslArrayOutputWithContext(ctx context.Context) InputsTcpSslArrayOutput

type InputsTcpSslInput

type InputsTcpSslInput interface {
	pulumi.Input

	ToInputsTcpSslOutput() InputsTcpSslOutput
	ToInputsTcpSslOutputWithContext(ctx context.Context) InputsTcpSslOutput
}

type InputsTcpSslMap added in v0.2.1

type InputsTcpSslMap map[string]InputsTcpSslInput

func (InputsTcpSslMap) ElementType added in v0.2.1

func (InputsTcpSslMap) ElementType() reflect.Type

func (InputsTcpSslMap) ToInputsTcpSslMapOutput added in v0.2.1

func (i InputsTcpSslMap) ToInputsTcpSslMapOutput() InputsTcpSslMapOutput

func (InputsTcpSslMap) ToInputsTcpSslMapOutputWithContext added in v0.2.1

func (i InputsTcpSslMap) ToInputsTcpSslMapOutputWithContext(ctx context.Context) InputsTcpSslMapOutput

type InputsTcpSslMapInput added in v0.2.1

type InputsTcpSslMapInput interface {
	pulumi.Input

	ToInputsTcpSslMapOutput() InputsTcpSslMapOutput
	ToInputsTcpSslMapOutputWithContext(context.Context) InputsTcpSslMapOutput
}

InputsTcpSslMapInput is an input type that accepts InputsTcpSslMap and InputsTcpSslMapOutput values. You can construct a concrete instance of `InputsTcpSslMapInput` via:

InputsTcpSslMap{ "key": InputsTcpSslArgs{...} }

type InputsTcpSslMapOutput added in v0.2.1

type InputsTcpSslMapOutput struct{ *pulumi.OutputState }

func (InputsTcpSslMapOutput) ElementType added in v0.2.1

func (InputsTcpSslMapOutput) ElementType() reflect.Type

func (InputsTcpSslMapOutput) MapIndex added in v0.2.1

func (InputsTcpSslMapOutput) ToInputsTcpSslMapOutput added in v0.2.1

func (o InputsTcpSslMapOutput) ToInputsTcpSslMapOutput() InputsTcpSslMapOutput

func (InputsTcpSslMapOutput) ToInputsTcpSslMapOutputWithContext added in v0.2.1

func (o InputsTcpSslMapOutput) ToInputsTcpSslMapOutputWithContext(ctx context.Context) InputsTcpSslMapOutput

type InputsTcpSslOutput

type InputsTcpSslOutput struct{ *pulumi.OutputState }

func (InputsTcpSslOutput) Disabled added in v1.1.5

func (o InputsTcpSslOutput) Disabled() pulumi.BoolOutput

Indicates if input is disabled.

func (InputsTcpSslOutput) ElementType

func (InputsTcpSslOutput) ElementType() reflect.Type

func (InputsTcpSslOutput) Password added in v1.1.5

func (o InputsTcpSslOutput) Password() pulumi.StringOutput

Server certificate password, if any.

func (InputsTcpSslOutput) RequireClientCert added in v1.1.5

func (o InputsTcpSslOutput) RequireClientCert() pulumi.BoolOutput

Determines whether a client must authenticate.

func (InputsTcpSslOutput) RootCa added in v1.1.5

Certificate authority list (root file)

func (InputsTcpSslOutput) ServerCert added in v1.1.5

func (o InputsTcpSslOutput) ServerCert() pulumi.StringOutput

Full path to the server certificate.

func (InputsTcpSslOutput) ToInputsTcpSslOutput

func (o InputsTcpSslOutput) ToInputsTcpSslOutput() InputsTcpSslOutput

func (InputsTcpSslOutput) ToInputsTcpSslOutputWithContext

func (o InputsTcpSslOutput) ToInputsTcpSslOutputWithContext(ctx context.Context) InputsTcpSslOutput

type InputsTcpSslState

type InputsTcpSslState struct {
	// Indicates if input is disabled.
	Disabled pulumi.BoolPtrInput
	// Server certificate password, if any.
	Password pulumi.StringPtrInput
	// Determines whether a client must authenticate.
	RequireClientCert pulumi.BoolPtrInput
	// Certificate authority list (root file)
	RootCa pulumi.StringPtrInput
	// Full path to the server certificate.
	ServerCert pulumi.StringPtrInput
}

func (InputsTcpSslState) ElementType

func (InputsTcpSslState) ElementType() reflect.Type

type InputsUdp

type InputsUdp struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl InputsUdpAclOutput `pulumi:"acl"`
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringOutput `pulumi:"connectionHost"`
	// Indicates if input is disabled.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// The value to populate in the host field for incoming events. This is used during parsing/indexing, in particular to set the host field. It is also the host field used at search time.
	Host pulumi.StringOutput `pulumi:"host"`
	// Which index events from this input should be stored in. Defaults to default.
	Index pulumi.StringOutput `pulumi:"index"`
	// The UDP port that this input should listen on.
	Name pulumi.StringOutput `pulumi:"name"`
	// If set to true, prevents Splunk software from prepending a timestamp and hostname to incoming events.
	NoAppendingTimestamp pulumi.BoolOutput `pulumi:"noAppendingTimestamp"`
	// If set to true, Splunk software does not remove the priority field from incoming syslog events.
	NoPriorityStripping pulumi.BoolOutput `pulumi:"noPriorityStripping"`
	// Which queue events from this input should be sent to. Generally this does not need to be changed.
	Queue pulumi.StringOutput `pulumi:"queue"`
	// Restrict incoming connections on this port to the host specified here.
	// If this is not set, the value specified in [udp://<remote server>:<port>] in inputs.conf is used.
	RestrictToHost pulumi.StringOutput `pulumi:"restrictToHost"`
	// The value to populate in the source field for incoming events. The same source should not be used for multiple data inputs.
	Source pulumi.StringOutput `pulumi:"source"`
	// The value to populate in the sourcetype field for incoming events.
	Sourcetype pulumi.StringOutput `pulumi:"sourcetype"`
}

## # Resource: InputsTcpRaw

Create and manage UDP data inputs.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewInputsUdp(ctx, "udp", &splunk.InputsUdpArgs{
			Disabled:   pulumi.Bool(false),
			Index:      pulumi.String("main"),
			Source:     pulumi.String("new"),
			Sourcetype: pulumi.String("new"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetInputsUdp

func GetInputsUdp(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InputsUdpState, opts ...pulumi.ResourceOption) (*InputsUdp, error)

GetInputsUdp gets an existing InputsUdp resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInputsUdp

func NewInputsUdp(ctx *pulumi.Context,
	name string, args *InputsUdpArgs, opts ...pulumi.ResourceOption) (*InputsUdp, error)

NewInputsUdp registers a new resource with the given unique name, arguments, and options.

func (*InputsUdp) ElementType

func (*InputsUdp) ElementType() reflect.Type

func (*InputsUdp) ToInputsUdpOutput

func (i *InputsUdp) ToInputsUdpOutput() InputsUdpOutput

func (*InputsUdp) ToInputsUdpOutputWithContext

func (i *InputsUdp) ToInputsUdpOutputWithContext(ctx context.Context) InputsUdpOutput

type InputsUdpAcl

type InputsUdpAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type InputsUdpAclArgs

type InputsUdpAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (InputsUdpAclArgs) ElementType

func (InputsUdpAclArgs) ElementType() reflect.Type

func (InputsUdpAclArgs) ToInputsUdpAclOutput

func (i InputsUdpAclArgs) ToInputsUdpAclOutput() InputsUdpAclOutput

func (InputsUdpAclArgs) ToInputsUdpAclOutputWithContext

func (i InputsUdpAclArgs) ToInputsUdpAclOutputWithContext(ctx context.Context) InputsUdpAclOutput

func (InputsUdpAclArgs) ToInputsUdpAclPtrOutput

func (i InputsUdpAclArgs) ToInputsUdpAclPtrOutput() InputsUdpAclPtrOutput

func (InputsUdpAclArgs) ToInputsUdpAclPtrOutputWithContext

func (i InputsUdpAclArgs) ToInputsUdpAclPtrOutputWithContext(ctx context.Context) InputsUdpAclPtrOutput

type InputsUdpAclInput

type InputsUdpAclInput interface {
	pulumi.Input

	ToInputsUdpAclOutput() InputsUdpAclOutput
	ToInputsUdpAclOutputWithContext(context.Context) InputsUdpAclOutput
}

InputsUdpAclInput is an input type that accepts InputsUdpAclArgs and InputsUdpAclOutput values. You can construct a concrete instance of `InputsUdpAclInput` via:

InputsUdpAclArgs{...}

type InputsUdpAclOutput

type InputsUdpAclOutput struct{ *pulumi.OutputState }

func (InputsUdpAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsUdpAclOutput) CanChangePerms

func (o InputsUdpAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsUdpAclOutput) CanShareApp

func (o InputsUdpAclOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsUdpAclOutput) CanShareGlobal

func (o InputsUdpAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsUdpAclOutput) CanShareUser

func (o InputsUdpAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsUdpAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsUdpAclOutput) ElementType

func (InputsUdpAclOutput) ElementType() reflect.Type

func (InputsUdpAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsUdpAclOutput) Reads

Properties that indicate resource read permissions.

func (InputsUdpAclOutput) Removable

func (o InputsUdpAclOutput) Removable() pulumi.BoolPtrOutput

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsUdpAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsUdpAclOutput) ToInputsUdpAclOutput

func (o InputsUdpAclOutput) ToInputsUdpAclOutput() InputsUdpAclOutput

func (InputsUdpAclOutput) ToInputsUdpAclOutputWithContext

func (o InputsUdpAclOutput) ToInputsUdpAclOutputWithContext(ctx context.Context) InputsUdpAclOutput

func (InputsUdpAclOutput) ToInputsUdpAclPtrOutput

func (o InputsUdpAclOutput) ToInputsUdpAclPtrOutput() InputsUdpAclPtrOutput

func (InputsUdpAclOutput) ToInputsUdpAclPtrOutputWithContext

func (o InputsUdpAclOutput) ToInputsUdpAclPtrOutputWithContext(ctx context.Context) InputsUdpAclPtrOutput

func (InputsUdpAclOutput) Writes

Properties that indicate write permissions of the resource.

type InputsUdpAclPtrInput

type InputsUdpAclPtrInput interface {
	pulumi.Input

	ToInputsUdpAclPtrOutput() InputsUdpAclPtrOutput
	ToInputsUdpAclPtrOutputWithContext(context.Context) InputsUdpAclPtrOutput
}

InputsUdpAclPtrInput is an input type that accepts InputsUdpAclArgs, InputsUdpAclPtr and InputsUdpAclPtrOutput values. You can construct a concrete instance of `InputsUdpAclPtrInput` via:

        InputsUdpAclArgs{...}

or:

        nil

type InputsUdpAclPtrOutput

type InputsUdpAclPtrOutput struct{ *pulumi.OutputState }

func (InputsUdpAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (InputsUdpAclPtrOutput) CanChangePerms

func (o InputsUdpAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (InputsUdpAclPtrOutput) CanShareApp

func (o InputsUdpAclPtrOutput) CanShareApp() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to app level. Defaults to true.

func (InputsUdpAclPtrOutput) CanShareGlobal

func (o InputsUdpAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (InputsUdpAclPtrOutput) CanShareUser

func (o InputsUdpAclPtrOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (InputsUdpAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (InputsUdpAclPtrOutput) Elem

func (InputsUdpAclPtrOutput) ElementType

func (InputsUdpAclPtrOutput) ElementType() reflect.Type

func (InputsUdpAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (InputsUdpAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (InputsUdpAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (InputsUdpAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (InputsUdpAclPtrOutput) ToInputsUdpAclPtrOutput

func (o InputsUdpAclPtrOutput) ToInputsUdpAclPtrOutput() InputsUdpAclPtrOutput

func (InputsUdpAclPtrOutput) ToInputsUdpAclPtrOutputWithContext

func (o InputsUdpAclPtrOutput) ToInputsUdpAclPtrOutputWithContext(ctx context.Context) InputsUdpAclPtrOutput

func (InputsUdpAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type InputsUdpArgs

type InputsUdpArgs struct {
	// The app/user context that is the namespace for the resource
	Acl InputsUdpAclPtrInput
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringPtrInput
	// Indicates if input is disabled.
	Disabled pulumi.BoolPtrInput
	// The value to populate in the host field for incoming events. This is used during parsing/indexing, in particular to set the host field. It is also the host field used at search time.
	Host pulumi.StringPtrInput
	// Which index events from this input should be stored in. Defaults to default.
	Index pulumi.StringPtrInput
	// The UDP port that this input should listen on.
	Name pulumi.StringPtrInput
	// If set to true, prevents Splunk software from prepending a timestamp and hostname to incoming events.
	NoAppendingTimestamp pulumi.BoolPtrInput
	// If set to true, Splunk software does not remove the priority field from incoming syslog events.
	NoPriorityStripping pulumi.BoolPtrInput
	// Which queue events from this input should be sent to. Generally this does not need to be changed.
	Queue pulumi.StringPtrInput
	// Restrict incoming connections on this port to the host specified here.
	// If this is not set, the value specified in [udp://<remote server>:<port>] in inputs.conf is used.
	RestrictToHost pulumi.StringPtrInput
	// The value to populate in the source field for incoming events. The same source should not be used for multiple data inputs.
	Source pulumi.StringPtrInput
	// The value to populate in the sourcetype field for incoming events.
	Sourcetype pulumi.StringPtrInput
}

The set of arguments for constructing a InputsUdp resource.

func (InputsUdpArgs) ElementType

func (InputsUdpArgs) ElementType() reflect.Type

type InputsUdpArray added in v0.2.1

type InputsUdpArray []InputsUdpInput

func (InputsUdpArray) ElementType added in v0.2.1

func (InputsUdpArray) ElementType() reflect.Type

func (InputsUdpArray) ToInputsUdpArrayOutput added in v0.2.1

func (i InputsUdpArray) ToInputsUdpArrayOutput() InputsUdpArrayOutput

func (InputsUdpArray) ToInputsUdpArrayOutputWithContext added in v0.2.1

func (i InputsUdpArray) ToInputsUdpArrayOutputWithContext(ctx context.Context) InputsUdpArrayOutput

type InputsUdpArrayInput added in v0.2.1

type InputsUdpArrayInput interface {
	pulumi.Input

	ToInputsUdpArrayOutput() InputsUdpArrayOutput
	ToInputsUdpArrayOutputWithContext(context.Context) InputsUdpArrayOutput
}

InputsUdpArrayInput is an input type that accepts InputsUdpArray and InputsUdpArrayOutput values. You can construct a concrete instance of `InputsUdpArrayInput` via:

InputsUdpArray{ InputsUdpArgs{...} }

type InputsUdpArrayOutput added in v0.2.1

type InputsUdpArrayOutput struct{ *pulumi.OutputState }

func (InputsUdpArrayOutput) ElementType added in v0.2.1

func (InputsUdpArrayOutput) ElementType() reflect.Type

func (InputsUdpArrayOutput) Index added in v0.2.1

func (InputsUdpArrayOutput) ToInputsUdpArrayOutput added in v0.2.1

func (o InputsUdpArrayOutput) ToInputsUdpArrayOutput() InputsUdpArrayOutput

func (InputsUdpArrayOutput) ToInputsUdpArrayOutputWithContext added in v0.2.1

func (o InputsUdpArrayOutput) ToInputsUdpArrayOutputWithContext(ctx context.Context) InputsUdpArrayOutput

type InputsUdpInput

type InputsUdpInput interface {
	pulumi.Input

	ToInputsUdpOutput() InputsUdpOutput
	ToInputsUdpOutputWithContext(ctx context.Context) InputsUdpOutput
}

type InputsUdpMap added in v0.2.1

type InputsUdpMap map[string]InputsUdpInput

func (InputsUdpMap) ElementType added in v0.2.1

func (InputsUdpMap) ElementType() reflect.Type

func (InputsUdpMap) ToInputsUdpMapOutput added in v0.2.1

func (i InputsUdpMap) ToInputsUdpMapOutput() InputsUdpMapOutput

func (InputsUdpMap) ToInputsUdpMapOutputWithContext added in v0.2.1

func (i InputsUdpMap) ToInputsUdpMapOutputWithContext(ctx context.Context) InputsUdpMapOutput

type InputsUdpMapInput added in v0.2.1

type InputsUdpMapInput interface {
	pulumi.Input

	ToInputsUdpMapOutput() InputsUdpMapOutput
	ToInputsUdpMapOutputWithContext(context.Context) InputsUdpMapOutput
}

InputsUdpMapInput is an input type that accepts InputsUdpMap and InputsUdpMapOutput values. You can construct a concrete instance of `InputsUdpMapInput` via:

InputsUdpMap{ "key": InputsUdpArgs{...} }

type InputsUdpMapOutput added in v0.2.1

type InputsUdpMapOutput struct{ *pulumi.OutputState }

func (InputsUdpMapOutput) ElementType added in v0.2.1

func (InputsUdpMapOutput) ElementType() reflect.Type

func (InputsUdpMapOutput) MapIndex added in v0.2.1

func (InputsUdpMapOutput) ToInputsUdpMapOutput added in v0.2.1

func (o InputsUdpMapOutput) ToInputsUdpMapOutput() InputsUdpMapOutput

func (InputsUdpMapOutput) ToInputsUdpMapOutputWithContext added in v0.2.1

func (o InputsUdpMapOutput) ToInputsUdpMapOutputWithContext(ctx context.Context) InputsUdpMapOutput

type InputsUdpOutput

type InputsUdpOutput struct{ *pulumi.OutputState }

func (InputsUdpOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (InputsUdpOutput) ConnectionHost added in v1.1.5

func (o InputsUdpOutput) ConnectionHost() pulumi.StringOutput

Valid values: (ip | dns | none) Set the host for the remote server that is sending data. ip sets the host to the IP address of the remote server sending data. dns sets the host to the reverse DNS entry for the IP address of the remote server sending data. none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname. Default value is dns.

func (InputsUdpOutput) Disabled added in v1.1.5

func (o InputsUdpOutput) Disabled() pulumi.BoolOutput

Indicates if input is disabled.

func (InputsUdpOutput) ElementType

func (InputsUdpOutput) ElementType() reflect.Type

func (InputsUdpOutput) Host added in v1.1.5

The value to populate in the host field for incoming events. This is used during parsing/indexing, in particular to set the host field. It is also the host field used at search time.

func (InputsUdpOutput) Index added in v1.1.5

Which index events from this input should be stored in. Defaults to default.

func (InputsUdpOutput) Name added in v1.1.5

The UDP port that this input should listen on.

func (InputsUdpOutput) NoAppendingTimestamp added in v1.1.5

func (o InputsUdpOutput) NoAppendingTimestamp() pulumi.BoolOutput

If set to true, prevents Splunk software from prepending a timestamp and hostname to incoming events.

func (InputsUdpOutput) NoPriorityStripping added in v1.1.5

func (o InputsUdpOutput) NoPriorityStripping() pulumi.BoolOutput

If set to true, Splunk software does not remove the priority field from incoming syslog events.

func (InputsUdpOutput) Queue added in v1.1.5

Which queue events from this input should be sent to. Generally this does not need to be changed.

func (InputsUdpOutput) RestrictToHost added in v1.1.5

func (o InputsUdpOutput) RestrictToHost() pulumi.StringOutput

Restrict incoming connections on this port to the host specified here. If this is not set, the value specified in [udp://<remote server>:<port>] in inputs.conf is used.

func (InputsUdpOutput) Source added in v1.1.5

func (o InputsUdpOutput) Source() pulumi.StringOutput

The value to populate in the source field for incoming events. The same source should not be used for multiple data inputs.

func (InputsUdpOutput) Sourcetype added in v1.1.5

func (o InputsUdpOutput) Sourcetype() pulumi.StringOutput

The value to populate in the sourcetype field for incoming events.

func (InputsUdpOutput) ToInputsUdpOutput

func (o InputsUdpOutput) ToInputsUdpOutput() InputsUdpOutput

func (InputsUdpOutput) ToInputsUdpOutputWithContext

func (o InputsUdpOutput) ToInputsUdpOutputWithContext(ctx context.Context) InputsUdpOutput

type InputsUdpState

type InputsUdpState struct {
	// The app/user context that is the namespace for the resource
	Acl InputsUdpAclPtrInput
	// Valid values: (ip | dns | none)
	// Set the host for the remote server that is sending data.
	// ip sets the host to the IP address of the remote server sending data.
	// dns sets the host to the reverse DNS entry for the IP address of the remote server sending data.
	// none leaves the host as specified in inputs.conf, which is typically the Splunk system hostname.
	// Default value is dns.
	ConnectionHost pulumi.StringPtrInput
	// Indicates if input is disabled.
	Disabled pulumi.BoolPtrInput
	// The value to populate in the host field for incoming events. This is used during parsing/indexing, in particular to set the host field. It is also the host field used at search time.
	Host pulumi.StringPtrInput
	// Which index events from this input should be stored in. Defaults to default.
	Index pulumi.StringPtrInput
	// The UDP port that this input should listen on.
	Name pulumi.StringPtrInput
	// If set to true, prevents Splunk software from prepending a timestamp and hostname to incoming events.
	NoAppendingTimestamp pulumi.BoolPtrInput
	// If set to true, Splunk software does not remove the priority field from incoming syslog events.
	NoPriorityStripping pulumi.BoolPtrInput
	// Which queue events from this input should be sent to. Generally this does not need to be changed.
	Queue pulumi.StringPtrInput
	// Restrict incoming connections on this port to the host specified here.
	// If this is not set, the value specified in [udp://<remote server>:<port>] in inputs.conf is used.
	RestrictToHost pulumi.StringPtrInput
	// The value to populate in the source field for incoming events. The same source should not be used for multiple data inputs.
	Source pulumi.StringPtrInput
	// The value to populate in the sourcetype field for incoming events.
	Sourcetype pulumi.StringPtrInput
}

func (InputsUdpState) ElementType

func (InputsUdpState) ElementType() reflect.Type

type OutputsTcpDefault

type OutputsTcpDefault struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl OutputsTcpDefaultAclOutput `pulumi:"acl"`
	// Comma-separated list of one or more target group names, specified later in [tcpout:<target_group>] stanzas of outputs.conf.spec file.
	// The forwarder sends all data to the specified groups. If you do not want to forward data automatically, do not set this attribute. Can be overridden by an inputs.conf _TCP_ROUTING setting, which in turn can be overridden by a props.conf/transforms.conf modifier.
	DefaultGroup pulumi.StringOutput `pulumi:"defaultGroup"`
	// Disables default tcpout settings
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events).
	// <br>CAUTION: Do not set this value to a positive integer if you are monitoring files.
	// Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group.
	// Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
	DropEventsOnQueueFull pulumi.IntOutput `pulumi:"dropEventsOnQueueFull"`
	// How often (in seconds) to send a heartbeat packet to the receiving server.
	// Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
	HeartbeatFrequency pulumi.IntOutput `pulumi:"heartbeatFrequency"`
	// Specifies whether to index all data locally, in addition to forwarding it. Defaults to false.
	// This is known as an "index-and-forward" configuration. This attribute is only available for heavy forwarders. It is available only at the top level [tcpout] stanza in outputs.conf. It cannot be overridden in a target group.
	IndexAndForward pulumi.BoolOutput `pulumi:"indexAndForward"`
	// Specify an integer or integer[KB|MB|GB].
	// <br>Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true).
	// Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer.
	// For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting.
	// If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks.
	// If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
	MaxQueueSize pulumi.StringOutput `pulumi:"maxQueueSize"`
	// Configuration to be edited. The only valid value is "tcpout".
	Name pulumi.StringOutput `pulumi:"name"`
	// If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true.
	// Set to false if you are sending to a third-party system.
	SendCookedData pulumi.BoolOutput `pulumi:"sendCookedData"`
}

## # Resource: OutputsTcpDefault

Manage to global tcpout properties.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewOutputsTcpDefault(ctx, "tcpDefault", &splunk.OutputsTcpDefaultArgs{
			DefaultGroup:          pulumi.String("test-indexers"),
			Disabled:              pulumi.Bool(false),
			DropEventsOnQueueFull: pulumi.Int(60),
			IndexAndForward:       pulumi.Bool(true),
			MaxQueueSize:          pulumi.String("100KB"),
			SendCookedData:        pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetOutputsTcpDefault

func GetOutputsTcpDefault(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OutputsTcpDefaultState, opts ...pulumi.ResourceOption) (*OutputsTcpDefault, error)

GetOutputsTcpDefault gets an existing OutputsTcpDefault resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOutputsTcpDefault

func NewOutputsTcpDefault(ctx *pulumi.Context,
	name string, args *OutputsTcpDefaultArgs, opts ...pulumi.ResourceOption) (*OutputsTcpDefault, error)

NewOutputsTcpDefault registers a new resource with the given unique name, arguments, and options.

func (*OutputsTcpDefault) ElementType

func (*OutputsTcpDefault) ElementType() reflect.Type

func (*OutputsTcpDefault) ToOutputsTcpDefaultOutput

func (i *OutputsTcpDefault) ToOutputsTcpDefaultOutput() OutputsTcpDefaultOutput

func (*OutputsTcpDefault) ToOutputsTcpDefaultOutputWithContext

func (i *OutputsTcpDefault) ToOutputsTcpDefaultOutputWithContext(ctx context.Context) OutputsTcpDefaultOutput

type OutputsTcpDefaultAcl

type OutputsTcpDefaultAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type OutputsTcpDefaultAclArgs

type OutputsTcpDefaultAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (OutputsTcpDefaultAclArgs) ElementType

func (OutputsTcpDefaultAclArgs) ElementType() reflect.Type

func (OutputsTcpDefaultAclArgs) ToOutputsTcpDefaultAclOutput

func (i OutputsTcpDefaultAclArgs) ToOutputsTcpDefaultAclOutput() OutputsTcpDefaultAclOutput

func (OutputsTcpDefaultAclArgs) ToOutputsTcpDefaultAclOutputWithContext

func (i OutputsTcpDefaultAclArgs) ToOutputsTcpDefaultAclOutputWithContext(ctx context.Context) OutputsTcpDefaultAclOutput

func (OutputsTcpDefaultAclArgs) ToOutputsTcpDefaultAclPtrOutput

func (i OutputsTcpDefaultAclArgs) ToOutputsTcpDefaultAclPtrOutput() OutputsTcpDefaultAclPtrOutput

func (OutputsTcpDefaultAclArgs) ToOutputsTcpDefaultAclPtrOutputWithContext

func (i OutputsTcpDefaultAclArgs) ToOutputsTcpDefaultAclPtrOutputWithContext(ctx context.Context) OutputsTcpDefaultAclPtrOutput

type OutputsTcpDefaultAclInput

type OutputsTcpDefaultAclInput interface {
	pulumi.Input

	ToOutputsTcpDefaultAclOutput() OutputsTcpDefaultAclOutput
	ToOutputsTcpDefaultAclOutputWithContext(context.Context) OutputsTcpDefaultAclOutput
}

OutputsTcpDefaultAclInput is an input type that accepts OutputsTcpDefaultAclArgs and OutputsTcpDefaultAclOutput values. You can construct a concrete instance of `OutputsTcpDefaultAclInput` via:

OutputsTcpDefaultAclArgs{...}

type OutputsTcpDefaultAclOutput

type OutputsTcpDefaultAclOutput struct{ *pulumi.OutputState }

func (OutputsTcpDefaultAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (OutputsTcpDefaultAclOutput) CanChangePerms

func (o OutputsTcpDefaultAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (OutputsTcpDefaultAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (OutputsTcpDefaultAclOutput) CanShareGlobal

func (o OutputsTcpDefaultAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (OutputsTcpDefaultAclOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (OutputsTcpDefaultAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (OutputsTcpDefaultAclOutput) ElementType

func (OutputsTcpDefaultAclOutput) ElementType() reflect.Type

func (OutputsTcpDefaultAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (OutputsTcpDefaultAclOutput) Reads

Properties that indicate resource read permissions.

func (OutputsTcpDefaultAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (OutputsTcpDefaultAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (OutputsTcpDefaultAclOutput) ToOutputsTcpDefaultAclOutput

func (o OutputsTcpDefaultAclOutput) ToOutputsTcpDefaultAclOutput() OutputsTcpDefaultAclOutput

func (OutputsTcpDefaultAclOutput) ToOutputsTcpDefaultAclOutputWithContext

func (o OutputsTcpDefaultAclOutput) ToOutputsTcpDefaultAclOutputWithContext(ctx context.Context) OutputsTcpDefaultAclOutput

func (OutputsTcpDefaultAclOutput) ToOutputsTcpDefaultAclPtrOutput

func (o OutputsTcpDefaultAclOutput) ToOutputsTcpDefaultAclPtrOutput() OutputsTcpDefaultAclPtrOutput

func (OutputsTcpDefaultAclOutput) ToOutputsTcpDefaultAclPtrOutputWithContext

func (o OutputsTcpDefaultAclOutput) ToOutputsTcpDefaultAclPtrOutputWithContext(ctx context.Context) OutputsTcpDefaultAclPtrOutput

func (OutputsTcpDefaultAclOutput) Writes

Properties that indicate write permissions of the resource.

type OutputsTcpDefaultAclPtrInput

type OutputsTcpDefaultAclPtrInput interface {
	pulumi.Input

	ToOutputsTcpDefaultAclPtrOutput() OutputsTcpDefaultAclPtrOutput
	ToOutputsTcpDefaultAclPtrOutputWithContext(context.Context) OutputsTcpDefaultAclPtrOutput
}

OutputsTcpDefaultAclPtrInput is an input type that accepts OutputsTcpDefaultAclArgs, OutputsTcpDefaultAclPtr and OutputsTcpDefaultAclPtrOutput values. You can construct a concrete instance of `OutputsTcpDefaultAclPtrInput` via:

        OutputsTcpDefaultAclArgs{...}

or:

        nil

type OutputsTcpDefaultAclPtrOutput

type OutputsTcpDefaultAclPtrOutput struct{ *pulumi.OutputState }

func (OutputsTcpDefaultAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (OutputsTcpDefaultAclPtrOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (OutputsTcpDefaultAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (OutputsTcpDefaultAclPtrOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (OutputsTcpDefaultAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (OutputsTcpDefaultAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (OutputsTcpDefaultAclPtrOutput) Elem

func (OutputsTcpDefaultAclPtrOutput) ElementType

func (OutputsTcpDefaultAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (OutputsTcpDefaultAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (OutputsTcpDefaultAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (OutputsTcpDefaultAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (OutputsTcpDefaultAclPtrOutput) ToOutputsTcpDefaultAclPtrOutput

func (o OutputsTcpDefaultAclPtrOutput) ToOutputsTcpDefaultAclPtrOutput() OutputsTcpDefaultAclPtrOutput

func (OutputsTcpDefaultAclPtrOutput) ToOutputsTcpDefaultAclPtrOutputWithContext

func (o OutputsTcpDefaultAclPtrOutput) ToOutputsTcpDefaultAclPtrOutputWithContext(ctx context.Context) OutputsTcpDefaultAclPtrOutput

func (OutputsTcpDefaultAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type OutputsTcpDefaultArgs

type OutputsTcpDefaultArgs struct {
	// The app/user context that is the namespace for the resource
	Acl OutputsTcpDefaultAclPtrInput
	// Comma-separated list of one or more target group names, specified later in [tcpout:<target_group>] stanzas of outputs.conf.spec file.
	// The forwarder sends all data to the specified groups. If you do not want to forward data automatically, do not set this attribute. Can be overridden by an inputs.conf _TCP_ROUTING setting, which in turn can be overridden by a props.conf/transforms.conf modifier.
	DefaultGroup pulumi.StringPtrInput
	// Disables default tcpout settings
	Disabled pulumi.BoolPtrInput
	// If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events).
	// <br>CAUTION: Do not set this value to a positive integer if you are monitoring files.
	// Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group.
	// Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
	DropEventsOnQueueFull pulumi.IntPtrInput
	// How often (in seconds) to send a heartbeat packet to the receiving server.
	// Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
	HeartbeatFrequency pulumi.IntPtrInput
	// Specifies whether to index all data locally, in addition to forwarding it. Defaults to false.
	// This is known as an "index-and-forward" configuration. This attribute is only available for heavy forwarders. It is available only at the top level [tcpout] stanza in outputs.conf. It cannot be overridden in a target group.
	IndexAndForward pulumi.BoolPtrInput
	// Specify an integer or integer[KB|MB|GB].
	// <br>Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true).
	// Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer.
	// For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting.
	// If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks.
	// If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
	MaxQueueSize pulumi.StringPtrInput
	// Configuration to be edited. The only valid value is "tcpout".
	Name pulumi.StringPtrInput
	// If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true.
	// Set to false if you are sending to a third-party system.
	SendCookedData pulumi.BoolPtrInput
}

The set of arguments for constructing a OutputsTcpDefault resource.

func (OutputsTcpDefaultArgs) ElementType

func (OutputsTcpDefaultArgs) ElementType() reflect.Type

type OutputsTcpDefaultArray added in v0.2.1

type OutputsTcpDefaultArray []OutputsTcpDefaultInput

func (OutputsTcpDefaultArray) ElementType added in v0.2.1

func (OutputsTcpDefaultArray) ElementType() reflect.Type

func (OutputsTcpDefaultArray) ToOutputsTcpDefaultArrayOutput added in v0.2.1

func (i OutputsTcpDefaultArray) ToOutputsTcpDefaultArrayOutput() OutputsTcpDefaultArrayOutput

func (OutputsTcpDefaultArray) ToOutputsTcpDefaultArrayOutputWithContext added in v0.2.1

func (i OutputsTcpDefaultArray) ToOutputsTcpDefaultArrayOutputWithContext(ctx context.Context) OutputsTcpDefaultArrayOutput

type OutputsTcpDefaultArrayInput added in v0.2.1

type OutputsTcpDefaultArrayInput interface {
	pulumi.Input

	ToOutputsTcpDefaultArrayOutput() OutputsTcpDefaultArrayOutput
	ToOutputsTcpDefaultArrayOutputWithContext(context.Context) OutputsTcpDefaultArrayOutput
}

OutputsTcpDefaultArrayInput is an input type that accepts OutputsTcpDefaultArray and OutputsTcpDefaultArrayOutput values. You can construct a concrete instance of `OutputsTcpDefaultArrayInput` via:

OutputsTcpDefaultArray{ OutputsTcpDefaultArgs{...} }

type OutputsTcpDefaultArrayOutput added in v0.2.1

type OutputsTcpDefaultArrayOutput struct{ *pulumi.OutputState }

func (OutputsTcpDefaultArrayOutput) ElementType added in v0.2.1

func (OutputsTcpDefaultArrayOutput) Index added in v0.2.1

func (OutputsTcpDefaultArrayOutput) ToOutputsTcpDefaultArrayOutput added in v0.2.1

func (o OutputsTcpDefaultArrayOutput) ToOutputsTcpDefaultArrayOutput() OutputsTcpDefaultArrayOutput

func (OutputsTcpDefaultArrayOutput) ToOutputsTcpDefaultArrayOutputWithContext added in v0.2.1

func (o OutputsTcpDefaultArrayOutput) ToOutputsTcpDefaultArrayOutputWithContext(ctx context.Context) OutputsTcpDefaultArrayOutput

type OutputsTcpDefaultInput

type OutputsTcpDefaultInput interface {
	pulumi.Input

	ToOutputsTcpDefaultOutput() OutputsTcpDefaultOutput
	ToOutputsTcpDefaultOutputWithContext(ctx context.Context) OutputsTcpDefaultOutput
}

type OutputsTcpDefaultMap added in v0.2.1

type OutputsTcpDefaultMap map[string]OutputsTcpDefaultInput

func (OutputsTcpDefaultMap) ElementType added in v0.2.1

func (OutputsTcpDefaultMap) ElementType() reflect.Type

func (OutputsTcpDefaultMap) ToOutputsTcpDefaultMapOutput added in v0.2.1

func (i OutputsTcpDefaultMap) ToOutputsTcpDefaultMapOutput() OutputsTcpDefaultMapOutput

func (OutputsTcpDefaultMap) ToOutputsTcpDefaultMapOutputWithContext added in v0.2.1

func (i OutputsTcpDefaultMap) ToOutputsTcpDefaultMapOutputWithContext(ctx context.Context) OutputsTcpDefaultMapOutput

type OutputsTcpDefaultMapInput added in v0.2.1

type OutputsTcpDefaultMapInput interface {
	pulumi.Input

	ToOutputsTcpDefaultMapOutput() OutputsTcpDefaultMapOutput
	ToOutputsTcpDefaultMapOutputWithContext(context.Context) OutputsTcpDefaultMapOutput
}

OutputsTcpDefaultMapInput is an input type that accepts OutputsTcpDefaultMap and OutputsTcpDefaultMapOutput values. You can construct a concrete instance of `OutputsTcpDefaultMapInput` via:

OutputsTcpDefaultMap{ "key": OutputsTcpDefaultArgs{...} }

type OutputsTcpDefaultMapOutput added in v0.2.1

type OutputsTcpDefaultMapOutput struct{ *pulumi.OutputState }

func (OutputsTcpDefaultMapOutput) ElementType added in v0.2.1

func (OutputsTcpDefaultMapOutput) ElementType() reflect.Type

func (OutputsTcpDefaultMapOutput) MapIndex added in v0.2.1

func (OutputsTcpDefaultMapOutput) ToOutputsTcpDefaultMapOutput added in v0.2.1

func (o OutputsTcpDefaultMapOutput) ToOutputsTcpDefaultMapOutput() OutputsTcpDefaultMapOutput

func (OutputsTcpDefaultMapOutput) ToOutputsTcpDefaultMapOutputWithContext added in v0.2.1

func (o OutputsTcpDefaultMapOutput) ToOutputsTcpDefaultMapOutputWithContext(ctx context.Context) OutputsTcpDefaultMapOutput

type OutputsTcpDefaultOutput

type OutputsTcpDefaultOutput struct{ *pulumi.OutputState }

func (OutputsTcpDefaultOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (OutputsTcpDefaultOutput) DefaultGroup added in v1.1.5

func (o OutputsTcpDefaultOutput) DefaultGroup() pulumi.StringOutput

Comma-separated list of one or more target group names, specified later in [tcpout:<target_group>] stanzas of outputs.conf.spec file. The forwarder sends all data to the specified groups. If you do not want to forward data automatically, do not set this attribute. Can be overridden by an inputs.conf _TCP_ROUTING setting, which in turn can be overridden by a props.conf/transforms.conf modifier.

func (OutputsTcpDefaultOutput) Disabled added in v1.1.5

Disables default tcpout settings

func (OutputsTcpDefaultOutput) DropEventsOnQueueFull added in v1.1.5

func (o OutputsTcpDefaultOutput) DropEventsOnQueueFull() pulumi.IntOutput

If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). <br>CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.

func (OutputsTcpDefaultOutput) ElementType

func (OutputsTcpDefaultOutput) ElementType() reflect.Type

func (OutputsTcpDefaultOutput) HeartbeatFrequency added in v1.1.5

func (o OutputsTcpDefaultOutput) HeartbeatFrequency() pulumi.IntOutput

How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.

func (OutputsTcpDefaultOutput) IndexAndForward added in v1.1.5

func (o OutputsTcpDefaultOutput) IndexAndForward() pulumi.BoolOutput

Specifies whether to index all data locally, in addition to forwarding it. Defaults to false. This is known as an "index-and-forward" configuration. This attribute is only available for heavy forwarders. It is available only at the top level [tcpout] stanza in outputs.conf. It cannot be overridden in a target group.

func (OutputsTcpDefaultOutput) MaxQueueSize added in v1.1.5

func (o OutputsTcpDefaultOutput) MaxQueueSize() pulumi.StringOutput

Specify an integer or integer[KB|MB|GB]. <br>Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).

func (OutputsTcpDefaultOutput) Name added in v1.1.5

Configuration to be edited. The only valid value is "tcpout".

func (OutputsTcpDefaultOutput) SendCookedData added in v1.1.5

func (o OutputsTcpDefaultOutput) SendCookedData() pulumi.BoolOutput

If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.

func (OutputsTcpDefaultOutput) ToOutputsTcpDefaultOutput

func (o OutputsTcpDefaultOutput) ToOutputsTcpDefaultOutput() OutputsTcpDefaultOutput

func (OutputsTcpDefaultOutput) ToOutputsTcpDefaultOutputWithContext

func (o OutputsTcpDefaultOutput) ToOutputsTcpDefaultOutputWithContext(ctx context.Context) OutputsTcpDefaultOutput

type OutputsTcpDefaultState

type OutputsTcpDefaultState struct {
	// The app/user context that is the namespace for the resource
	Acl OutputsTcpDefaultAclPtrInput
	// Comma-separated list of one or more target group names, specified later in [tcpout:<target_group>] stanzas of outputs.conf.spec file.
	// The forwarder sends all data to the specified groups. If you do not want to forward data automatically, do not set this attribute. Can be overridden by an inputs.conf _TCP_ROUTING setting, which in turn can be overridden by a props.conf/transforms.conf modifier.
	DefaultGroup pulumi.StringPtrInput
	// Disables default tcpout settings
	Disabled pulumi.BoolPtrInput
	// If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events).
	// <br>CAUTION: Do not set this value to a positive integer if you are monitoring files.
	// Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group.
	// Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
	DropEventsOnQueueFull pulumi.IntPtrInput
	// How often (in seconds) to send a heartbeat packet to the receiving server.
	// Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
	HeartbeatFrequency pulumi.IntPtrInput
	// Specifies whether to index all data locally, in addition to forwarding it. Defaults to false.
	// This is known as an "index-and-forward" configuration. This attribute is only available for heavy forwarders. It is available only at the top level [tcpout] stanza in outputs.conf. It cannot be overridden in a target group.
	IndexAndForward pulumi.BoolPtrInput
	// Specify an integer or integer[KB|MB|GB].
	// <br>Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true).
	// Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer.
	// For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting.
	// If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks.
	// If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
	MaxQueueSize pulumi.StringPtrInput
	// Configuration to be edited. The only valid value is "tcpout".
	Name pulumi.StringPtrInput
	// If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true.
	// Set to false if you are sending to a third-party system.
	SendCookedData pulumi.BoolPtrInput
}

func (OutputsTcpDefaultState) ElementType

func (OutputsTcpDefaultState) ElementType() reflect.Type

type OutputsTcpGroup

type OutputsTcpGroup struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl OutputsTcpGroupAclOutput `pulumi:"acl"`
	// If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
	Compressed pulumi.BoolOutput `pulumi:"compressed"`
	// If true, disables the group.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events).
	// <br>CAUTION: Do not set this value to a positive integer if you are monitoring files.
	// Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group.
	// Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
	DropEventsOnQueueFull pulumi.IntOutput `pulumi:"dropEventsOnQueueFull"`
	// How often (in seconds) to send a heartbeat packet to the receiving server.
	// Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
	HeartbeatFrequency pulumi.IntOutput `pulumi:"heartbeatFrequency"`
	// Specify an integer or integer[KB|MB|GB].
	// <br>Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true).
	// Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer.
	// For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting.
	// If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks.
	// If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
	MaxQueueSize pulumi.StringOutput `pulumi:"maxQueueSize"`
	// Valid values: (tcpout | syslog). Specifies the type of output processor.
	Method pulumi.StringOutput `pulumi:"method"`
	// The name of the group of receivers.
	Name pulumi.StringOutput `pulumi:"name"`
	// If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true.
	// Set to false if you are sending to a third-party system.
	SendCookedData pulumi.BoolOutput `pulumi:"sendCookedData"`
	// Comma-separated list of servers to include in the group.
	Servers pulumi.StringArrayOutput `pulumi:"servers"`
	// Token value generated by the indexer after configuration.
	Token pulumi.StringOutput `pulumi:"token"`
}

## # Resource: OutputsTcpGroup

Access to the configuration of a group of one or more data forwarding destinations.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewOutputsTcpGroup(ctx, "tcpGroup", &splunk.OutputsTcpGroupArgs{
			Disabled:              pulumi.Bool(false),
			DropEventsOnQueueFull: pulumi.Int(60),
			MaxQueueSize:          pulumi.String("100KB"),
			SendCookedData:        pulumi.Bool(true),
			Servers: pulumi.StringArray{
				pulumi.String("1.1.1.1:1234"),
				pulumi.String("2.2.2.2:1234"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetOutputsTcpGroup

func GetOutputsTcpGroup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OutputsTcpGroupState, opts ...pulumi.ResourceOption) (*OutputsTcpGroup, error)

GetOutputsTcpGroup gets an existing OutputsTcpGroup resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOutputsTcpGroup

func NewOutputsTcpGroup(ctx *pulumi.Context,
	name string, args *OutputsTcpGroupArgs, opts ...pulumi.ResourceOption) (*OutputsTcpGroup, error)

NewOutputsTcpGroup registers a new resource with the given unique name, arguments, and options.

func (*OutputsTcpGroup) ElementType

func (*OutputsTcpGroup) ElementType() reflect.Type

func (*OutputsTcpGroup) ToOutputsTcpGroupOutput

func (i *OutputsTcpGroup) ToOutputsTcpGroupOutput() OutputsTcpGroupOutput

func (*OutputsTcpGroup) ToOutputsTcpGroupOutputWithContext

func (i *OutputsTcpGroup) ToOutputsTcpGroupOutputWithContext(ctx context.Context) OutputsTcpGroupOutput

type OutputsTcpGroupAcl

type OutputsTcpGroupAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type OutputsTcpGroupAclArgs

type OutputsTcpGroupAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (OutputsTcpGroupAclArgs) ElementType

func (OutputsTcpGroupAclArgs) ElementType() reflect.Type

func (OutputsTcpGroupAclArgs) ToOutputsTcpGroupAclOutput

func (i OutputsTcpGroupAclArgs) ToOutputsTcpGroupAclOutput() OutputsTcpGroupAclOutput

func (OutputsTcpGroupAclArgs) ToOutputsTcpGroupAclOutputWithContext

func (i OutputsTcpGroupAclArgs) ToOutputsTcpGroupAclOutputWithContext(ctx context.Context) OutputsTcpGroupAclOutput

func (OutputsTcpGroupAclArgs) ToOutputsTcpGroupAclPtrOutput

func (i OutputsTcpGroupAclArgs) ToOutputsTcpGroupAclPtrOutput() OutputsTcpGroupAclPtrOutput

func (OutputsTcpGroupAclArgs) ToOutputsTcpGroupAclPtrOutputWithContext

func (i OutputsTcpGroupAclArgs) ToOutputsTcpGroupAclPtrOutputWithContext(ctx context.Context) OutputsTcpGroupAclPtrOutput

type OutputsTcpGroupAclInput

type OutputsTcpGroupAclInput interface {
	pulumi.Input

	ToOutputsTcpGroupAclOutput() OutputsTcpGroupAclOutput
	ToOutputsTcpGroupAclOutputWithContext(context.Context) OutputsTcpGroupAclOutput
}

OutputsTcpGroupAclInput is an input type that accepts OutputsTcpGroupAclArgs and OutputsTcpGroupAclOutput values. You can construct a concrete instance of `OutputsTcpGroupAclInput` via:

OutputsTcpGroupAclArgs{...}

type OutputsTcpGroupAclOutput

type OutputsTcpGroupAclOutput struct{ *pulumi.OutputState }

func (OutputsTcpGroupAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (OutputsTcpGroupAclOutput) CanChangePerms

func (o OutputsTcpGroupAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (OutputsTcpGroupAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (OutputsTcpGroupAclOutput) CanShareGlobal

func (o OutputsTcpGroupAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (OutputsTcpGroupAclOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (OutputsTcpGroupAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (OutputsTcpGroupAclOutput) ElementType

func (OutputsTcpGroupAclOutput) ElementType() reflect.Type

func (OutputsTcpGroupAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (OutputsTcpGroupAclOutput) Reads

Properties that indicate resource read permissions.

func (OutputsTcpGroupAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (OutputsTcpGroupAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (OutputsTcpGroupAclOutput) ToOutputsTcpGroupAclOutput

func (o OutputsTcpGroupAclOutput) ToOutputsTcpGroupAclOutput() OutputsTcpGroupAclOutput

func (OutputsTcpGroupAclOutput) ToOutputsTcpGroupAclOutputWithContext

func (o OutputsTcpGroupAclOutput) ToOutputsTcpGroupAclOutputWithContext(ctx context.Context) OutputsTcpGroupAclOutput

func (OutputsTcpGroupAclOutput) ToOutputsTcpGroupAclPtrOutput

func (o OutputsTcpGroupAclOutput) ToOutputsTcpGroupAclPtrOutput() OutputsTcpGroupAclPtrOutput

func (OutputsTcpGroupAclOutput) ToOutputsTcpGroupAclPtrOutputWithContext

func (o OutputsTcpGroupAclOutput) ToOutputsTcpGroupAclPtrOutputWithContext(ctx context.Context) OutputsTcpGroupAclPtrOutput

func (OutputsTcpGroupAclOutput) Writes

Properties that indicate write permissions of the resource.

type OutputsTcpGroupAclPtrInput

type OutputsTcpGroupAclPtrInput interface {
	pulumi.Input

	ToOutputsTcpGroupAclPtrOutput() OutputsTcpGroupAclPtrOutput
	ToOutputsTcpGroupAclPtrOutputWithContext(context.Context) OutputsTcpGroupAclPtrOutput
}

OutputsTcpGroupAclPtrInput is an input type that accepts OutputsTcpGroupAclArgs, OutputsTcpGroupAclPtr and OutputsTcpGroupAclPtrOutput values. You can construct a concrete instance of `OutputsTcpGroupAclPtrInput` via:

        OutputsTcpGroupAclArgs{...}

or:

        nil

type OutputsTcpGroupAclPtrOutput

type OutputsTcpGroupAclPtrOutput struct{ *pulumi.OutputState }

func (OutputsTcpGroupAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (OutputsTcpGroupAclPtrOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (OutputsTcpGroupAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (OutputsTcpGroupAclPtrOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (OutputsTcpGroupAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (OutputsTcpGroupAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (OutputsTcpGroupAclPtrOutput) Elem

func (OutputsTcpGroupAclPtrOutput) ElementType

func (OutputsTcpGroupAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (OutputsTcpGroupAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (OutputsTcpGroupAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (OutputsTcpGroupAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (OutputsTcpGroupAclPtrOutput) ToOutputsTcpGroupAclPtrOutput

func (o OutputsTcpGroupAclPtrOutput) ToOutputsTcpGroupAclPtrOutput() OutputsTcpGroupAclPtrOutput

func (OutputsTcpGroupAclPtrOutput) ToOutputsTcpGroupAclPtrOutputWithContext

func (o OutputsTcpGroupAclPtrOutput) ToOutputsTcpGroupAclPtrOutputWithContext(ctx context.Context) OutputsTcpGroupAclPtrOutput

func (OutputsTcpGroupAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type OutputsTcpGroupArgs

type OutputsTcpGroupArgs struct {
	// The app/user context that is the namespace for the resource
	Acl OutputsTcpGroupAclPtrInput
	// If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
	Compressed pulumi.BoolPtrInput
	// If true, disables the group.
	Disabled pulumi.BoolPtrInput
	// If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events).
	// <br>CAUTION: Do not set this value to a positive integer if you are monitoring files.
	// Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group.
	// Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
	DropEventsOnQueueFull pulumi.IntPtrInput
	// How often (in seconds) to send a heartbeat packet to the receiving server.
	// Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
	HeartbeatFrequency pulumi.IntPtrInput
	// Specify an integer or integer[KB|MB|GB].
	// <br>Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true).
	// Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer.
	// For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting.
	// If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks.
	// If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
	MaxQueueSize pulumi.StringPtrInput
	// Valid values: (tcpout | syslog). Specifies the type of output processor.
	Method pulumi.StringPtrInput
	// The name of the group of receivers.
	Name pulumi.StringPtrInput
	// If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true.
	// Set to false if you are sending to a third-party system.
	SendCookedData pulumi.BoolPtrInput
	// Comma-separated list of servers to include in the group.
	Servers pulumi.StringArrayInput
	// Token value generated by the indexer after configuration.
	Token pulumi.StringPtrInput
}

The set of arguments for constructing a OutputsTcpGroup resource.

func (OutputsTcpGroupArgs) ElementType

func (OutputsTcpGroupArgs) ElementType() reflect.Type

type OutputsTcpGroupArray added in v0.2.1

type OutputsTcpGroupArray []OutputsTcpGroupInput

func (OutputsTcpGroupArray) ElementType added in v0.2.1

func (OutputsTcpGroupArray) ElementType() reflect.Type

func (OutputsTcpGroupArray) ToOutputsTcpGroupArrayOutput added in v0.2.1

func (i OutputsTcpGroupArray) ToOutputsTcpGroupArrayOutput() OutputsTcpGroupArrayOutput

func (OutputsTcpGroupArray) ToOutputsTcpGroupArrayOutputWithContext added in v0.2.1

func (i OutputsTcpGroupArray) ToOutputsTcpGroupArrayOutputWithContext(ctx context.Context) OutputsTcpGroupArrayOutput

type OutputsTcpGroupArrayInput added in v0.2.1

type OutputsTcpGroupArrayInput interface {
	pulumi.Input

	ToOutputsTcpGroupArrayOutput() OutputsTcpGroupArrayOutput
	ToOutputsTcpGroupArrayOutputWithContext(context.Context) OutputsTcpGroupArrayOutput
}

OutputsTcpGroupArrayInput is an input type that accepts OutputsTcpGroupArray and OutputsTcpGroupArrayOutput values. You can construct a concrete instance of `OutputsTcpGroupArrayInput` via:

OutputsTcpGroupArray{ OutputsTcpGroupArgs{...} }

type OutputsTcpGroupArrayOutput added in v0.2.1

type OutputsTcpGroupArrayOutput struct{ *pulumi.OutputState }

func (OutputsTcpGroupArrayOutput) ElementType added in v0.2.1

func (OutputsTcpGroupArrayOutput) ElementType() reflect.Type

func (OutputsTcpGroupArrayOutput) Index added in v0.2.1

func (OutputsTcpGroupArrayOutput) ToOutputsTcpGroupArrayOutput added in v0.2.1

func (o OutputsTcpGroupArrayOutput) ToOutputsTcpGroupArrayOutput() OutputsTcpGroupArrayOutput

func (OutputsTcpGroupArrayOutput) ToOutputsTcpGroupArrayOutputWithContext added in v0.2.1

func (o OutputsTcpGroupArrayOutput) ToOutputsTcpGroupArrayOutputWithContext(ctx context.Context) OutputsTcpGroupArrayOutput

type OutputsTcpGroupInput

type OutputsTcpGroupInput interface {
	pulumi.Input

	ToOutputsTcpGroupOutput() OutputsTcpGroupOutput
	ToOutputsTcpGroupOutputWithContext(ctx context.Context) OutputsTcpGroupOutput
}

type OutputsTcpGroupMap added in v0.2.1

type OutputsTcpGroupMap map[string]OutputsTcpGroupInput

func (OutputsTcpGroupMap) ElementType added in v0.2.1

func (OutputsTcpGroupMap) ElementType() reflect.Type

func (OutputsTcpGroupMap) ToOutputsTcpGroupMapOutput added in v0.2.1

func (i OutputsTcpGroupMap) ToOutputsTcpGroupMapOutput() OutputsTcpGroupMapOutput

func (OutputsTcpGroupMap) ToOutputsTcpGroupMapOutputWithContext added in v0.2.1

func (i OutputsTcpGroupMap) ToOutputsTcpGroupMapOutputWithContext(ctx context.Context) OutputsTcpGroupMapOutput

type OutputsTcpGroupMapInput added in v0.2.1

type OutputsTcpGroupMapInput interface {
	pulumi.Input

	ToOutputsTcpGroupMapOutput() OutputsTcpGroupMapOutput
	ToOutputsTcpGroupMapOutputWithContext(context.Context) OutputsTcpGroupMapOutput
}

OutputsTcpGroupMapInput is an input type that accepts OutputsTcpGroupMap and OutputsTcpGroupMapOutput values. You can construct a concrete instance of `OutputsTcpGroupMapInput` via:

OutputsTcpGroupMap{ "key": OutputsTcpGroupArgs{...} }

type OutputsTcpGroupMapOutput added in v0.2.1

type OutputsTcpGroupMapOutput struct{ *pulumi.OutputState }

func (OutputsTcpGroupMapOutput) ElementType added in v0.2.1

func (OutputsTcpGroupMapOutput) ElementType() reflect.Type

func (OutputsTcpGroupMapOutput) MapIndex added in v0.2.1

func (OutputsTcpGroupMapOutput) ToOutputsTcpGroupMapOutput added in v0.2.1

func (o OutputsTcpGroupMapOutput) ToOutputsTcpGroupMapOutput() OutputsTcpGroupMapOutput

func (OutputsTcpGroupMapOutput) ToOutputsTcpGroupMapOutputWithContext added in v0.2.1

func (o OutputsTcpGroupMapOutput) ToOutputsTcpGroupMapOutputWithContext(ctx context.Context) OutputsTcpGroupMapOutput

type OutputsTcpGroupOutput

type OutputsTcpGroupOutput struct{ *pulumi.OutputState }

func (OutputsTcpGroupOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (OutputsTcpGroupOutput) Compressed added in v1.1.5

func (o OutputsTcpGroupOutput) Compressed() pulumi.BoolOutput

If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.

func (OutputsTcpGroupOutput) Disabled added in v1.1.5

If true, disables the group.

func (OutputsTcpGroupOutput) DropEventsOnQueueFull added in v1.1.5

func (o OutputsTcpGroupOutput) DropEventsOnQueueFull() pulumi.IntOutput

If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). <br>CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.

func (OutputsTcpGroupOutput) ElementType

func (OutputsTcpGroupOutput) ElementType() reflect.Type

func (OutputsTcpGroupOutput) HeartbeatFrequency added in v1.1.5

func (o OutputsTcpGroupOutput) HeartbeatFrequency() pulumi.IntOutput

How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.

func (OutputsTcpGroupOutput) MaxQueueSize added in v1.1.5

func (o OutputsTcpGroupOutput) MaxQueueSize() pulumi.StringOutput

Specify an integer or integer[KB|MB|GB]. <br>Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).

func (OutputsTcpGroupOutput) Method added in v1.1.5

Valid values: (tcpout | syslog). Specifies the type of output processor.

func (OutputsTcpGroupOutput) Name added in v1.1.5

The name of the group of receivers.

func (OutputsTcpGroupOutput) SendCookedData added in v1.1.5

func (o OutputsTcpGroupOutput) SendCookedData() pulumi.BoolOutput

If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.

func (OutputsTcpGroupOutput) Servers added in v1.1.5

Comma-separated list of servers to include in the group.

func (OutputsTcpGroupOutput) ToOutputsTcpGroupOutput

func (o OutputsTcpGroupOutput) ToOutputsTcpGroupOutput() OutputsTcpGroupOutput

func (OutputsTcpGroupOutput) ToOutputsTcpGroupOutputWithContext

func (o OutputsTcpGroupOutput) ToOutputsTcpGroupOutputWithContext(ctx context.Context) OutputsTcpGroupOutput

func (OutputsTcpGroupOutput) Token added in v1.1.5

Token value generated by the indexer after configuration.

type OutputsTcpGroupState

type OutputsTcpGroupState struct {
	// The app/user context that is the namespace for the resource
	Acl OutputsTcpGroupAclPtrInput
	// If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
	Compressed pulumi.BoolPtrInput
	// If true, disables the group.
	Disabled pulumi.BoolPtrInput
	// If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events).
	// <br>CAUTION: Do not set this value to a positive integer if you are monitoring files.
	// Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group.
	// Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
	DropEventsOnQueueFull pulumi.IntPtrInput
	// How often (in seconds) to send a heartbeat packet to the receiving server.
	// Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
	HeartbeatFrequency pulumi.IntPtrInput
	// Specify an integer or integer[KB|MB|GB].
	// <br>Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true).
	// Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer.
	// For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting.
	// If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks.
	// If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
	MaxQueueSize pulumi.StringPtrInput
	// Valid values: (tcpout | syslog). Specifies the type of output processor.
	Method pulumi.StringPtrInput
	// The name of the group of receivers.
	Name pulumi.StringPtrInput
	// If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true.
	// Set to false if you are sending to a third-party system.
	SendCookedData pulumi.BoolPtrInput
	// Comma-separated list of servers to include in the group.
	Servers pulumi.StringArrayInput
	// Token value generated by the indexer after configuration.
	Token pulumi.StringPtrInput
}

func (OutputsTcpGroupState) ElementType

func (OutputsTcpGroupState) ElementType() reflect.Type

type OutputsTcpServer

type OutputsTcpServer struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl OutputsTcpServerAclOutput `pulumi:"acl"`
	// If true, disables the group.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// Valid values: (clone | balance | autobalance)
	// The data distribution method used when two or more servers exist in the same forwarder group.
	Method pulumi.StringOutput `pulumi:"method"`
	// <host>:<port> of the Splunk receiver. <host> can be either an ip address or server name. <port> is the that port that the Splunk receiver is listening on.
	Name pulumi.StringOutput `pulumi:"name"`
	// The alternate name to match in the remote server's SSL certificate.
	SslAltNameToCheck pulumi.StringOutput `pulumi:"sslAltNameToCheck"`
	// Path to the client certificate. If specified, connection uses SSL.
	SslCertPath pulumi.StringOutput `pulumi:"sslCertPath"`
	// SSL Cipher in the form ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
	SslCipher pulumi.StringOutput `pulumi:"sslCipher"`
	// Check the common name of the server's certificate against this name.
	// If there is no match, assume that Splunk Enterprise is not authenticated against this server. You must specify this setting if sslVerifyServerCert is true.
	SslCommonNameToCheck pulumi.StringOutput `pulumi:"sslCommonNameToCheck"`
	// The password associated with the CAcert.
	// The default Splunk Enterprise CAcert uses the password "password."
	SslPassword pulumi.StringOutput `pulumi:"sslPassword"`
	// The path to the root certificate authority file.
	SslRootCaPath pulumi.StringOutput `pulumi:"sslRootCaPath"`
	// If true, make sure that the server you are connecting to is a valid one (authenticated). Both the common name and the alternate name of the server are then checked for a match.
	SslVerifyServerCert pulumi.BoolOutput `pulumi:"sslVerifyServerCert"`
}

## # Resource: OutputsTcpServer

Access data forwarding configurations.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewOutputsTcpServer(ctx, "tcpServer", &splunk.OutputsTcpServerArgs{
			SslAltNameToCheck: pulumi.String("old-host"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetOutputsTcpServer

func GetOutputsTcpServer(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OutputsTcpServerState, opts ...pulumi.ResourceOption) (*OutputsTcpServer, error)

GetOutputsTcpServer gets an existing OutputsTcpServer resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOutputsTcpServer

func NewOutputsTcpServer(ctx *pulumi.Context,
	name string, args *OutputsTcpServerArgs, opts ...pulumi.ResourceOption) (*OutputsTcpServer, error)

NewOutputsTcpServer registers a new resource with the given unique name, arguments, and options.

func (*OutputsTcpServer) ElementType

func (*OutputsTcpServer) ElementType() reflect.Type

func (*OutputsTcpServer) ToOutputsTcpServerOutput

func (i *OutputsTcpServer) ToOutputsTcpServerOutput() OutputsTcpServerOutput

func (*OutputsTcpServer) ToOutputsTcpServerOutputWithContext

func (i *OutputsTcpServer) ToOutputsTcpServerOutputWithContext(ctx context.Context) OutputsTcpServerOutput

type OutputsTcpServerAcl

type OutputsTcpServerAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type OutputsTcpServerAclArgs

type OutputsTcpServerAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (OutputsTcpServerAclArgs) ElementType

func (OutputsTcpServerAclArgs) ElementType() reflect.Type

func (OutputsTcpServerAclArgs) ToOutputsTcpServerAclOutput

func (i OutputsTcpServerAclArgs) ToOutputsTcpServerAclOutput() OutputsTcpServerAclOutput

func (OutputsTcpServerAclArgs) ToOutputsTcpServerAclOutputWithContext

func (i OutputsTcpServerAclArgs) ToOutputsTcpServerAclOutputWithContext(ctx context.Context) OutputsTcpServerAclOutput

func (OutputsTcpServerAclArgs) ToOutputsTcpServerAclPtrOutput

func (i OutputsTcpServerAclArgs) ToOutputsTcpServerAclPtrOutput() OutputsTcpServerAclPtrOutput

func (OutputsTcpServerAclArgs) ToOutputsTcpServerAclPtrOutputWithContext

func (i OutputsTcpServerAclArgs) ToOutputsTcpServerAclPtrOutputWithContext(ctx context.Context) OutputsTcpServerAclPtrOutput

type OutputsTcpServerAclInput

type OutputsTcpServerAclInput interface {
	pulumi.Input

	ToOutputsTcpServerAclOutput() OutputsTcpServerAclOutput
	ToOutputsTcpServerAclOutputWithContext(context.Context) OutputsTcpServerAclOutput
}

OutputsTcpServerAclInput is an input type that accepts OutputsTcpServerAclArgs and OutputsTcpServerAclOutput values. You can construct a concrete instance of `OutputsTcpServerAclInput` via:

OutputsTcpServerAclArgs{...}

type OutputsTcpServerAclOutput

type OutputsTcpServerAclOutput struct{ *pulumi.OutputState }

func (OutputsTcpServerAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (OutputsTcpServerAclOutput) CanChangePerms

func (o OutputsTcpServerAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (OutputsTcpServerAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (OutputsTcpServerAclOutput) CanShareGlobal

func (o OutputsTcpServerAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (OutputsTcpServerAclOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (OutputsTcpServerAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (OutputsTcpServerAclOutput) ElementType

func (OutputsTcpServerAclOutput) ElementType() reflect.Type

func (OutputsTcpServerAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (OutputsTcpServerAclOutput) Reads

Properties that indicate resource read permissions.

func (OutputsTcpServerAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (OutputsTcpServerAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (OutputsTcpServerAclOutput) ToOutputsTcpServerAclOutput

func (o OutputsTcpServerAclOutput) ToOutputsTcpServerAclOutput() OutputsTcpServerAclOutput

func (OutputsTcpServerAclOutput) ToOutputsTcpServerAclOutputWithContext

func (o OutputsTcpServerAclOutput) ToOutputsTcpServerAclOutputWithContext(ctx context.Context) OutputsTcpServerAclOutput

func (OutputsTcpServerAclOutput) ToOutputsTcpServerAclPtrOutput

func (o OutputsTcpServerAclOutput) ToOutputsTcpServerAclPtrOutput() OutputsTcpServerAclPtrOutput

func (OutputsTcpServerAclOutput) ToOutputsTcpServerAclPtrOutputWithContext

func (o OutputsTcpServerAclOutput) ToOutputsTcpServerAclPtrOutputWithContext(ctx context.Context) OutputsTcpServerAclPtrOutput

func (OutputsTcpServerAclOutput) Writes

Properties that indicate write permissions of the resource.

type OutputsTcpServerAclPtrInput

type OutputsTcpServerAclPtrInput interface {
	pulumi.Input

	ToOutputsTcpServerAclPtrOutput() OutputsTcpServerAclPtrOutput
	ToOutputsTcpServerAclPtrOutputWithContext(context.Context) OutputsTcpServerAclPtrOutput
}

OutputsTcpServerAclPtrInput is an input type that accepts OutputsTcpServerAclArgs, OutputsTcpServerAclPtr and OutputsTcpServerAclPtrOutput values. You can construct a concrete instance of `OutputsTcpServerAclPtrInput` via:

        OutputsTcpServerAclArgs{...}

or:

        nil

type OutputsTcpServerAclPtrOutput

type OutputsTcpServerAclPtrOutput struct{ *pulumi.OutputState }

func (OutputsTcpServerAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (OutputsTcpServerAclPtrOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (OutputsTcpServerAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (OutputsTcpServerAclPtrOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (OutputsTcpServerAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (OutputsTcpServerAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (OutputsTcpServerAclPtrOutput) Elem

func (OutputsTcpServerAclPtrOutput) ElementType

func (OutputsTcpServerAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (OutputsTcpServerAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (OutputsTcpServerAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (OutputsTcpServerAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (OutputsTcpServerAclPtrOutput) ToOutputsTcpServerAclPtrOutput

func (o OutputsTcpServerAclPtrOutput) ToOutputsTcpServerAclPtrOutput() OutputsTcpServerAclPtrOutput

func (OutputsTcpServerAclPtrOutput) ToOutputsTcpServerAclPtrOutputWithContext

func (o OutputsTcpServerAclPtrOutput) ToOutputsTcpServerAclPtrOutputWithContext(ctx context.Context) OutputsTcpServerAclPtrOutput

func (OutputsTcpServerAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type OutputsTcpServerArgs

type OutputsTcpServerArgs struct {
	// The app/user context that is the namespace for the resource
	Acl OutputsTcpServerAclPtrInput
	// If true, disables the group.
	Disabled pulumi.BoolPtrInput
	// Valid values: (clone | balance | autobalance)
	// The data distribution method used when two or more servers exist in the same forwarder group.
	Method pulumi.StringPtrInput
	// <host>:<port> of the Splunk receiver. <host> can be either an ip address or server name. <port> is the that port that the Splunk receiver is listening on.
	Name pulumi.StringPtrInput
	// The alternate name to match in the remote server's SSL certificate.
	SslAltNameToCheck pulumi.StringPtrInput
	// Path to the client certificate. If specified, connection uses SSL.
	SslCertPath pulumi.StringPtrInput
	// SSL Cipher in the form ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
	SslCipher pulumi.StringPtrInput
	// Check the common name of the server's certificate against this name.
	// If there is no match, assume that Splunk Enterprise is not authenticated against this server. You must specify this setting if sslVerifyServerCert is true.
	SslCommonNameToCheck pulumi.StringPtrInput
	// The password associated with the CAcert.
	// The default Splunk Enterprise CAcert uses the password "password."
	SslPassword pulumi.StringPtrInput
	// The path to the root certificate authority file.
	SslRootCaPath pulumi.StringPtrInput
	// If true, make sure that the server you are connecting to is a valid one (authenticated). Both the common name and the alternate name of the server are then checked for a match.
	SslVerifyServerCert pulumi.BoolPtrInput
}

The set of arguments for constructing a OutputsTcpServer resource.

func (OutputsTcpServerArgs) ElementType

func (OutputsTcpServerArgs) ElementType() reflect.Type

type OutputsTcpServerArray added in v0.2.1

type OutputsTcpServerArray []OutputsTcpServerInput

func (OutputsTcpServerArray) ElementType added in v0.2.1

func (OutputsTcpServerArray) ElementType() reflect.Type

func (OutputsTcpServerArray) ToOutputsTcpServerArrayOutput added in v0.2.1

func (i OutputsTcpServerArray) ToOutputsTcpServerArrayOutput() OutputsTcpServerArrayOutput

func (OutputsTcpServerArray) ToOutputsTcpServerArrayOutputWithContext added in v0.2.1

func (i OutputsTcpServerArray) ToOutputsTcpServerArrayOutputWithContext(ctx context.Context) OutputsTcpServerArrayOutput

type OutputsTcpServerArrayInput added in v0.2.1

type OutputsTcpServerArrayInput interface {
	pulumi.Input

	ToOutputsTcpServerArrayOutput() OutputsTcpServerArrayOutput
	ToOutputsTcpServerArrayOutputWithContext(context.Context) OutputsTcpServerArrayOutput
}

OutputsTcpServerArrayInput is an input type that accepts OutputsTcpServerArray and OutputsTcpServerArrayOutput values. You can construct a concrete instance of `OutputsTcpServerArrayInput` via:

OutputsTcpServerArray{ OutputsTcpServerArgs{...} }

type OutputsTcpServerArrayOutput added in v0.2.1

type OutputsTcpServerArrayOutput struct{ *pulumi.OutputState }

func (OutputsTcpServerArrayOutput) ElementType added in v0.2.1

func (OutputsTcpServerArrayOutput) Index added in v0.2.1

func (OutputsTcpServerArrayOutput) ToOutputsTcpServerArrayOutput added in v0.2.1

func (o OutputsTcpServerArrayOutput) ToOutputsTcpServerArrayOutput() OutputsTcpServerArrayOutput

func (OutputsTcpServerArrayOutput) ToOutputsTcpServerArrayOutputWithContext added in v0.2.1

func (o OutputsTcpServerArrayOutput) ToOutputsTcpServerArrayOutputWithContext(ctx context.Context) OutputsTcpServerArrayOutput

type OutputsTcpServerInput

type OutputsTcpServerInput interface {
	pulumi.Input

	ToOutputsTcpServerOutput() OutputsTcpServerOutput
	ToOutputsTcpServerOutputWithContext(ctx context.Context) OutputsTcpServerOutput
}

type OutputsTcpServerMap added in v0.2.1

type OutputsTcpServerMap map[string]OutputsTcpServerInput

func (OutputsTcpServerMap) ElementType added in v0.2.1

func (OutputsTcpServerMap) ElementType() reflect.Type

func (OutputsTcpServerMap) ToOutputsTcpServerMapOutput added in v0.2.1

func (i OutputsTcpServerMap) ToOutputsTcpServerMapOutput() OutputsTcpServerMapOutput

func (OutputsTcpServerMap) ToOutputsTcpServerMapOutputWithContext added in v0.2.1

func (i OutputsTcpServerMap) ToOutputsTcpServerMapOutputWithContext(ctx context.Context) OutputsTcpServerMapOutput

type OutputsTcpServerMapInput added in v0.2.1

type OutputsTcpServerMapInput interface {
	pulumi.Input

	ToOutputsTcpServerMapOutput() OutputsTcpServerMapOutput
	ToOutputsTcpServerMapOutputWithContext(context.Context) OutputsTcpServerMapOutput
}

OutputsTcpServerMapInput is an input type that accepts OutputsTcpServerMap and OutputsTcpServerMapOutput values. You can construct a concrete instance of `OutputsTcpServerMapInput` via:

OutputsTcpServerMap{ "key": OutputsTcpServerArgs{...} }

type OutputsTcpServerMapOutput added in v0.2.1

type OutputsTcpServerMapOutput struct{ *pulumi.OutputState }

func (OutputsTcpServerMapOutput) ElementType added in v0.2.1

func (OutputsTcpServerMapOutput) ElementType() reflect.Type

func (OutputsTcpServerMapOutput) MapIndex added in v0.2.1

func (OutputsTcpServerMapOutput) ToOutputsTcpServerMapOutput added in v0.2.1

func (o OutputsTcpServerMapOutput) ToOutputsTcpServerMapOutput() OutputsTcpServerMapOutput

func (OutputsTcpServerMapOutput) ToOutputsTcpServerMapOutputWithContext added in v0.2.1

func (o OutputsTcpServerMapOutput) ToOutputsTcpServerMapOutputWithContext(ctx context.Context) OutputsTcpServerMapOutput

type OutputsTcpServerOutput

type OutputsTcpServerOutput struct{ *pulumi.OutputState }

func (OutputsTcpServerOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (OutputsTcpServerOutput) Disabled added in v1.1.5

If true, disables the group.

func (OutputsTcpServerOutput) ElementType

func (OutputsTcpServerOutput) ElementType() reflect.Type

func (OutputsTcpServerOutput) Method added in v1.1.5

Valid values: (clone | balance | autobalance) The data distribution method used when two or more servers exist in the same forwarder group.

func (OutputsTcpServerOutput) Name added in v1.1.5

<host>:<port> of the Splunk receiver. <host> can be either an ip address or server name. <port> is the that port that the Splunk receiver is listening on.

func (OutputsTcpServerOutput) SslAltNameToCheck added in v1.1.5

func (o OutputsTcpServerOutput) SslAltNameToCheck() pulumi.StringOutput

The alternate name to match in the remote server's SSL certificate.

func (OutputsTcpServerOutput) SslCertPath added in v1.1.5

func (o OutputsTcpServerOutput) SslCertPath() pulumi.StringOutput

Path to the client certificate. If specified, connection uses SSL.

func (OutputsTcpServerOutput) SslCipher added in v1.1.5

SSL Cipher in the form ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM

func (OutputsTcpServerOutput) SslCommonNameToCheck added in v1.1.5

func (o OutputsTcpServerOutput) SslCommonNameToCheck() pulumi.StringOutput

Check the common name of the server's certificate against this name. If there is no match, assume that Splunk Enterprise is not authenticated against this server. You must specify this setting if sslVerifyServerCert is true.

func (OutputsTcpServerOutput) SslPassword added in v1.1.5

func (o OutputsTcpServerOutput) SslPassword() pulumi.StringOutput

The password associated with the CAcert. The default Splunk Enterprise CAcert uses the password "password."

func (OutputsTcpServerOutput) SslRootCaPath added in v1.1.5

func (o OutputsTcpServerOutput) SslRootCaPath() pulumi.StringOutput

The path to the root certificate authority file.

func (OutputsTcpServerOutput) SslVerifyServerCert added in v1.1.5

func (o OutputsTcpServerOutput) SslVerifyServerCert() pulumi.BoolOutput

If true, make sure that the server you are connecting to is a valid one (authenticated). Both the common name and the alternate name of the server are then checked for a match.

func (OutputsTcpServerOutput) ToOutputsTcpServerOutput

func (o OutputsTcpServerOutput) ToOutputsTcpServerOutput() OutputsTcpServerOutput

func (OutputsTcpServerOutput) ToOutputsTcpServerOutputWithContext

func (o OutputsTcpServerOutput) ToOutputsTcpServerOutputWithContext(ctx context.Context) OutputsTcpServerOutput

type OutputsTcpServerState

type OutputsTcpServerState struct {
	// The app/user context that is the namespace for the resource
	Acl OutputsTcpServerAclPtrInput
	// If true, disables the group.
	Disabled pulumi.BoolPtrInput
	// Valid values: (clone | balance | autobalance)
	// The data distribution method used when two or more servers exist in the same forwarder group.
	Method pulumi.StringPtrInput
	// <host>:<port> of the Splunk receiver. <host> can be either an ip address or server name. <port> is the that port that the Splunk receiver is listening on.
	Name pulumi.StringPtrInput
	// The alternate name to match in the remote server's SSL certificate.
	SslAltNameToCheck pulumi.StringPtrInput
	// Path to the client certificate. If specified, connection uses SSL.
	SslCertPath pulumi.StringPtrInput
	// SSL Cipher in the form ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
	SslCipher pulumi.StringPtrInput
	// Check the common name of the server's certificate against this name.
	// If there is no match, assume that Splunk Enterprise is not authenticated against this server. You must specify this setting if sslVerifyServerCert is true.
	SslCommonNameToCheck pulumi.StringPtrInput
	// The password associated with the CAcert.
	// The default Splunk Enterprise CAcert uses the password "password."
	SslPassword pulumi.StringPtrInput
	// The path to the root certificate authority file.
	SslRootCaPath pulumi.StringPtrInput
	// If true, make sure that the server you are connecting to is a valid one (authenticated). Both the common name and the alternate name of the server are then checked for a match.
	SslVerifyServerCert pulumi.BoolPtrInput
}

func (OutputsTcpServerState) ElementType

func (OutputsTcpServerState) ElementType() reflect.Type

type OutputsTcpSyslog

type OutputsTcpSyslog struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl OutputsTcpSyslogAclOutput `pulumi:"acl"`
	// If true, disables global syslog settings.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// Name of the syslog output group. This is name used when creating syslog configuration in outputs.conf.
	Name pulumi.StringOutput `pulumi:"name"`
	// Sets syslog priority value. The priority value should specified as an integer. See $SPLUNK_HOME/etc/system/README/outputs.conf.spec for details.
	Priority pulumi.IntOutput `pulumi:"priority"`
	// host:port of the server where syslog data should be sent
	Server pulumi.StringOutput `pulumi:"server"`
	// Specifies a rule for handling data in addition to that provided by the "syslog" sourcetype. By default, there is no value for syslogSourceType.
	// <br>This string is used as a substring match against the sourcetype key. For example, if the string is set to 'syslog', then all source types containing the string "syslog" receives this special treatment.
	// To match a source type explicitly, use the pattern "sourcetype::sourcetype_name." For example
	// syslogSourcetype = sourcetype::apache_common
	// Data that is "syslog" or matches this setting is assumed to already be in syslog format.
	// Data that does not match the rules has a header, potentially a timestamp, and a hostname added to the front of the event. This is how Splunk software causes arbitrary log data to match syslog expectations.
	SyslogSourcetype pulumi.StringOutput `pulumi:"syslogSourcetype"`
	// Format of timestamp to add at start of the events to be forwarded.
	// The format is a strftime-style timestamp formatting string. See $SPLUNK_HOME/etc/system/README/outputs.conf.spec for details.
	TimestampFormat pulumi.StringOutput `pulumi:"timestampFormat"`
	// Protocol to use to send syslog data. Valid values: (tcp | udp ).
	Type pulumi.StringOutput `pulumi:"type"`
}

## # Resource: OutputsTcpSyslog

Access the configuration of a forwarded server configured to provide data in standard syslog format.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewOutputsTcpSyslog(ctx, "tcpSyslog", &splunk.OutputsTcpSyslogArgs{
			Priority: pulumi.Int(5),
			Server:   pulumi.String("new-host-1:1234"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetOutputsTcpSyslog

func GetOutputsTcpSyslog(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OutputsTcpSyslogState, opts ...pulumi.ResourceOption) (*OutputsTcpSyslog, error)

GetOutputsTcpSyslog gets an existing OutputsTcpSyslog resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOutputsTcpSyslog

func NewOutputsTcpSyslog(ctx *pulumi.Context,
	name string, args *OutputsTcpSyslogArgs, opts ...pulumi.ResourceOption) (*OutputsTcpSyslog, error)

NewOutputsTcpSyslog registers a new resource with the given unique name, arguments, and options.

func (*OutputsTcpSyslog) ElementType

func (*OutputsTcpSyslog) ElementType() reflect.Type

func (*OutputsTcpSyslog) ToOutputsTcpSyslogOutput

func (i *OutputsTcpSyslog) ToOutputsTcpSyslogOutput() OutputsTcpSyslogOutput

func (*OutputsTcpSyslog) ToOutputsTcpSyslogOutputWithContext

func (i *OutputsTcpSyslog) ToOutputsTcpSyslogOutputWithContext(ctx context.Context) OutputsTcpSyslogOutput

type OutputsTcpSyslogAcl

type OutputsTcpSyslogAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type OutputsTcpSyslogAclArgs

type OutputsTcpSyslogAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (OutputsTcpSyslogAclArgs) ElementType

func (OutputsTcpSyslogAclArgs) ElementType() reflect.Type

func (OutputsTcpSyslogAclArgs) ToOutputsTcpSyslogAclOutput

func (i OutputsTcpSyslogAclArgs) ToOutputsTcpSyslogAclOutput() OutputsTcpSyslogAclOutput

func (OutputsTcpSyslogAclArgs) ToOutputsTcpSyslogAclOutputWithContext

func (i OutputsTcpSyslogAclArgs) ToOutputsTcpSyslogAclOutputWithContext(ctx context.Context) OutputsTcpSyslogAclOutput

func (OutputsTcpSyslogAclArgs) ToOutputsTcpSyslogAclPtrOutput

func (i OutputsTcpSyslogAclArgs) ToOutputsTcpSyslogAclPtrOutput() OutputsTcpSyslogAclPtrOutput

func (OutputsTcpSyslogAclArgs) ToOutputsTcpSyslogAclPtrOutputWithContext

func (i OutputsTcpSyslogAclArgs) ToOutputsTcpSyslogAclPtrOutputWithContext(ctx context.Context) OutputsTcpSyslogAclPtrOutput

type OutputsTcpSyslogAclInput

type OutputsTcpSyslogAclInput interface {
	pulumi.Input

	ToOutputsTcpSyslogAclOutput() OutputsTcpSyslogAclOutput
	ToOutputsTcpSyslogAclOutputWithContext(context.Context) OutputsTcpSyslogAclOutput
}

OutputsTcpSyslogAclInput is an input type that accepts OutputsTcpSyslogAclArgs and OutputsTcpSyslogAclOutput values. You can construct a concrete instance of `OutputsTcpSyslogAclInput` via:

OutputsTcpSyslogAclArgs{...}

type OutputsTcpSyslogAclOutput

type OutputsTcpSyslogAclOutput struct{ *pulumi.OutputState }

func (OutputsTcpSyslogAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (OutputsTcpSyslogAclOutput) CanChangePerms

func (o OutputsTcpSyslogAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (OutputsTcpSyslogAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (OutputsTcpSyslogAclOutput) CanShareGlobal

func (o OutputsTcpSyslogAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (OutputsTcpSyslogAclOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (OutputsTcpSyslogAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (OutputsTcpSyslogAclOutput) ElementType

func (OutputsTcpSyslogAclOutput) ElementType() reflect.Type

func (OutputsTcpSyslogAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (OutputsTcpSyslogAclOutput) Reads

Properties that indicate resource read permissions.

func (OutputsTcpSyslogAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (OutputsTcpSyslogAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (OutputsTcpSyslogAclOutput) ToOutputsTcpSyslogAclOutput

func (o OutputsTcpSyslogAclOutput) ToOutputsTcpSyslogAclOutput() OutputsTcpSyslogAclOutput

func (OutputsTcpSyslogAclOutput) ToOutputsTcpSyslogAclOutputWithContext

func (o OutputsTcpSyslogAclOutput) ToOutputsTcpSyslogAclOutputWithContext(ctx context.Context) OutputsTcpSyslogAclOutput

func (OutputsTcpSyslogAclOutput) ToOutputsTcpSyslogAclPtrOutput

func (o OutputsTcpSyslogAclOutput) ToOutputsTcpSyslogAclPtrOutput() OutputsTcpSyslogAclPtrOutput

func (OutputsTcpSyslogAclOutput) ToOutputsTcpSyslogAclPtrOutputWithContext

func (o OutputsTcpSyslogAclOutput) ToOutputsTcpSyslogAclPtrOutputWithContext(ctx context.Context) OutputsTcpSyslogAclPtrOutput

func (OutputsTcpSyslogAclOutput) Writes

Properties that indicate write permissions of the resource.

type OutputsTcpSyslogAclPtrInput

type OutputsTcpSyslogAclPtrInput interface {
	pulumi.Input

	ToOutputsTcpSyslogAclPtrOutput() OutputsTcpSyslogAclPtrOutput
	ToOutputsTcpSyslogAclPtrOutputWithContext(context.Context) OutputsTcpSyslogAclPtrOutput
}

OutputsTcpSyslogAclPtrInput is an input type that accepts OutputsTcpSyslogAclArgs, OutputsTcpSyslogAclPtr and OutputsTcpSyslogAclPtrOutput values. You can construct a concrete instance of `OutputsTcpSyslogAclPtrInput` via:

        OutputsTcpSyslogAclArgs{...}

or:

        nil

type OutputsTcpSyslogAclPtrOutput

type OutputsTcpSyslogAclPtrOutput struct{ *pulumi.OutputState }

func (OutputsTcpSyslogAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (OutputsTcpSyslogAclPtrOutput) CanChangePerms

Indicates if the active user can change permissions for this object. Defaults to true.

func (OutputsTcpSyslogAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (OutputsTcpSyslogAclPtrOutput) CanShareGlobal

Indicates if the active user can change sharing to system level. Defaults to true.

func (OutputsTcpSyslogAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (OutputsTcpSyslogAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (OutputsTcpSyslogAclPtrOutput) Elem

func (OutputsTcpSyslogAclPtrOutput) ElementType

func (OutputsTcpSyslogAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (OutputsTcpSyslogAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (OutputsTcpSyslogAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (OutputsTcpSyslogAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (OutputsTcpSyslogAclPtrOutput) ToOutputsTcpSyslogAclPtrOutput

func (o OutputsTcpSyslogAclPtrOutput) ToOutputsTcpSyslogAclPtrOutput() OutputsTcpSyslogAclPtrOutput

func (OutputsTcpSyslogAclPtrOutput) ToOutputsTcpSyslogAclPtrOutputWithContext

func (o OutputsTcpSyslogAclPtrOutput) ToOutputsTcpSyslogAclPtrOutputWithContext(ctx context.Context) OutputsTcpSyslogAclPtrOutput

func (OutputsTcpSyslogAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type OutputsTcpSyslogArgs

type OutputsTcpSyslogArgs struct {
	// The app/user context that is the namespace for the resource
	Acl OutputsTcpSyslogAclPtrInput
	// If true, disables global syslog settings.
	Disabled pulumi.BoolPtrInput
	// Name of the syslog output group. This is name used when creating syslog configuration in outputs.conf.
	Name pulumi.StringPtrInput
	// Sets syslog priority value. The priority value should specified as an integer. See $SPLUNK_HOME/etc/system/README/outputs.conf.spec for details.
	Priority pulumi.IntPtrInput
	// host:port of the server where syslog data should be sent
	Server pulumi.StringPtrInput
	// Specifies a rule for handling data in addition to that provided by the "syslog" sourcetype. By default, there is no value for syslogSourceType.
	// <br>This string is used as a substring match against the sourcetype key. For example, if the string is set to 'syslog', then all source types containing the string "syslog" receives this special treatment.
	// To match a source type explicitly, use the pattern "sourcetype::sourcetype_name." For example
	// syslogSourcetype = sourcetype::apache_common
	// Data that is "syslog" or matches this setting is assumed to already be in syslog format.
	// Data that does not match the rules has a header, potentially a timestamp, and a hostname added to the front of the event. This is how Splunk software causes arbitrary log data to match syslog expectations.
	SyslogSourcetype pulumi.StringPtrInput
	// Format of timestamp to add at start of the events to be forwarded.
	// The format is a strftime-style timestamp formatting string. See $SPLUNK_HOME/etc/system/README/outputs.conf.spec for details.
	TimestampFormat pulumi.StringPtrInput
	// Protocol to use to send syslog data. Valid values: (tcp | udp ).
	Type pulumi.StringPtrInput
}

The set of arguments for constructing a OutputsTcpSyslog resource.

func (OutputsTcpSyslogArgs) ElementType

func (OutputsTcpSyslogArgs) ElementType() reflect.Type

type OutputsTcpSyslogArray added in v0.2.1

type OutputsTcpSyslogArray []OutputsTcpSyslogInput

func (OutputsTcpSyslogArray) ElementType added in v0.2.1

func (OutputsTcpSyslogArray) ElementType() reflect.Type

func (OutputsTcpSyslogArray) ToOutputsTcpSyslogArrayOutput added in v0.2.1

func (i OutputsTcpSyslogArray) ToOutputsTcpSyslogArrayOutput() OutputsTcpSyslogArrayOutput

func (OutputsTcpSyslogArray) ToOutputsTcpSyslogArrayOutputWithContext added in v0.2.1

func (i OutputsTcpSyslogArray) ToOutputsTcpSyslogArrayOutputWithContext(ctx context.Context) OutputsTcpSyslogArrayOutput

type OutputsTcpSyslogArrayInput added in v0.2.1

type OutputsTcpSyslogArrayInput interface {
	pulumi.Input

	ToOutputsTcpSyslogArrayOutput() OutputsTcpSyslogArrayOutput
	ToOutputsTcpSyslogArrayOutputWithContext(context.Context) OutputsTcpSyslogArrayOutput
}

OutputsTcpSyslogArrayInput is an input type that accepts OutputsTcpSyslogArray and OutputsTcpSyslogArrayOutput values. You can construct a concrete instance of `OutputsTcpSyslogArrayInput` via:

OutputsTcpSyslogArray{ OutputsTcpSyslogArgs{...} }

type OutputsTcpSyslogArrayOutput added in v0.2.1

type OutputsTcpSyslogArrayOutput struct{ *pulumi.OutputState }

func (OutputsTcpSyslogArrayOutput) ElementType added in v0.2.1

func (OutputsTcpSyslogArrayOutput) Index added in v0.2.1

func (OutputsTcpSyslogArrayOutput) ToOutputsTcpSyslogArrayOutput added in v0.2.1

func (o OutputsTcpSyslogArrayOutput) ToOutputsTcpSyslogArrayOutput() OutputsTcpSyslogArrayOutput

func (OutputsTcpSyslogArrayOutput) ToOutputsTcpSyslogArrayOutputWithContext added in v0.2.1

func (o OutputsTcpSyslogArrayOutput) ToOutputsTcpSyslogArrayOutputWithContext(ctx context.Context) OutputsTcpSyslogArrayOutput

type OutputsTcpSyslogInput

type OutputsTcpSyslogInput interface {
	pulumi.Input

	ToOutputsTcpSyslogOutput() OutputsTcpSyslogOutput
	ToOutputsTcpSyslogOutputWithContext(ctx context.Context) OutputsTcpSyslogOutput
}

type OutputsTcpSyslogMap added in v0.2.1

type OutputsTcpSyslogMap map[string]OutputsTcpSyslogInput

func (OutputsTcpSyslogMap) ElementType added in v0.2.1

func (OutputsTcpSyslogMap) ElementType() reflect.Type

func (OutputsTcpSyslogMap) ToOutputsTcpSyslogMapOutput added in v0.2.1

func (i OutputsTcpSyslogMap) ToOutputsTcpSyslogMapOutput() OutputsTcpSyslogMapOutput

func (OutputsTcpSyslogMap) ToOutputsTcpSyslogMapOutputWithContext added in v0.2.1

func (i OutputsTcpSyslogMap) ToOutputsTcpSyslogMapOutputWithContext(ctx context.Context) OutputsTcpSyslogMapOutput

type OutputsTcpSyslogMapInput added in v0.2.1

type OutputsTcpSyslogMapInput interface {
	pulumi.Input

	ToOutputsTcpSyslogMapOutput() OutputsTcpSyslogMapOutput
	ToOutputsTcpSyslogMapOutputWithContext(context.Context) OutputsTcpSyslogMapOutput
}

OutputsTcpSyslogMapInput is an input type that accepts OutputsTcpSyslogMap and OutputsTcpSyslogMapOutput values. You can construct a concrete instance of `OutputsTcpSyslogMapInput` via:

OutputsTcpSyslogMap{ "key": OutputsTcpSyslogArgs{...} }

type OutputsTcpSyslogMapOutput added in v0.2.1

type OutputsTcpSyslogMapOutput struct{ *pulumi.OutputState }

func (OutputsTcpSyslogMapOutput) ElementType added in v0.2.1

func (OutputsTcpSyslogMapOutput) ElementType() reflect.Type

func (OutputsTcpSyslogMapOutput) MapIndex added in v0.2.1

func (OutputsTcpSyslogMapOutput) ToOutputsTcpSyslogMapOutput added in v0.2.1

func (o OutputsTcpSyslogMapOutput) ToOutputsTcpSyslogMapOutput() OutputsTcpSyslogMapOutput

func (OutputsTcpSyslogMapOutput) ToOutputsTcpSyslogMapOutputWithContext added in v0.2.1

func (o OutputsTcpSyslogMapOutput) ToOutputsTcpSyslogMapOutputWithContext(ctx context.Context) OutputsTcpSyslogMapOutput

type OutputsTcpSyslogOutput

type OutputsTcpSyslogOutput struct{ *pulumi.OutputState }

func (OutputsTcpSyslogOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (OutputsTcpSyslogOutput) Disabled added in v1.1.5

If true, disables global syslog settings.

func (OutputsTcpSyslogOutput) ElementType

func (OutputsTcpSyslogOutput) ElementType() reflect.Type

func (OutputsTcpSyslogOutput) Name added in v1.1.5

Name of the syslog output group. This is name used when creating syslog configuration in outputs.conf.

func (OutputsTcpSyslogOutput) Priority added in v1.1.5

Sets syslog priority value. The priority value should specified as an integer. See $SPLUNK_HOME/etc/system/README/outputs.conf.spec for details.

func (OutputsTcpSyslogOutput) Server added in v1.1.5

host:port of the server where syslog data should be sent

func (OutputsTcpSyslogOutput) SyslogSourcetype added in v1.1.5

func (o OutputsTcpSyslogOutput) SyslogSourcetype() pulumi.StringOutput

Specifies a rule for handling data in addition to that provided by the "syslog" sourcetype. By default, there is no value for syslogSourceType. <br>This string is used as a substring match against the sourcetype key. For example, if the string is set to 'syslog', then all source types containing the string "syslog" receives this special treatment. To match a source type explicitly, use the pattern "sourcetype::sourcetype_name." For example syslogSourcetype = sourcetype::apache_common Data that is "syslog" or matches this setting is assumed to already be in syslog format. Data that does not match the rules has a header, potentially a timestamp, and a hostname added to the front of the event. This is how Splunk software causes arbitrary log data to match syslog expectations.

func (OutputsTcpSyslogOutput) TimestampFormat added in v1.1.5

func (o OutputsTcpSyslogOutput) TimestampFormat() pulumi.StringOutput

Format of timestamp to add at start of the events to be forwarded. The format is a strftime-style timestamp formatting string. See $SPLUNK_HOME/etc/system/README/outputs.conf.spec for details.

func (OutputsTcpSyslogOutput) ToOutputsTcpSyslogOutput

func (o OutputsTcpSyslogOutput) ToOutputsTcpSyslogOutput() OutputsTcpSyslogOutput

func (OutputsTcpSyslogOutput) ToOutputsTcpSyslogOutputWithContext

func (o OutputsTcpSyslogOutput) ToOutputsTcpSyslogOutputWithContext(ctx context.Context) OutputsTcpSyslogOutput

func (OutputsTcpSyslogOutput) Type added in v1.1.5

Protocol to use to send syslog data. Valid values: (tcp | udp ).

type OutputsTcpSyslogState

type OutputsTcpSyslogState struct {
	// The app/user context that is the namespace for the resource
	Acl OutputsTcpSyslogAclPtrInput
	// If true, disables global syslog settings.
	Disabled pulumi.BoolPtrInput
	// Name of the syslog output group. This is name used when creating syslog configuration in outputs.conf.
	Name pulumi.StringPtrInput
	// Sets syslog priority value. The priority value should specified as an integer. See $SPLUNK_HOME/etc/system/README/outputs.conf.spec for details.
	Priority pulumi.IntPtrInput
	// host:port of the server where syslog data should be sent
	Server pulumi.StringPtrInput
	// Specifies a rule for handling data in addition to that provided by the "syslog" sourcetype. By default, there is no value for syslogSourceType.
	// <br>This string is used as a substring match against the sourcetype key. For example, if the string is set to 'syslog', then all source types containing the string "syslog" receives this special treatment.
	// To match a source type explicitly, use the pattern "sourcetype::sourcetype_name." For example
	// syslogSourcetype = sourcetype::apache_common
	// Data that is "syslog" or matches this setting is assumed to already be in syslog format.
	// Data that does not match the rules has a header, potentially a timestamp, and a hostname added to the front of the event. This is how Splunk software causes arbitrary log data to match syslog expectations.
	SyslogSourcetype pulumi.StringPtrInput
	// Format of timestamp to add at start of the events to be forwarded.
	// The format is a strftime-style timestamp formatting string. See $SPLUNK_HOME/etc/system/README/outputs.conf.spec for details.
	TimestampFormat pulumi.StringPtrInput
	// Protocol to use to send syslog data. Valid values: (tcp | udp ).
	Type pulumi.StringPtrInput
}

func (OutputsTcpSyslogState) ElementType

func (OutputsTcpSyslogState) ElementType() reflect.Type

type Provider

type Provider struct {
	pulumi.ProviderResourceState

	// Authentication tokens, also known as JSON Web Tokens (JWT), are a method for authenticating Splunk platform users into
	// the Splunk platform
	AuthToken pulumi.StringPtrOutput `pulumi:"authToken"`
	// Splunk instance password
	Password pulumi.StringPtrOutput `pulumi:"password"`
	// Splunk instance URL
	Url pulumi.StringOutput `pulumi:"url"`
	// Splunk instance admin username
	Username pulumi.StringPtrOutput `pulumi:"username"`
}

The provider type for the splunk package. By default, resources use package-wide configuration settings, however an explicit `Provider` instance may be created and passed during resource construction to achieve fine-grained programmatic control over provider settings. See the [documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.

func NewProvider

func NewProvider(ctx *pulumi.Context,
	name string, args *ProviderArgs, opts ...pulumi.ResourceOption) (*Provider, error)

NewProvider registers a new resource with the given unique name, arguments, and options.

func (*Provider) ElementType

func (*Provider) ElementType() reflect.Type

func (*Provider) ToProviderOutput

func (i *Provider) ToProviderOutput() ProviderOutput

func (*Provider) ToProviderOutputWithContext

func (i *Provider) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type ProviderArgs

type ProviderArgs struct {
	// Authentication tokens, also known as JSON Web Tokens (JWT), are a method for authenticating Splunk platform users into
	// the Splunk platform
	AuthToken pulumi.StringPtrInput
	// insecure skip verification flag
	InsecureSkipVerify pulumi.BoolPtrInput
	// Splunk instance password
	Password pulumi.StringPtrInput
	// Timeout when making calls to Splunk server. Defaults to 60 seconds
	Timeout pulumi.IntPtrInput
	// Splunk instance URL
	Url pulumi.StringInput
	// Splunk instance admin username
	Username pulumi.StringPtrInput
}

The set of arguments for constructing a Provider resource.

func (ProviderArgs) ElementType

func (ProviderArgs) ElementType() reflect.Type

type ProviderInput

type ProviderInput interface {
	pulumi.Input

	ToProviderOutput() ProviderOutput
	ToProviderOutputWithContext(ctx context.Context) ProviderOutput
}

type ProviderOutput

type ProviderOutput struct{ *pulumi.OutputState }

func (ProviderOutput) AuthToken added in v1.1.5

func (o ProviderOutput) AuthToken() pulumi.StringPtrOutput

Authentication tokens, also known as JSON Web Tokens (JWT), are a method for authenticating Splunk platform users into the Splunk platform

func (ProviderOutput) ElementType

func (ProviderOutput) ElementType() reflect.Type

func (ProviderOutput) Password added in v1.1.5

func (o ProviderOutput) Password() pulumi.StringPtrOutput

Splunk instance password

func (ProviderOutput) ToProviderOutput

func (o ProviderOutput) ToProviderOutput() ProviderOutput

func (ProviderOutput) ToProviderOutputWithContext

func (o ProviderOutput) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

func (ProviderOutput) Url added in v1.1.5

Splunk instance URL

func (ProviderOutput) Username added in v1.1.5

func (o ProviderOutput) Username() pulumi.StringPtrOutput

Splunk instance admin username

type SavedSearches

type SavedSearches struct {
	pulumi.CustomResourceState

	// The app/user context that is the namespace for the resource
	Acl SavedSearchesAclOutput `pulumi:"acl"`
	// Enable XSOAR alerting (Should by 1 (Enabled) or 0 (Disabled))
	ActionCreateXsoarIncident pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncident"`
	// XSOAR custom incident fields (should be a comma separated list)
	ActionCreateXsoarIncidentParamCustomFields pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncidentParamCustomFields"`
	// XSOAR incident description
	ActionCreateXsoarIncidentParamDetails pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncidentParamDetails"`
	// XSOAR incident name
	ActionCreateXsoarIncidentParamIncidentName pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncidentParamIncidentName"`
	// XSOAR incident time
	ActionCreateXsoarIncidentParamOccurred pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncidentParamOccurred"`
	// Enable XSOAR alerting sending to all servers (Should by 1 (Enabled) or 0 (Disabled)
	ActionCreateXsoarIncidentParamSendAllServers pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncidentParamSendAllServers"`
	// XSOAR Server instance URL (Should start with https:// || http://)
	ActionCreateXsoarIncidentParamServerUrl pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncidentParamServerUrl"`
	// XSOAR Severity (1 - Low, 2 - Medium, 3 - High, 4 - Critical)
	ActionCreateXsoarIncidentParamSeverity pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncidentParamSeverity"`
	// XSOAR incident type
	ActionCreateXsoarIncidentParamType pulumi.StringPtrOutput `pulumi:"actionCreateXsoarIncidentParamType"`
	// The state of the email action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.
	ActionEmail pulumi.BoolOutput `pulumi:"actionEmail"`
	// The password to use when authenticating with the SMTP server. Normally this value is set when editing the email settings, however you can set a clear text password here and it is encrypted on the next platform restart.Defaults to empty string.
	ActionEmailAuthPassword pulumi.StringOutput `pulumi:"actionEmailAuthPassword"`
	// The username to use when authenticating with the SMTP server. If this is empty string, no authentication is attempted. Defaults to empty stringNOTE: Your SMTP server might reject unauthenticated emails.
	ActionEmailAuthUsername pulumi.StringOutput `pulumi:"actionEmailAuthUsername"`
	// BCC email address to use if action.email is enabled.
	ActionEmailBcc pulumi.StringOutput `pulumi:"actionEmailBcc"`
	// CC email address to use if action.email is enabled.
	ActionEmailCc pulumi.StringOutput `pulumi:"actionEmailCc"`
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionEmailCommand pulumi.StringOutput `pulumi:"actionEmailCommand"`
	// Valid values: (table | plain | html | raw | csv)Specify the format of text in the email. This value also applies to any attachments.
	ActionEmailFormat pulumi.StringOutput `pulumi:"actionEmailFormat"`
	// Email address from which the email action originates.Defaults to splunk@$LOCALHOST or whatever value is set in alert_actions.conf.
	ActionEmailFrom pulumi.StringOutput `pulumi:"actionEmailFrom"`
	// Sets the hostname used in the web link (url) sent in email actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)
	ActionEmailHostname pulumi.StringOutput `pulumi:"actionEmailHostname"`
	// Specify whether to include a link to the results. Defaults to 0.
	ActionEmailIncludeResultsLink pulumi.IntOutput `pulumi:"actionEmailIncludeResultsLink"`
	// Specify whether to include the search that caused an email to be sent. Defaults to 0.
	ActionEmailIncludeSearch pulumi.IntOutput `pulumi:"actionEmailIncludeSearch"`
	// Specify whether to show the trigger condition that caused the alert to fire. Defaults to 0.
	ActionEmailIncludeTrigger pulumi.IntOutput `pulumi:"actionEmailIncludeTrigger"`
	// Specify whether to show the time that the alert was fired. Defaults to 0.
	ActionEmailIncludeTriggerTime pulumi.IntOutput `pulumi:"actionEmailIncludeTriggerTime"`
	// Specify whether to show the title and a link to enable the user to edit the saved search. Defaults to 0.
	ActionEmailIncludeViewLink pulumi.IntOutput `pulumi:"actionEmailIncludeViewLink"`
	// Indicates whether the search results are contained in the body of the email.Results can be either inline or attached to an email.
	ActionEmailInline pulumi.BoolOutput `pulumi:"actionEmailInline"`
	// Set the address of the MTA server to be used to send the emails.Defaults to <LOCALHOST> or whatever is set in alert_actions.conf.
	ActionEmailMailserver pulumi.StringOutput `pulumi:"actionEmailMailserver"`
	// Sets the global maximum number of search results to send when email.action is enabled. Defaults to 100.
	ActionEmailMaxResults pulumi.IntOutput `pulumi:"actionEmailMaxResults"`
	// Valid values are Integer[m|s|h|d].Specifies the maximum amount of time the execution of an email action takes before the action is aborted. Defaults to 5m.
	ActionEmailMaxTime pulumi.StringOutput `pulumi:"actionEmailMaxTime"`
	// Customize the message sent in the emailed alert. Defaults to: The alert condition for '$name$' was triggered.
	ActionEmailMessageAlert pulumi.StringOutput `pulumi:"actionEmailMessageAlert"`
	// Customize the message sent in the emailed report. Defaults to: The scheduled report '$name$' has run
	ActionEmailMessageReport pulumi.StringOutput `pulumi:"actionEmailMessageReport"`
	// The name of the view to deliver if sendpdf is enabled
	ActionEmailPdfview pulumi.StringOutput `pulumi:"actionEmailPdfview"`
	// Search string to preprocess results before emailing them. Defaults to empty string (no preprocessing).Usually the preprocessing consists of filtering out unwanted internal fields.
	ActionEmailPreprocessResults pulumi.StringOutput `pulumi:"actionEmailPreprocessResults"`
	// Space-separated list. Specifies the set (and load order) of CID fonts for handling Simplified Chinese(gb), Traditional Chinese(cns), Japanese(jp), and Korean(kor) in Integrated PDF Rendering.If multiple fonts provide a glyph for a given character code, the glyph from the first font specified in the list is used.To skip loading any CID fonts, specify the empty string.Defaults to 'gb cns jp kor'
	ActionEmailReportCidFontList pulumi.StringOutput `pulumi:"actionEmailReportCidFontList"`
	ActionEmailReportIncludeSplunkLogo pulumi.BoolOutput `pulumi:"actionEmailReportIncludeSplunkLogo"`
	// Valid values: (portrait | landscape)Specifies the paper orientation: portrait or landscape. Defaults to portrait.
	ActionEmailReportPaperOrientation pulumi.StringOutput `pulumi:"actionEmailReportPaperOrientation"`
	// Valid values: (letter | legal | ledger | a2 | a3 | a4 | a5)Specifies the paper size for PDFs. Defaults to letter.
	ActionEmailReportPaperSize pulumi.StringOutput `pulumi:"actionEmailReportPaperSize"`
	// No Supported
	ActionEmailReportServerEnabled pulumi.BoolOutput `pulumi:"actionEmailReportServerEnabled"`
	// Not supported.For a default locally installed report server, the URL is http://localhost:8091/
	ActionEmailReportServerUrl pulumi.StringOutput `pulumi:"actionEmailReportServerUrl"`
	// Specify whether to send results as a CSV file. Defaults to 0.
	ActionEmailSendCsv pulumi.IntOutput `pulumi:"actionEmailSendCsv"`
	// Indicates whether to create and send the results as a PDF. Defaults to false.
	ActionEmailSendPdf pulumi.BoolOutput `pulumi:"actionEmailSendPdf"`
	// Indicates whether to attach the search results in the email.Results can be either attached or inline. See action.email.inline.
	ActionEmailSendResults pulumi.BoolOutput `pulumi:"actionEmailSendResults"`
	// Specifies an alternate email subject.Defaults to SplunkAlert-<savedsearchname>.
	ActionEmailSubject pulumi.StringOutput `pulumi:"actionEmailSubject"`
	// A comma or semicolon separated list of recipient email addresses. Required if this search is scheduled and the email alert action is enabled.
	ActionEmailTo pulumi.StringOutput `pulumi:"actionEmailTo"`
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionEmailTrackAlert pulumi.BoolOutput `pulumi:"actionEmailTrackAlert"`
	// Valid values are Integer[p].Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows <Integer>, int is the number of scheduled periods. Defaults to 86400 (24 hours).If no actions are triggered, the artifacts have their ttl determined by dispatch.ttl in savedsearches.conf.
	ActionEmailTtl pulumi.StringOutput `pulumi:"actionEmailTtl"`
	// Indicates whether to use SSL when communicating with the SMTP server. Defaults to false.
	ActionEmailUseSsl pulumi.BoolOutput `pulumi:"actionEmailUseSsl"`
	// Indicates whether to use TLS (transport layer security) when communicating with the SMTP server (starttls).Defaults to false.
	ActionEmailUseTls pulumi.BoolOutput `pulumi:"actionEmailUseTls"`
	// Indicates whether columns should be sorted from least wide to most wide, left to right.Only valid if format=text.
	ActionEmailWidthSortColumns pulumi.BoolOutput `pulumi:"actionEmailWidthSortColumns"`
	// Jira Service Desk account name
	ActionJiraServiceDeskParamAccount pulumi.StringPtrOutput `pulumi:"actionJiraServiceDeskParamAccount"`
	// Jira issue description
	ActionJiraServiceDeskParamJiraDescription pulumi.StringPtrOutput `pulumi:"actionJiraServiceDeskParamJiraDescription"`
	// Jira issue type name
	ActionJiraServiceDeskParamJiraIssueType pulumi.StringPtrOutput `pulumi:"actionJiraServiceDeskParamJiraIssueType"`
	// Jira priority of issue
	ActionJiraServiceDeskParamJiraPriority pulumi.StringPtrOutput `pulumi:"actionJiraServiceDeskParamJiraPriority"`
	// Jira Project name
	ActionJiraServiceDeskParamJiraProject pulumi.StringPtrOutput `pulumi:"actionJiraServiceDeskParamJiraProject"`
	// Jira issue title/summary
	ActionJiraServiceDeskParamJiraSummary pulumi.StringPtrOutput `pulumi:"actionJiraServiceDeskParamJiraSummary"`
	// The PagerDuty custom details information.
	ActionPagerdutyCustomDetails pulumi.StringOutput `pulumi:"actionPagerdutyCustomDetails"`
	// The PagerDuty integration Key.
	ActionPagerdutyIntegrationKey pulumi.StringOutput `pulumi:"actionPagerdutyIntegrationKey"`
	// The PagerDuty integration Key override.
	ActionPagerdutyIntegrationKeyOverride pulumi.StringOutput `pulumi:"actionPagerdutyIntegrationKeyOverride"`
	// The pagerduty integration URL. This integration uses Splunk's native webhooks to send events to PagerDuty.
	ActionPagerdutyIntegrationUrl pulumi.StringPtrOutput `pulumi:"actionPagerdutyIntegrationUrl"`
	// The pagerduty integration URL override. This integration uses Splunk's native webhooks to send events to PagerDuty.
	ActionPagerdutyIntegrationUrlOverride pulumi.StringPtrOutput `pulumi:"actionPagerdutyIntegrationUrlOverride"`
	// The state of the populate lookup action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.
	ActionPopulateLookup pulumi.BoolOutput `pulumi:"actionPopulateLookup"`
	// The search command (or pipeline) which is responsible for executing the action.
	ActionPopulateLookupCommand pulumi.StringOutput `pulumi:"actionPopulateLookupCommand"`
	// Lookup name of path of the lookup to populate
	ActionPopulateLookupDest pulumi.StringOutput `pulumi:"actionPopulateLookupDest"`
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms: hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionPopulateLookupHostname pulumi.StringOutput `pulumi:"actionPopulateLookupHostname"`
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionPopulateLookupMaxResults pulumi.IntOutput `pulumi:"actionPopulateLookupMaxResults"`
	// Valid values are: Integer[m|s|h|d]Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 5m.
	ActionPopulateLookupMaxTime pulumi.IntOutput `pulumi:"actionPopulateLookupMaxTime"`
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionPopulateLookupTrackAlert pulumi.BoolOutput `pulumi:"actionPopulateLookupTrackAlert"`
	// Valid values are Integer[p]Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, then this specifies the number of scheduled periods. Defaults to 10p.
	ActionPopulateLookupTtl pulumi.StringOutput `pulumi:"actionPopulateLookupTtl"`
	// The state of the rss action. Read-only attribute. Value ignored on POST.Use actions to specify a list of enabled actions. Defaults to 0.
	ActionRss pulumi.BoolOutput `pulumi:"actionRss"`
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionRssCommand pulumi.StringOutput `pulumi:"actionRssCommand"`
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionRssHostname pulumi.StringOutput `pulumi:"actionRssHostname"`
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionRssMaxResults pulumi.IntOutput `pulumi:"actionRssMaxResults"`
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionRssMaxTime pulumi.IntOutput `pulumi:"actionRssMaxTime"`
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionRssTrackAlert pulumi.BoolOutput `pulumi:"actionRssTrackAlert"`
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionRssTtl pulumi.StringOutput `pulumi:"actionRssTtl"`
	// The state of the script action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.
	ActionScript pulumi.BoolOutput `pulumi:"actionScript"`
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionScriptCommand pulumi.StringOutput `pulumi:"actionScriptCommand"`
	// File name of the script to call. Required if script action is enabled
	ActionScriptFilename pulumi.StringOutput `pulumi:"actionScriptFilename"`
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionScriptHostname pulumi.StringOutput `pulumi:"actionScriptHostname"`
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionScriptMaxResults pulumi.IntOutput `pulumi:"actionScriptMaxResults"`
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionScriptMaxTime pulumi.IntOutput `pulumi:"actionScriptMaxTime"`
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionScriptTrackAlert pulumi.BoolOutput `pulumi:"actionScriptTrackAlert"`
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionScriptTtl pulumi.StringOutput `pulumi:"actionScriptTtl"`
	// Include a message attachment. Valid values are message, none, or alert_link
	ActionSlackParamAttachment pulumi.StringPtrOutput `pulumi:"actionSlackParamAttachment"`
	// Slack channel to send the message to (Should start with # or @)
	ActionSlackParamChannel pulumi.StringPtrOutput `pulumi:"actionSlackParamChannel"`
	// Show one or more fields from the search results below your Slack message. Comma-separated list of field names. Allows wildcards. eg. index,source*
	ActionSlackParamFields pulumi.StringPtrOutput `pulumi:"actionSlackParamFields"`
	// Enter the chat message to send to the Slack channel. The message can include tokens that insert text based on the results of the search.
	ActionSlackParamMessage pulumi.StringPtrOutput `pulumi:"actionSlackParamMessage"`
	// You can override the Slack webhook URL here if you need to send the alert message to a different Slack team
	ActionSlackParamWebhookUrlOverride pulumi.StringPtrOutput `pulumi:"actionSlackParamWebhookUrlOverride"`
	// Account(s) for which the event is/ are to be created across ServiceNow instance(s).
	ActionSnowEventParamAccount pulumi.StringOutput `pulumi:"actionSnowEventParamAccount"`
	// You can pass additional information that might be of use to the user. This field can also be used to supply the URL of
	// your Splunk search head. When you use the snow_event.py alert-triggered script, the Splunk platform uses the URL to
	// create a deep link that allows a ServiceNow user to navigate back to this Splunk platform search. You can find the
	// resulting full URL for navigation from ServiceNow to the Splunk platform search by clicking Splunk Drilldown in the
	// event page in ServiceNow. See an example below. Note that if you create events using the commands snowevent or
	// snoweventstream, you must supply the URL in this field.You can pass the URL of Splunk as url=<value>. You can also pass
	// other fields and their values by || separated key-value format. For example, url=<value>||k1=v1||k2=v2||....
	ActionSnowEventParamAdditionalInfo pulumi.StringOutput `pulumi:"actionSnowEventParamAdditionalInfo"`
	// String that represents a configuration item in your network. You can pass value as || separated key-value format. For
	// example, k1=v1||k2=v2.
	ActionSnowEventParamCiIdentifier pulumi.StringOutput `pulumi:"actionSnowEventParamCiIdentifier"`
	// The custom fields which are configured at the ServiceNow Instance. You can pass the custom fields and their values in
	// the || separated format. For example, custom_field1=value1||custom_field2=value2||...custom_fields used must be present
	// in the em_event table of ServiceNow.
	ActionSnowEventParamCustomFields pulumi.StringOutput `pulumi:"actionSnowEventParamCustomFields"`
	// A brief description of the event.
	ActionSnowEventParamDescription pulumi.StringOutput `pulumi:"actionSnowEventParamDescription"`
	// The node, formatted to follow your organization's ITIL standards and mapping. If the node value matches a CI with the
	// same host name, the event is automatically assigned to the matching CI.
	ActionSnowEventParamNode pulumi.StringOutput `pulumi:"actionSnowEventParamNode"`
	// The resource, formatted to follow your organization's ITIL standards and mapping. For example, resource='CPU'.
	ActionSnowEventParamResource pulumi.StringOutput `pulumi:"actionSnowEventParamResource"`
	// The severity associated with the event. 0 - Clear 1 - Critical 2 - Major 3 - Minor 4 - Warning
	ActionSnowEventParamSeverity pulumi.IntOutput `pulumi:"actionSnowEventParamSeverity"`
	// The type, formatted to follow your organization's ITIL standards and mapping. For example, type='Virtual Machine'.
	ActionSnowEventParamType pulumi.StringOutput `pulumi:"actionSnowEventParamType"`
	// The state of the summary index action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.
	ActionSummaryIndex pulumi.BoolOutput `pulumi:"actionSummaryIndex"`
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionSummaryIndexCommand pulumi.StringOutput `pulumi:"actionSummaryIndexCommand"`
	// Sets the hostname used in the web link (url) sent in summary-index alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)protocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionSummaryIndexHostname pulumi.StringOutput `pulumi:"actionSummaryIndexHostname"`
	// Determines whether to execute the summary indexing action as part of the scheduled search.NOTE: This option is considered only if the summary index action is enabled and is always executed (in other words, if counttype = always).Defaults to true
	ActionSummaryIndexInline pulumi.BoolOutput `pulumi:"actionSummaryIndexInline"`
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionSummaryIndexMaxResults pulumi.IntOutput `pulumi:"actionSummaryIndexMaxResults"`
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionSummaryIndexMaxTime pulumi.IntOutput `pulumi:"actionSummaryIndexMaxTime"`
	// Specifies the name of the summary index where the results of the scheduled search are saved.Defaults to summary.
	ActionSummaryIndexName pulumi.StringOutput `pulumi:"actionSummaryIndexName"`
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionSummaryIndexTrackAlert pulumi.BoolOutput `pulumi:"actionSummaryIndexTrackAlert"`
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionSummaryIndexTtl pulumi.StringOutput `pulumi:"actionSummaryIndexTtl"`
	// URL to send the HTTP POST request to. Must be accessible from the Splunk server
	ActionWebhookParamUrl pulumi.StringPtrOutput `pulumi:"actionWebhookParamUrl"`
	// A comma-separated list of actions to enable. For example: rss,email
	Actions pulumi.StringOutput `pulumi:"actions"`
	// One of the following strings: greater than, less than, equal to, rises by, drops by, rises by perc, drops by percUsed with alertThreshold to trigger alert actions.
	AlertComparator pulumi.StringOutput `pulumi:"alertComparator"`
	// Contains a conditional search that is evaluated against the results of the saved search. Defaults to an empty string.
	AlertCondition pulumi.StringOutput `pulumi:"alertCondition"`
	// Specifies whether alert actions are applied to the entire result set or on each individual result.Defaults to 1 (true).
	AlertDigestMode pulumi.BoolOutput `pulumi:"alertDigestMode"`
	// Valid values: [number][time-unit]Sets the period of time to show the alert in the dashboard. Defaults to 24h.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
	AlertExpires pulumi.StringOutput `pulumi:"alertExpires"`
	// Valid values: (1 | 2 | 3 | 4 | 5 | 6) Sets the alert severity level.Valid values are:1 DEBUG 2 INFO 3 WARN 4 ERROR 5 SEVERE 6 FATAL Defaults to 3.
	AlertSeverity pulumi.IntOutput `pulumi:"alertSeverity"`
	// Indicates whether alert suppression is enabled for this scheduled search.
	AlertSuppress pulumi.BoolOutput `pulumi:"alertSuppress"`
	// Comma delimited list of fields to use for suppression when doing per result alerting. Required if suppression is turned on and per result alerting is enabled.
	AlertSuppressFields pulumi.StringOutput `pulumi:"alertSuppressFields"`
	// Valid values: [number][time-unit] Specifies the suppresion period. Only valid if alert.supress is enabled.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
	AlertSuppressPeriod pulumi.StringOutput `pulumi:"alertSuppressPeriod"`
	// Valid values are: Integer[%!](MISSING)Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alertComparator is set to rises by perc or drops by perc.
	AlertThreshold pulumi.StringOutput `pulumi:"alertThreshold"`
	// Valid values: (true | false | auto) Specifies whether to track the actions triggered by this scheduled search.auto - determine whether to track or not based on the tracking setting of each action, do not track scheduled searches that always trigger actions. Default value true - force alert tracking.false - disable alert tracking for this search.
	AlertTrack pulumi.BoolOutput `pulumi:"alertTrack"`
	// What to base the alert on, overriden by alertCondition if it is specified. Valid values are: always, custom, number of events, number of hosts, number of sources.
	AlertType pulumi.StringOutput `pulumi:"alertType"`
	// Allows the search scheduler to distribute scheduled searches randomly and more evenly over their specified search periods.
	AllowSkew pulumi.StringOutput `pulumi:"allowSkew"`
	// Indicates whether the scheduler should ensure that the data for this search is automatically summarized. Defaults to 0.
	AutoSummarize pulumi.BoolOutput `pulumi:"autoSummarize"`
	// An auto summarization template for this search. See auto summarization options in savedsearches.conf for more details.
	AutoSummarizeCommand pulumi.StringOutput `pulumi:"autoSummarizeCommand"`
	// Cron schedule that probes and generates the summaries for this saved search.The default value is */10 * * * * and corresponds to \`every ten hours\`.
	AutoSummarizeCronSchedule pulumi.StringOutput `pulumi:"autoSummarizeCronSchedule"`
	// A time string that specifies the earliest time for summarizing this search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	AutoSummarizeDispatchEarliestTime pulumi.StringOutput `pulumi:"autoSummarizeDispatchEarliestTime"`
	// A time string that specifies the latest time for summarizing this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	AutoSummarizeDispatchLatestTime pulumi.StringOutput `pulumi:"autoSummarizeDispatchLatestTime"`
	// Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %!F(MISSING)T%!T(MISSING).%!Q(MISSING)%!:(MISSING)z
	AutoSummarizeDispatchTimeFormat pulumi.StringOutput `pulumi:"autoSummarizeDispatchTimeFormat"`
	// Valid values: Integer[p]. Defaults to 60.Indicates the time to live (in seconds) for the artifacts of the summarization of the scheduled search.
	AutoSummarizeDispatchTtl pulumi.StringOutput `pulumi:"autoSummarizeDispatchTtl"`
	// The maximum number of buckets with the suspended summarization before the summarization search is completely stopped, and the summarization of the search is suspended for auto_summarize.suspend_period. Defaults to 2.
	AutoSummarizeMaxDisabledBuckets pulumi.IntOutput `pulumi:"autoSummarizeMaxDisabledBuckets"`
	// The maximum ratio of summary_size/bucket_size, which specifies when to stop summarization and deem it unhelpful for a bucket. Defaults to 0.1 Note: The test is only performed if the summary size is larger than auto_summarize.max_summary_size.
	AutoSummarizeMaxSummaryRatio pulumi.Float64Output `pulumi:"autoSummarizeMaxSummaryRatio"`
	// The minimum summary size, in bytes, before testing whether the summarization is helpful.The default value is 52428800 and is equivalent to 5MB.
	AutoSummarizeMaxSummarySize pulumi.IntOutput `pulumi:"autoSummarizeMaxSummarySize"`
	// Maximum time (in seconds) that the summary search is allowed to run. Defaults to 3600.Note: This is an approximate time. The summary search stops at clean bucket boundaries.
	AutoSummarizeMaxTime pulumi.IntOutput `pulumi:"autoSummarizeMaxTime"`
	// Time specfier indicating when to suspend summarization of this search if the summarization is deemed unhelpful.Defaults to 24h.
	AutoSummarizeSuspendPeriod pulumi.StringOutput `pulumi:"autoSummarizeSuspendPeriod"`
	// The list of time ranges that each summarized chunk should span. This comprises the list of available granularity levels for which summaries would be available. Specify a comma delimited list of time specifiers.For example a timechart over the last month whose granuality is at the day level should set this to 1d. If you need the same data summarized at the hour level for weekly charts, use: 1h,1d.
	AutoSummarizeTimespan pulumi.StringOutput `pulumi:"autoSummarizeTimespan"`
	// Valid values: cron stringThe cron schedule to execute this search. For example: */5 * * * * causes the search to execute every 5 minutes.
	CronSchedule pulumi.StringOutput `pulumi:"cronSchedule"`
	// Human-readable description of this saved search. Defaults to empty string.
	Description pulumi.StringOutput `pulumi:"description"`
	// Indicates if the saved search is enabled. Defaults to 0.Disabled saved searches are not visible in Splunk Web.
	Disabled pulumi.BoolOutput `pulumi:"disabled"`
	// The maximum number of timeline buckets. Defaults to 0.
	DispatchBuckets pulumi.IntOutput `pulumi:"dispatchBuckets"`
	// A time string that specifies the earliest time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchEarliestTime pulumi.StringOutput `pulumi:"dispatchEarliestTime"`
	// A time string that specifies the earliest index time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexEarliest pulumi.StringOutput `pulumi:"dispatchIndexEarliest"`
	// A time string that specifies the latest index time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexLatest pulumi.StringOutput `pulumi:"dispatchIndexLatest"`
	// A time string that specifies the earliest time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexedRealtime pulumi.BoolOutput `pulumi:"dispatchIndexedRealtime"`
	// Allows for a per-job override of the [search] indexedRealtimeDiskSyncDelay setting in limits.conf.
	DispatchIndexedRealtimeMinspan pulumi.IntOutput `pulumi:"dispatchIndexedRealtimeMinspan"`
	// Allows for a per-job override of the [search] indexedRealtimeDiskSyncDelay setting in limits.conf.
	DispatchIndexedRealtimeOffset pulumi.IntOutput `pulumi:"dispatchIndexedRealtimeOffset"`
	// A time string that specifies the latest time for this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchLatestTime pulumi.StringOutput `pulumi:"dispatchLatestTime"`
	// Enables or disables the lookups for this search. Defaults to 1.
	DispatchLookups pulumi.BoolOutput `pulumi:"dispatchLookups"`
	// The maximum number of results before finalizing the search. Defaults to 500000.
	DispatchMaxCount pulumi.IntOutput `pulumi:"dispatchMaxCount"`
	// Indicates the maximum amount of time (in seconds) before finalizing the search. Defaults to 0.
	DispatchMaxTime pulumi.IntOutput `pulumi:"dispatchMaxTime"`
	// Specifies, in seconds, how frequently the MapReduce reduce phase runs on accumulated map values. Defaults to 10.
	DispatchReduceFreq pulumi.IntOutput `pulumi:"dispatchReduceFreq"`
	// Whether to back fill the real time window for this search. Parameter valid only if this is a real time search. Defaults to 0.
	DispatchRtBackfill pulumi.BoolOutput `pulumi:"dispatchRtBackfill"`
	// Allows for a per-job override of the [search] indexedRealtimeMaximumSpan setting in limits.conf.
	DispatchRtMaximumSpan pulumi.IntOutput `pulumi:"dispatchRtMaximumSpan"`
	// Specifies whether a new search process spawns when this saved search is executed. Defaults to 1. Searches against indexes must run in a separate process.
	DispatchSpawnProcess pulumi.BoolOutput `pulumi:"dispatchSpawnProcess"`
	// A time format string that defines the time format for specifying the earliest and latest time. Defaults to %!F(MISSING)T%!T(MISSING).%!Q(MISSING)%!:(MISSING)z
	DispatchTimeFormat pulumi.StringOutput `pulumi:"dispatchTimeFormat"`
	// Valid values: Integer[p]. Defaults to 2p.Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no actions are triggered.
	DispatchTtl pulumi.StringOutput `pulumi:"dispatchTtl"`
	// Defines the default UI view name (not label) in which to load the results. Accessibility is subject to the user having sufficient permissions.
	DisplayView pulumi.StringOutput `pulumi:"displayView"`
	// Whether this search is to be run on a schedule
	IsScheduled pulumi.BoolOutput `pulumi:"isScheduled"`
	// Specifies whether this saved search should be listed in the visible saved search list. Defaults to 1.
	IsVisible pulumi.BoolPtrOutput `pulumi:"isVisible"`
	// The maximum number of concurrent instances of this search the scheduler is allowed to run. Defaults to 1.
	MaxConcurrent pulumi.IntOutput `pulumi:"maxConcurrent"`
	// A name for the search.
	Name pulumi.StringOutput `pulumi:"name"`
	// Defaults to 1. Controls the way the scheduler computes the next execution time of a scheduled search. If this value is set to 1, the scheduler bases its determination of the next scheduled search execution time on the current time. If this value is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time. This is called continuous scheduling. If set to 0, the scheduler never skips scheduled execution periods. However, the execution of the saved search might fall behind depending on the scheduler load. Use continuous scheduling whenever you enable the summary index option.
	RealtimeSchedule pulumi.BoolOutput `pulumi:"realtimeSchedule"`
	// Specifies a field used by Splunk Web to denote the app this search should be dispatched in.
	RequestUiDispatchApp pulumi.StringOutput `pulumi:"requestUiDispatchApp"`
	// Specifies a field used by Splunk Web to denote the view this search should be displayed in.
	RequestUiDispatchView pulumi.StringOutput `pulumi:"requestUiDispatchView"`
	// Specifies whether to restart a real-time search managed by the scheduler when a search peer becomes available for this saved search. Defaults to 1.
	RestartOnSearchpeerAdd pulumi.BoolOutput `pulumi:"restartOnSearchpeerAdd"`
	// Indicates whether this search runs at startup. If it does not run on startup, it runs at the next scheduled time. Defaults to 0. Set to 1 for scheduled searches that populate lookup tables.
	RunOnStartup pulumi.BoolOutput `pulumi:"runOnStartup"`
	// Raises the scheduling priority of the named search. Defaults to Default
	SchedulePriority pulumi.StringOutput `pulumi:"schedulePriority"`
	// Time window (in minutes) during which the search has lower priority. Defaults to 0. The scheduler can give higher priority to more critical searches during this window. The window must be smaller than the search period.Set to auto to let the scheduler determine the optimal window value automatically. Requires the editSearchScheduleWindow capability to override auto.
	ScheduleWindow pulumi.StringOutput `pulumi:"scheduleWindow"`
	// Required when creating a new search.
	Search pulumi.StringOutput `pulumi:"search"`
	// Defines the viewstate id associated with the UI view listed in 'displayview'.
	Vsid pulumi.StringOutput `pulumi:"vsid"`
	// Specifies the new workload pool where the existing running search will be placed.`
	WorkloadPool pulumi.StringOutput `pulumi:"workloadPool"`
}

## # Resource: SavedSearches

Create and manage saved searches.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewSavedSearches(ctx, "savedSearch", &splunk.SavedSearchesArgs{
			Acl: &splunk.SavedSearchesAclArgs{
				App:     pulumi.String("launcher"),
				Owner:   pulumi.String("admin"),
				Sharing: pulumi.String("app"),
			},
			ActionEmailFormat:      pulumi.String("table"),
			ActionEmailMaxResults:  pulumi.Int(10),
			ActionEmailMaxTime:     pulumi.String("5m"),
			ActionEmailSendResults: pulumi.Bool(false),
			ActionEmailSubject:     pulumi.String("Splunk Alert: $name$"),
			ActionEmailTo:          pulumi.String("splunk@splunk.com"),
			ActionEmailTrackAlert:  pulumi.Bool(true),
			Actions:                pulumi.String("email"),
			CronSchedule:           pulumi.String("*/5 * * * *"),
			DispatchEarliestTime:   pulumi.String("rt-15m"),
			DispatchLatestTime:     pulumi.String("rt-0m"),
			Search:                 pulumi.String("index=main"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetSavedSearches

func GetSavedSearches(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SavedSearchesState, opts ...pulumi.ResourceOption) (*SavedSearches, error)

GetSavedSearches gets an existing SavedSearches resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSavedSearches

func NewSavedSearches(ctx *pulumi.Context,
	name string, args *SavedSearchesArgs, opts ...pulumi.ResourceOption) (*SavedSearches, error)

NewSavedSearches registers a new resource with the given unique name, arguments, and options.

func (*SavedSearches) ElementType

func (*SavedSearches) ElementType() reflect.Type

func (*SavedSearches) ToSavedSearchesOutput

func (i *SavedSearches) ToSavedSearchesOutput() SavedSearchesOutput

func (*SavedSearches) ToSavedSearchesOutputWithContext

func (i *SavedSearches) ToSavedSearchesOutputWithContext(ctx context.Context) SavedSearchesOutput

type SavedSearchesAcl

type SavedSearchesAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type SavedSearchesAclArgs

type SavedSearchesAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (SavedSearchesAclArgs) ElementType

func (SavedSearchesAclArgs) ElementType() reflect.Type

func (SavedSearchesAclArgs) ToSavedSearchesAclOutput

func (i SavedSearchesAclArgs) ToSavedSearchesAclOutput() SavedSearchesAclOutput

func (SavedSearchesAclArgs) ToSavedSearchesAclOutputWithContext

func (i SavedSearchesAclArgs) ToSavedSearchesAclOutputWithContext(ctx context.Context) SavedSearchesAclOutput

func (SavedSearchesAclArgs) ToSavedSearchesAclPtrOutput

func (i SavedSearchesAclArgs) ToSavedSearchesAclPtrOutput() SavedSearchesAclPtrOutput

func (SavedSearchesAclArgs) ToSavedSearchesAclPtrOutputWithContext

func (i SavedSearchesAclArgs) ToSavedSearchesAclPtrOutputWithContext(ctx context.Context) SavedSearchesAclPtrOutput

type SavedSearchesAclInput

type SavedSearchesAclInput interface {
	pulumi.Input

	ToSavedSearchesAclOutput() SavedSearchesAclOutput
	ToSavedSearchesAclOutputWithContext(context.Context) SavedSearchesAclOutput
}

SavedSearchesAclInput is an input type that accepts SavedSearchesAclArgs and SavedSearchesAclOutput values. You can construct a concrete instance of `SavedSearchesAclInput` via:

SavedSearchesAclArgs{...}

type SavedSearchesAclOutput

type SavedSearchesAclOutput struct{ *pulumi.OutputState }

func (SavedSearchesAclOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (SavedSearchesAclOutput) CanChangePerms

func (o SavedSearchesAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (SavedSearchesAclOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (SavedSearchesAclOutput) CanShareGlobal

func (o SavedSearchesAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (SavedSearchesAclOutput) CanShareUser

func (o SavedSearchesAclOutput) CanShareUser() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to user level. Defaults to true.

func (SavedSearchesAclOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (SavedSearchesAclOutput) ElementType

func (SavedSearchesAclOutput) ElementType() reflect.Type

func (SavedSearchesAclOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (SavedSearchesAclOutput) Reads

Properties that indicate resource read permissions.

func (SavedSearchesAclOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (SavedSearchesAclOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (SavedSearchesAclOutput) ToSavedSearchesAclOutput

func (o SavedSearchesAclOutput) ToSavedSearchesAclOutput() SavedSearchesAclOutput

func (SavedSearchesAclOutput) ToSavedSearchesAclOutputWithContext

func (o SavedSearchesAclOutput) ToSavedSearchesAclOutputWithContext(ctx context.Context) SavedSearchesAclOutput

func (SavedSearchesAclOutput) ToSavedSearchesAclPtrOutput

func (o SavedSearchesAclOutput) ToSavedSearchesAclPtrOutput() SavedSearchesAclPtrOutput

func (SavedSearchesAclOutput) ToSavedSearchesAclPtrOutputWithContext

func (o SavedSearchesAclOutput) ToSavedSearchesAclPtrOutputWithContext(ctx context.Context) SavedSearchesAclPtrOutput

func (SavedSearchesAclOutput) Writes

Properties that indicate write permissions of the resource.

type SavedSearchesAclPtrInput

type SavedSearchesAclPtrInput interface {
	pulumi.Input

	ToSavedSearchesAclPtrOutput() SavedSearchesAclPtrOutput
	ToSavedSearchesAclPtrOutputWithContext(context.Context) SavedSearchesAclPtrOutput
}

SavedSearchesAclPtrInput is an input type that accepts SavedSearchesAclArgs, SavedSearchesAclPtr and SavedSearchesAclPtrOutput values. You can construct a concrete instance of `SavedSearchesAclPtrInput` via:

        SavedSearchesAclArgs{...}

or:

        nil

type SavedSearchesAclPtrOutput

type SavedSearchesAclPtrOutput struct{ *pulumi.OutputState }

func (SavedSearchesAclPtrOutput) App

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (SavedSearchesAclPtrOutput) CanChangePerms

func (o SavedSearchesAclPtrOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (SavedSearchesAclPtrOutput) CanShareApp

Indicates if the active user can change sharing to app level. Defaults to true.

func (SavedSearchesAclPtrOutput) CanShareGlobal

func (o SavedSearchesAclPtrOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (SavedSearchesAclPtrOutput) CanShareUser

Indicates if the active user can change sharing to user level. Defaults to true.

func (SavedSearchesAclPtrOutput) CanWrite

Indicates if the active user can edit this object. Defaults to true.

func (SavedSearchesAclPtrOutput) Elem

func (SavedSearchesAclPtrOutput) ElementType

func (SavedSearchesAclPtrOutput) ElementType() reflect.Type

func (SavedSearchesAclPtrOutput) Owner

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (SavedSearchesAclPtrOutput) Reads

Properties that indicate resource read permissions.

func (SavedSearchesAclPtrOutput) Removable

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (SavedSearchesAclPtrOutput) Sharing

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (SavedSearchesAclPtrOutput) ToSavedSearchesAclPtrOutput

func (o SavedSearchesAclPtrOutput) ToSavedSearchesAclPtrOutput() SavedSearchesAclPtrOutput

func (SavedSearchesAclPtrOutput) ToSavedSearchesAclPtrOutputWithContext

func (o SavedSearchesAclPtrOutput) ToSavedSearchesAclPtrOutputWithContext(ctx context.Context) SavedSearchesAclPtrOutput

func (SavedSearchesAclPtrOutput) Writes

Properties that indicate write permissions of the resource.

type SavedSearchesArgs

type SavedSearchesArgs struct {
	// The app/user context that is the namespace for the resource
	Acl SavedSearchesAclPtrInput
	// Enable XSOAR alerting (Should by 1 (Enabled) or 0 (Disabled))
	ActionCreateXsoarIncident pulumi.StringPtrInput
	// XSOAR custom incident fields (should be a comma separated list)
	ActionCreateXsoarIncidentParamCustomFields pulumi.StringPtrInput
	// XSOAR incident description
	ActionCreateXsoarIncidentParamDetails pulumi.StringPtrInput
	// XSOAR incident name
	ActionCreateXsoarIncidentParamIncidentName pulumi.StringPtrInput
	// XSOAR incident time
	ActionCreateXsoarIncidentParamOccurred pulumi.StringPtrInput
	// Enable XSOAR alerting sending to all servers (Should by 1 (Enabled) or 0 (Disabled)
	ActionCreateXsoarIncidentParamSendAllServers pulumi.StringPtrInput
	// XSOAR Server instance URL (Should start with https:// || http://)
	ActionCreateXsoarIncidentParamServerUrl pulumi.StringPtrInput
	// XSOAR Severity (1 - Low, 2 - Medium, 3 - High, 4 - Critical)
	ActionCreateXsoarIncidentParamSeverity pulumi.StringPtrInput
	// XSOAR incident type
	ActionCreateXsoarIncidentParamType pulumi.StringPtrInput
	// The password to use when authenticating with the SMTP server. Normally this value is set when editing the email settings, however you can set a clear text password here and it is encrypted on the next platform restart.Defaults to empty string.
	ActionEmailAuthPassword pulumi.StringPtrInput
	// The username to use when authenticating with the SMTP server. If this is empty string, no authentication is attempted. Defaults to empty stringNOTE: Your SMTP server might reject unauthenticated emails.
	ActionEmailAuthUsername pulumi.StringPtrInput
	// BCC email address to use if action.email is enabled.
	ActionEmailBcc pulumi.StringPtrInput
	// CC email address to use if action.email is enabled.
	ActionEmailCc pulumi.StringPtrInput
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionEmailCommand pulumi.StringPtrInput
	// Valid values: (table | plain | html | raw | csv)Specify the format of text in the email. This value also applies to any attachments.
	ActionEmailFormat pulumi.StringPtrInput
	// Email address from which the email action originates.Defaults to splunk@$LOCALHOST or whatever value is set in alert_actions.conf.
	ActionEmailFrom pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in email actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)
	ActionEmailHostname pulumi.StringPtrInput
	// Specify whether to include a link to the results. Defaults to 0.
	ActionEmailIncludeResultsLink pulumi.IntPtrInput
	// Specify whether to include the search that caused an email to be sent. Defaults to 0.
	ActionEmailIncludeSearch pulumi.IntPtrInput
	// Specify whether to show the trigger condition that caused the alert to fire. Defaults to 0.
	ActionEmailIncludeTrigger pulumi.IntPtrInput
	// Specify whether to show the time that the alert was fired. Defaults to 0.
	ActionEmailIncludeTriggerTime pulumi.IntPtrInput
	// Specify whether to show the title and a link to enable the user to edit the saved search. Defaults to 0.
	ActionEmailIncludeViewLink pulumi.IntPtrInput
	// Indicates whether the search results are contained in the body of the email.Results can be either inline or attached to an email.
	ActionEmailInline pulumi.BoolPtrInput
	// Set the address of the MTA server to be used to send the emails.Defaults to <LOCALHOST> or whatever is set in alert_actions.conf.
	ActionEmailMailserver pulumi.StringPtrInput
	// Sets the global maximum number of search results to send when email.action is enabled. Defaults to 100.
	ActionEmailMaxResults pulumi.IntPtrInput
	// Valid values are Integer[m|s|h|d].Specifies the maximum amount of time the execution of an email action takes before the action is aborted. Defaults to 5m.
	ActionEmailMaxTime pulumi.StringPtrInput
	// Customize the message sent in the emailed alert. Defaults to: The alert condition for '$name$' was triggered.
	ActionEmailMessageAlert pulumi.StringPtrInput
	// Customize the message sent in the emailed report. Defaults to: The scheduled report '$name$' has run
	ActionEmailMessageReport pulumi.StringPtrInput
	// The name of the view to deliver if sendpdf is enabled
	ActionEmailPdfview pulumi.StringPtrInput
	// Search string to preprocess results before emailing them. Defaults to empty string (no preprocessing).Usually the preprocessing consists of filtering out unwanted internal fields.
	ActionEmailPreprocessResults pulumi.StringPtrInput
	// Space-separated list. Specifies the set (and load order) of CID fonts for handling Simplified Chinese(gb), Traditional Chinese(cns), Japanese(jp), and Korean(kor) in Integrated PDF Rendering.If multiple fonts provide a glyph for a given character code, the glyph from the first font specified in the list is used.To skip loading any CID fonts, specify the empty string.Defaults to 'gb cns jp kor'
	ActionEmailReportCidFontList pulumi.StringPtrInput
	ActionEmailReportIncludeSplunkLogo pulumi.BoolPtrInput
	// Valid values: (portrait | landscape)Specifies the paper orientation: portrait or landscape. Defaults to portrait.
	ActionEmailReportPaperOrientation pulumi.StringPtrInput
	// Valid values: (letter | legal | ledger | a2 | a3 | a4 | a5)Specifies the paper size for PDFs. Defaults to letter.
	ActionEmailReportPaperSize pulumi.StringPtrInput
	// No Supported
	ActionEmailReportServerEnabled pulumi.BoolPtrInput
	// Not supported.For a default locally installed report server, the URL is http://localhost:8091/
	ActionEmailReportServerUrl pulumi.StringPtrInput
	// Specify whether to send results as a CSV file. Defaults to 0.
	ActionEmailSendCsv pulumi.IntPtrInput
	// Indicates whether to create and send the results as a PDF. Defaults to false.
	ActionEmailSendPdf pulumi.BoolPtrInput
	// Indicates whether to attach the search results in the email.Results can be either attached or inline. See action.email.inline.
	ActionEmailSendResults pulumi.BoolPtrInput
	// Specifies an alternate email subject.Defaults to SplunkAlert-<savedsearchname>.
	ActionEmailSubject pulumi.StringPtrInput
	// A comma or semicolon separated list of recipient email addresses. Required if this search is scheduled and the email alert action is enabled.
	ActionEmailTo pulumi.StringPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionEmailTrackAlert pulumi.BoolPtrInput
	// Valid values are Integer[p].Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows <Integer>, int is the number of scheduled periods. Defaults to 86400 (24 hours).If no actions are triggered, the artifacts have their ttl determined by dispatch.ttl in savedsearches.conf.
	ActionEmailTtl pulumi.StringPtrInput
	// Indicates whether to use SSL when communicating with the SMTP server. Defaults to false.
	ActionEmailUseSsl pulumi.BoolPtrInput
	// Indicates whether to use TLS (transport layer security) when communicating with the SMTP server (starttls).Defaults to false.
	ActionEmailUseTls pulumi.BoolPtrInput
	// Indicates whether columns should be sorted from least wide to most wide, left to right.Only valid if format=text.
	ActionEmailWidthSortColumns pulumi.BoolPtrInput
	// Jira Service Desk account name
	ActionJiraServiceDeskParamAccount pulumi.StringPtrInput
	// Jira issue description
	ActionJiraServiceDeskParamJiraDescription pulumi.StringPtrInput
	// Jira issue type name
	ActionJiraServiceDeskParamJiraIssueType pulumi.StringPtrInput
	// Jira priority of issue
	ActionJiraServiceDeskParamJiraPriority pulumi.StringPtrInput
	// Jira Project name
	ActionJiraServiceDeskParamJiraProject pulumi.StringPtrInput
	// Jira issue title/summary
	ActionJiraServiceDeskParamJiraSummary pulumi.StringPtrInput
	// The PagerDuty custom details information.
	ActionPagerdutyCustomDetails pulumi.StringPtrInput
	// The PagerDuty integration Key.
	ActionPagerdutyIntegrationKey pulumi.StringPtrInput
	// The PagerDuty integration Key override.
	ActionPagerdutyIntegrationKeyOverride pulumi.StringPtrInput
	// The pagerduty integration URL. This integration uses Splunk's native webhooks to send events to PagerDuty.
	ActionPagerdutyIntegrationUrl pulumi.StringPtrInput
	// The pagerduty integration URL override. This integration uses Splunk's native webhooks to send events to PagerDuty.
	ActionPagerdutyIntegrationUrlOverride pulumi.StringPtrInput
	// The search command (or pipeline) which is responsible for executing the action.
	ActionPopulateLookupCommand pulumi.StringPtrInput
	// Lookup name of path of the lookup to populate
	ActionPopulateLookupDest pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms: hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionPopulateLookupHostname pulumi.StringPtrInput
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionPopulateLookupMaxResults pulumi.IntPtrInput
	// Valid values are: Integer[m|s|h|d]Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 5m.
	ActionPopulateLookupMaxTime pulumi.IntPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionPopulateLookupTrackAlert pulumi.BoolPtrInput
	// Valid values are Integer[p]Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, then this specifies the number of scheduled periods. Defaults to 10p.
	ActionPopulateLookupTtl pulumi.StringPtrInput
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionRssCommand pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionRssHostname pulumi.StringPtrInput
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionRssMaxResults pulumi.IntPtrInput
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionRssMaxTime pulumi.IntPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionRssTrackAlert pulumi.BoolPtrInput
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionRssTtl pulumi.StringPtrInput
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionScriptCommand pulumi.StringPtrInput
	// File name of the script to call. Required if script action is enabled
	ActionScriptFilename pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionScriptHostname pulumi.StringPtrInput
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionScriptMaxResults pulumi.IntPtrInput
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionScriptMaxTime pulumi.IntPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionScriptTrackAlert pulumi.BoolPtrInput
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionScriptTtl pulumi.StringPtrInput
	// Include a message attachment. Valid values are message, none, or alert_link
	ActionSlackParamAttachment pulumi.StringPtrInput
	// Slack channel to send the message to (Should start with # or @)
	ActionSlackParamChannel pulumi.StringPtrInput
	// Show one or more fields from the search results below your Slack message. Comma-separated list of field names. Allows wildcards. eg. index,source*
	ActionSlackParamFields pulumi.StringPtrInput
	// Enter the chat message to send to the Slack channel. The message can include tokens that insert text based on the results of the search.
	ActionSlackParamMessage pulumi.StringPtrInput
	// You can override the Slack webhook URL here if you need to send the alert message to a different Slack team
	ActionSlackParamWebhookUrlOverride pulumi.StringPtrInput
	// Account(s) for which the event is/ are to be created across ServiceNow instance(s).
	ActionSnowEventParamAccount pulumi.StringPtrInput
	// You can pass additional information that might be of use to the user. This field can also be used to supply the URL of
	// your Splunk search head. When you use the snow_event.py alert-triggered script, the Splunk platform uses the URL to
	// create a deep link that allows a ServiceNow user to navigate back to this Splunk platform search. You can find the
	// resulting full URL for navigation from ServiceNow to the Splunk platform search by clicking Splunk Drilldown in the
	// event page in ServiceNow. See an example below. Note that if you create events using the commands snowevent or
	// snoweventstream, you must supply the URL in this field.You can pass the URL of Splunk as url=<value>. You can also pass
	// other fields and their values by || separated key-value format. For example, url=<value>||k1=v1||k2=v2||....
	ActionSnowEventParamAdditionalInfo pulumi.StringPtrInput
	// String that represents a configuration item in your network. You can pass value as || separated key-value format. For
	// example, k1=v1||k2=v2.
	ActionSnowEventParamCiIdentifier pulumi.StringPtrInput
	// The custom fields which are configured at the ServiceNow Instance. You can pass the custom fields and their values in
	// the || separated format. For example, custom_field1=value1||custom_field2=value2||...custom_fields used must be present
	// in the em_event table of ServiceNow.
	ActionSnowEventParamCustomFields pulumi.StringPtrInput
	// A brief description of the event.
	ActionSnowEventParamDescription pulumi.StringPtrInput
	// The node, formatted to follow your organization's ITIL standards and mapping. If the node value matches a CI with the
	// same host name, the event is automatically assigned to the matching CI.
	ActionSnowEventParamNode pulumi.StringPtrInput
	// The resource, formatted to follow your organization's ITIL standards and mapping. For example, resource='CPU'.
	ActionSnowEventParamResource pulumi.StringPtrInput
	// The severity associated with the event. 0 - Clear 1 - Critical 2 - Major 3 - Minor 4 - Warning
	ActionSnowEventParamSeverity pulumi.IntPtrInput
	// The type, formatted to follow your organization's ITIL standards and mapping. For example, type='Virtual Machine'.
	ActionSnowEventParamType pulumi.StringPtrInput
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionSummaryIndexCommand pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in summary-index alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)protocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionSummaryIndexHostname pulumi.StringPtrInput
	// Determines whether to execute the summary indexing action as part of the scheduled search.NOTE: This option is considered only if the summary index action is enabled and is always executed (in other words, if counttype = always).Defaults to true
	ActionSummaryIndexInline pulumi.BoolPtrInput
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionSummaryIndexMaxResults pulumi.IntPtrInput
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionSummaryIndexMaxTime pulumi.IntPtrInput
	// Specifies the name of the summary index where the results of the scheduled search are saved.Defaults to summary.
	ActionSummaryIndexName pulumi.StringPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionSummaryIndexTrackAlert pulumi.BoolPtrInput
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionSummaryIndexTtl pulumi.StringPtrInput
	// URL to send the HTTP POST request to. Must be accessible from the Splunk server
	ActionWebhookParamUrl pulumi.StringPtrInput
	// A comma-separated list of actions to enable. For example: rss,email
	Actions pulumi.StringPtrInput
	// One of the following strings: greater than, less than, equal to, rises by, drops by, rises by perc, drops by percUsed with alertThreshold to trigger alert actions.
	AlertComparator pulumi.StringPtrInput
	// Contains a conditional search that is evaluated against the results of the saved search. Defaults to an empty string.
	AlertCondition pulumi.StringPtrInput
	// Specifies whether alert actions are applied to the entire result set or on each individual result.Defaults to 1 (true).
	AlertDigestMode pulumi.BoolPtrInput
	// Valid values: [number][time-unit]Sets the period of time to show the alert in the dashboard. Defaults to 24h.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
	AlertExpires pulumi.StringPtrInput
	// Valid values: (1 | 2 | 3 | 4 | 5 | 6) Sets the alert severity level.Valid values are:1 DEBUG 2 INFO 3 WARN 4 ERROR 5 SEVERE 6 FATAL Defaults to 3.
	AlertSeverity pulumi.IntPtrInput
	// Indicates whether alert suppression is enabled for this scheduled search.
	AlertSuppress pulumi.BoolPtrInput
	// Comma delimited list of fields to use for suppression when doing per result alerting. Required if suppression is turned on and per result alerting is enabled.
	AlertSuppressFields pulumi.StringPtrInput
	// Valid values: [number][time-unit] Specifies the suppresion period. Only valid if alert.supress is enabled.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
	AlertSuppressPeriod pulumi.StringPtrInput
	// Valid values are: Integer[%!](MISSING)Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alertComparator is set to rises by perc or drops by perc.
	AlertThreshold pulumi.StringPtrInput
	// Valid values: (true | false | auto) Specifies whether to track the actions triggered by this scheduled search.auto - determine whether to track or not based on the tracking setting of each action, do not track scheduled searches that always trigger actions. Default value true - force alert tracking.false - disable alert tracking for this search.
	AlertTrack pulumi.BoolPtrInput
	// What to base the alert on, overriden by alertCondition if it is specified. Valid values are: always, custom, number of events, number of hosts, number of sources.
	AlertType pulumi.StringPtrInput
	// Allows the search scheduler to distribute scheduled searches randomly and more evenly over their specified search periods.
	AllowSkew pulumi.StringPtrInput
	// Indicates whether the scheduler should ensure that the data for this search is automatically summarized. Defaults to 0.
	AutoSummarize pulumi.BoolPtrInput
	// An auto summarization template for this search. See auto summarization options in savedsearches.conf for more details.
	AutoSummarizeCommand pulumi.StringPtrInput
	// Cron schedule that probes and generates the summaries for this saved search.The default value is */10 * * * * and corresponds to \`every ten hours\`.
	AutoSummarizeCronSchedule pulumi.StringPtrInput
	// A time string that specifies the earliest time for summarizing this search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	AutoSummarizeDispatchEarliestTime pulumi.StringPtrInput
	// A time string that specifies the latest time for summarizing this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	AutoSummarizeDispatchLatestTime pulumi.StringPtrInput
	// Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %!F(MISSING)T%!T(MISSING).%!Q(MISSING)%!:(MISSING)z
	AutoSummarizeDispatchTimeFormat pulumi.StringPtrInput
	// Valid values: Integer[p]. Defaults to 60.Indicates the time to live (in seconds) for the artifacts of the summarization of the scheduled search.
	AutoSummarizeDispatchTtl pulumi.StringPtrInput
	// The maximum number of buckets with the suspended summarization before the summarization search is completely stopped, and the summarization of the search is suspended for auto_summarize.suspend_period. Defaults to 2.
	AutoSummarizeMaxDisabledBuckets pulumi.IntPtrInput
	// The maximum ratio of summary_size/bucket_size, which specifies when to stop summarization and deem it unhelpful for a bucket. Defaults to 0.1 Note: The test is only performed if the summary size is larger than auto_summarize.max_summary_size.
	AutoSummarizeMaxSummaryRatio pulumi.Float64PtrInput
	// The minimum summary size, in bytes, before testing whether the summarization is helpful.The default value is 52428800 and is equivalent to 5MB.
	AutoSummarizeMaxSummarySize pulumi.IntPtrInput
	// Maximum time (in seconds) that the summary search is allowed to run. Defaults to 3600.Note: This is an approximate time. The summary search stops at clean bucket boundaries.
	AutoSummarizeMaxTime pulumi.IntPtrInput
	// Time specfier indicating when to suspend summarization of this search if the summarization is deemed unhelpful.Defaults to 24h.
	AutoSummarizeSuspendPeriod pulumi.StringPtrInput
	// The list of time ranges that each summarized chunk should span. This comprises the list of available granularity levels for which summaries would be available. Specify a comma delimited list of time specifiers.For example a timechart over the last month whose granuality is at the day level should set this to 1d. If you need the same data summarized at the hour level for weekly charts, use: 1h,1d.
	AutoSummarizeTimespan pulumi.StringPtrInput
	// Valid values: cron stringThe cron schedule to execute this search. For example: */5 * * * * causes the search to execute every 5 minutes.
	CronSchedule pulumi.StringPtrInput
	// Human-readable description of this saved search. Defaults to empty string.
	Description pulumi.StringPtrInput
	// Indicates if the saved search is enabled. Defaults to 0.Disabled saved searches are not visible in Splunk Web.
	Disabled pulumi.BoolPtrInput
	// The maximum number of timeline buckets. Defaults to 0.
	DispatchBuckets pulumi.IntPtrInput
	// A time string that specifies the earliest time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchEarliestTime pulumi.StringPtrInput
	// A time string that specifies the earliest index time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexEarliest pulumi.StringPtrInput
	// A time string that specifies the latest index time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexLatest pulumi.StringPtrInput
	// A time string that specifies the earliest time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexedRealtime pulumi.BoolPtrInput
	// Allows for a per-job override of the [search] indexedRealtimeDiskSyncDelay setting in limits.conf.
	DispatchIndexedRealtimeMinspan pulumi.IntPtrInput
	// Allows for a per-job override of the [search] indexedRealtimeDiskSyncDelay setting in limits.conf.
	DispatchIndexedRealtimeOffset pulumi.IntPtrInput
	// A time string that specifies the latest time for this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchLatestTime pulumi.StringPtrInput
	// Enables or disables the lookups for this search. Defaults to 1.
	DispatchLookups pulumi.BoolPtrInput
	// The maximum number of results before finalizing the search. Defaults to 500000.
	DispatchMaxCount pulumi.IntPtrInput
	// Indicates the maximum amount of time (in seconds) before finalizing the search. Defaults to 0.
	DispatchMaxTime pulumi.IntPtrInput
	// Specifies, in seconds, how frequently the MapReduce reduce phase runs on accumulated map values. Defaults to 10.
	DispatchReduceFreq pulumi.IntPtrInput
	// Whether to back fill the real time window for this search. Parameter valid only if this is a real time search. Defaults to 0.
	DispatchRtBackfill pulumi.BoolPtrInput
	// Allows for a per-job override of the [search] indexedRealtimeMaximumSpan setting in limits.conf.
	DispatchRtMaximumSpan pulumi.IntPtrInput
	// Specifies whether a new search process spawns when this saved search is executed. Defaults to 1. Searches against indexes must run in a separate process.
	DispatchSpawnProcess pulumi.BoolPtrInput
	// A time format string that defines the time format for specifying the earliest and latest time. Defaults to %!F(MISSING)T%!T(MISSING).%!Q(MISSING)%!:(MISSING)z
	DispatchTimeFormat pulumi.StringPtrInput
	// Valid values: Integer[p]. Defaults to 2p.Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no actions are triggered.
	DispatchTtl pulumi.StringPtrInput
	// Defines the default UI view name (not label) in which to load the results. Accessibility is subject to the user having sufficient permissions.
	DisplayView pulumi.StringPtrInput
	// Whether this search is to be run on a schedule
	IsScheduled pulumi.BoolPtrInput
	// Specifies whether this saved search should be listed in the visible saved search list. Defaults to 1.
	IsVisible pulumi.BoolPtrInput
	// The maximum number of concurrent instances of this search the scheduler is allowed to run. Defaults to 1.
	MaxConcurrent pulumi.IntPtrInput
	// A name for the search.
	Name pulumi.StringPtrInput
	// Defaults to 1. Controls the way the scheduler computes the next execution time of a scheduled search. If this value is set to 1, the scheduler bases its determination of the next scheduled search execution time on the current time. If this value is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time. This is called continuous scheduling. If set to 0, the scheduler never skips scheduled execution periods. However, the execution of the saved search might fall behind depending on the scheduler load. Use continuous scheduling whenever you enable the summary index option.
	RealtimeSchedule pulumi.BoolPtrInput
	// Specifies a field used by Splunk Web to denote the app this search should be dispatched in.
	RequestUiDispatchApp pulumi.StringPtrInput
	// Specifies a field used by Splunk Web to denote the view this search should be displayed in.
	RequestUiDispatchView pulumi.StringPtrInput
	// Specifies whether to restart a real-time search managed by the scheduler when a search peer becomes available for this saved search. Defaults to 1.
	RestartOnSearchpeerAdd pulumi.BoolPtrInput
	// Indicates whether this search runs at startup. If it does not run on startup, it runs at the next scheduled time. Defaults to 0. Set to 1 for scheduled searches that populate lookup tables.
	RunOnStartup pulumi.BoolPtrInput
	// Raises the scheduling priority of the named search. Defaults to Default
	SchedulePriority pulumi.StringPtrInput
	// Time window (in minutes) during which the search has lower priority. Defaults to 0. The scheduler can give higher priority to more critical searches during this window. The window must be smaller than the search period.Set to auto to let the scheduler determine the optimal window value automatically. Requires the editSearchScheduleWindow capability to override auto.
	ScheduleWindow pulumi.StringPtrInput
	// Required when creating a new search.
	Search pulumi.StringInput
	// Defines the viewstate id associated with the UI view listed in 'displayview'.
	Vsid pulumi.StringPtrInput
	// Specifies the new workload pool where the existing running search will be placed.`
	WorkloadPool pulumi.StringPtrInput
}

The set of arguments for constructing a SavedSearches resource.

func (SavedSearchesArgs) ElementType

func (SavedSearchesArgs) ElementType() reflect.Type

type SavedSearchesArray added in v0.2.1

type SavedSearchesArray []SavedSearchesInput

func (SavedSearchesArray) ElementType added in v0.2.1

func (SavedSearchesArray) ElementType() reflect.Type

func (SavedSearchesArray) ToSavedSearchesArrayOutput added in v0.2.1

func (i SavedSearchesArray) ToSavedSearchesArrayOutput() SavedSearchesArrayOutput

func (SavedSearchesArray) ToSavedSearchesArrayOutputWithContext added in v0.2.1

func (i SavedSearchesArray) ToSavedSearchesArrayOutputWithContext(ctx context.Context) SavedSearchesArrayOutput

type SavedSearchesArrayInput added in v0.2.1

type SavedSearchesArrayInput interface {
	pulumi.Input

	ToSavedSearchesArrayOutput() SavedSearchesArrayOutput
	ToSavedSearchesArrayOutputWithContext(context.Context) SavedSearchesArrayOutput
}

SavedSearchesArrayInput is an input type that accepts SavedSearchesArray and SavedSearchesArrayOutput values. You can construct a concrete instance of `SavedSearchesArrayInput` via:

SavedSearchesArray{ SavedSearchesArgs{...} }

type SavedSearchesArrayOutput added in v0.2.1

type SavedSearchesArrayOutput struct{ *pulumi.OutputState }

func (SavedSearchesArrayOutput) ElementType added in v0.2.1

func (SavedSearchesArrayOutput) ElementType() reflect.Type

func (SavedSearchesArrayOutput) Index added in v0.2.1

func (SavedSearchesArrayOutput) ToSavedSearchesArrayOutput added in v0.2.1

func (o SavedSearchesArrayOutput) ToSavedSearchesArrayOutput() SavedSearchesArrayOutput

func (SavedSearchesArrayOutput) ToSavedSearchesArrayOutputWithContext added in v0.2.1

func (o SavedSearchesArrayOutput) ToSavedSearchesArrayOutputWithContext(ctx context.Context) SavedSearchesArrayOutput

type SavedSearchesInput

type SavedSearchesInput interface {
	pulumi.Input

	ToSavedSearchesOutput() SavedSearchesOutput
	ToSavedSearchesOutputWithContext(ctx context.Context) SavedSearchesOutput
}

type SavedSearchesMap added in v0.2.1

type SavedSearchesMap map[string]SavedSearchesInput

func (SavedSearchesMap) ElementType added in v0.2.1

func (SavedSearchesMap) ElementType() reflect.Type

func (SavedSearchesMap) ToSavedSearchesMapOutput added in v0.2.1

func (i SavedSearchesMap) ToSavedSearchesMapOutput() SavedSearchesMapOutput

func (SavedSearchesMap) ToSavedSearchesMapOutputWithContext added in v0.2.1

func (i SavedSearchesMap) ToSavedSearchesMapOutputWithContext(ctx context.Context) SavedSearchesMapOutput

type SavedSearchesMapInput added in v0.2.1

type SavedSearchesMapInput interface {
	pulumi.Input

	ToSavedSearchesMapOutput() SavedSearchesMapOutput
	ToSavedSearchesMapOutputWithContext(context.Context) SavedSearchesMapOutput
}

SavedSearchesMapInput is an input type that accepts SavedSearchesMap and SavedSearchesMapOutput values. You can construct a concrete instance of `SavedSearchesMapInput` via:

SavedSearchesMap{ "key": SavedSearchesArgs{...} }

type SavedSearchesMapOutput added in v0.2.1

type SavedSearchesMapOutput struct{ *pulumi.OutputState }

func (SavedSearchesMapOutput) ElementType added in v0.2.1

func (SavedSearchesMapOutput) ElementType() reflect.Type

func (SavedSearchesMapOutput) MapIndex added in v0.2.1

func (SavedSearchesMapOutput) ToSavedSearchesMapOutput added in v0.2.1

func (o SavedSearchesMapOutput) ToSavedSearchesMapOutput() SavedSearchesMapOutput

func (SavedSearchesMapOutput) ToSavedSearchesMapOutputWithContext added in v0.2.1

func (o SavedSearchesMapOutput) ToSavedSearchesMapOutputWithContext(ctx context.Context) SavedSearchesMapOutput

type SavedSearchesOutput

type SavedSearchesOutput struct{ *pulumi.OutputState }

func (SavedSearchesOutput) Acl added in v1.1.5

The app/user context that is the namespace for the resource

func (SavedSearchesOutput) ActionCreateXsoarIncident added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncident() pulumi.StringPtrOutput

Enable XSOAR alerting (Should by 1 (Enabled) or 0 (Disabled))

func (SavedSearchesOutput) ActionCreateXsoarIncidentParamCustomFields added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncidentParamCustomFields() pulumi.StringPtrOutput

XSOAR custom incident fields (should be a comma separated list)

func (SavedSearchesOutput) ActionCreateXsoarIncidentParamDetails added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncidentParamDetails() pulumi.StringPtrOutput

XSOAR incident description

func (SavedSearchesOutput) ActionCreateXsoarIncidentParamIncidentName added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncidentParamIncidentName() pulumi.StringPtrOutput

XSOAR incident name

func (SavedSearchesOutput) ActionCreateXsoarIncidentParamOccurred added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncidentParamOccurred() pulumi.StringPtrOutput

XSOAR incident time

func (SavedSearchesOutput) ActionCreateXsoarIncidentParamSendAllServers added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncidentParamSendAllServers() pulumi.StringPtrOutput

Enable XSOAR alerting sending to all servers (Should by 1 (Enabled) or 0 (Disabled)

func (SavedSearchesOutput) ActionCreateXsoarIncidentParamServerUrl added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncidentParamServerUrl() pulumi.StringPtrOutput

XSOAR Server instance URL (Should start with https:// || http://)

func (SavedSearchesOutput) ActionCreateXsoarIncidentParamSeverity added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncidentParamSeverity() pulumi.StringPtrOutput

XSOAR Severity (1 - Low, 2 - Medium, 3 - High, 4 - Critical)

func (SavedSearchesOutput) ActionCreateXsoarIncidentParamType added in v1.1.5

func (o SavedSearchesOutput) ActionCreateXsoarIncidentParamType() pulumi.StringPtrOutput

XSOAR incident type

func (SavedSearchesOutput) ActionEmail added in v1.1.5

func (o SavedSearchesOutput) ActionEmail() pulumi.BoolOutput

The state of the email action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.

func (SavedSearchesOutput) ActionEmailAuthPassword added in v1.1.5

func (o SavedSearchesOutput) ActionEmailAuthPassword() pulumi.StringOutput

The password to use when authenticating with the SMTP server. Normally this value is set when editing the email settings, however you can set a clear text password here and it is encrypted on the next platform restart.Defaults to empty string.

func (SavedSearchesOutput) ActionEmailAuthUsername added in v1.1.5

func (o SavedSearchesOutput) ActionEmailAuthUsername() pulumi.StringOutput

The username to use when authenticating with the SMTP server. If this is empty string, no authentication is attempted. Defaults to empty stringNOTE: Your SMTP server might reject unauthenticated emails.

func (SavedSearchesOutput) ActionEmailBcc added in v1.1.5

func (o SavedSearchesOutput) ActionEmailBcc() pulumi.StringOutput

BCC email address to use if action.email is enabled.

func (SavedSearchesOutput) ActionEmailCc added in v1.1.5

func (o SavedSearchesOutput) ActionEmailCc() pulumi.StringOutput

CC email address to use if action.email is enabled.

func (SavedSearchesOutput) ActionEmailCommand added in v1.1.5

func (o SavedSearchesOutput) ActionEmailCommand() pulumi.StringOutput

The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.

func (SavedSearchesOutput) ActionEmailFormat added in v1.1.5

func (o SavedSearchesOutput) ActionEmailFormat() pulumi.StringOutput

Valid values: (table | plain | html | raw | csv)Specify the format of text in the email. This value also applies to any attachments.

func (SavedSearchesOutput) ActionEmailFrom added in v1.1.5

func (o SavedSearchesOutput) ActionEmailFrom() pulumi.StringOutput

Email address from which the email action originates.Defaults to splunk@$LOCALHOST or whatever value is set in alert_actions.conf.

func (SavedSearchesOutput) ActionEmailHostname added in v1.1.5

func (o SavedSearchesOutput) ActionEmailHostname() pulumi.StringOutput

Sets the hostname used in the web link (url) sent in email actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)

func (o SavedSearchesOutput) ActionEmailIncludeResultsLink() pulumi.IntOutput

Specify whether to include a link to the results. Defaults to 0.

func (SavedSearchesOutput) ActionEmailIncludeSearch added in v1.1.5

func (o SavedSearchesOutput) ActionEmailIncludeSearch() pulumi.IntOutput

Specify whether to include the search that caused an email to be sent. Defaults to 0.

func (SavedSearchesOutput) ActionEmailIncludeTrigger added in v1.1.5

func (o SavedSearchesOutput) ActionEmailIncludeTrigger() pulumi.IntOutput

Specify whether to show the trigger condition that caused the alert to fire. Defaults to 0.

func (SavedSearchesOutput) ActionEmailIncludeTriggerTime added in v1.1.5

func (o SavedSearchesOutput) ActionEmailIncludeTriggerTime() pulumi.IntOutput

Specify whether to show the time that the alert was fired. Defaults to 0.

func (o SavedSearchesOutput) ActionEmailIncludeViewLink() pulumi.IntOutput

Specify whether to show the title and a link to enable the user to edit the saved search. Defaults to 0.

func (SavedSearchesOutput) ActionEmailInline added in v1.1.5

func (o SavedSearchesOutput) ActionEmailInline() pulumi.BoolOutput

Indicates whether the search results are contained in the body of the email.Results can be either inline or attached to an email.

func (SavedSearchesOutput) ActionEmailMailserver added in v1.1.5

func (o SavedSearchesOutput) ActionEmailMailserver() pulumi.StringOutput

Set the address of the MTA server to be used to send the emails.Defaults to <LOCALHOST> or whatever is set in alert_actions.conf.

func (SavedSearchesOutput) ActionEmailMaxResults added in v1.1.5

func (o SavedSearchesOutput) ActionEmailMaxResults() pulumi.IntOutput

Sets the global maximum number of search results to send when email.action is enabled. Defaults to 100.

func (SavedSearchesOutput) ActionEmailMaxTime added in v1.1.5

func (o SavedSearchesOutput) ActionEmailMaxTime() pulumi.StringOutput

Valid values are Integer[m|s|h|d].Specifies the maximum amount of time the execution of an email action takes before the action is aborted. Defaults to 5m.

func (SavedSearchesOutput) ActionEmailMessageAlert added in v1.1.5

func (o SavedSearchesOutput) ActionEmailMessageAlert() pulumi.StringOutput

Customize the message sent in the emailed alert. Defaults to: The alert condition for '$name$' was triggered.

func (SavedSearchesOutput) ActionEmailMessageReport added in v1.1.5

func (o SavedSearchesOutput) ActionEmailMessageReport() pulumi.StringOutput

Customize the message sent in the emailed report. Defaults to: The scheduled report '$name$' has run

func (SavedSearchesOutput) ActionEmailPdfview added in v1.1.5

func (o SavedSearchesOutput) ActionEmailPdfview() pulumi.StringOutput

The name of the view to deliver if sendpdf is enabled

func (SavedSearchesOutput) ActionEmailPreprocessResults added in v1.1.5

func (o SavedSearchesOutput) ActionEmailPreprocessResults() pulumi.StringOutput

Search string to preprocess results before emailing them. Defaults to empty string (no preprocessing).Usually the preprocessing consists of filtering out unwanted internal fields.

func (SavedSearchesOutput) ActionEmailReportCidFontList added in v1.1.5

func (o SavedSearchesOutput) ActionEmailReportCidFontList() pulumi.StringOutput

Space-separated list. Specifies the set (and load order) of CID fonts for handling Simplified Chinese(gb), Traditional Chinese(cns), Japanese(jp), and Korean(kor) in Integrated PDF Rendering.If multiple fonts provide a glyph for a given character code, the glyph from the first font specified in the list is used.To skip loading any CID fonts, specify the empty string.Defaults to 'gb cns jp kor'

func (o SavedSearchesOutput) ActionEmailReportIncludeSplunkLogo() pulumi.BoolOutput

Indicates whether to include the Splunk logo with the report.

func (SavedSearchesOutput) ActionEmailReportPaperOrientation added in v1.1.5

func (o SavedSearchesOutput) ActionEmailReportPaperOrientation() pulumi.StringOutput

Valid values: (portrait | landscape)Specifies the paper orientation: portrait or landscape. Defaults to portrait.

func (SavedSearchesOutput) ActionEmailReportPaperSize added in v1.1.5

func (o SavedSearchesOutput) ActionEmailReportPaperSize() pulumi.StringOutput

Valid values: (letter | legal | ledger | a2 | a3 | a4 | a5)Specifies the paper size for PDFs. Defaults to letter.

func (SavedSearchesOutput) ActionEmailReportServerEnabled added in v1.1.5

func (o SavedSearchesOutput) ActionEmailReportServerEnabled() pulumi.BoolOutput

No Supported

func (SavedSearchesOutput) ActionEmailReportServerUrl added in v1.1.5

func (o SavedSearchesOutput) ActionEmailReportServerUrl() pulumi.StringOutput

Not supported.For a default locally installed report server, the URL is http://localhost:8091/

func (SavedSearchesOutput) ActionEmailSendCsv added in v1.1.5

func (o SavedSearchesOutput) ActionEmailSendCsv() pulumi.IntOutput

Specify whether to send results as a CSV file. Defaults to 0.

func (SavedSearchesOutput) ActionEmailSendPdf added in v1.1.5

func (o SavedSearchesOutput) ActionEmailSendPdf() pulumi.BoolOutput

Indicates whether to create and send the results as a PDF. Defaults to false.

func (SavedSearchesOutput) ActionEmailSendResults added in v1.1.5

func (o SavedSearchesOutput) ActionEmailSendResults() pulumi.BoolOutput

Indicates whether to attach the search results in the email.Results can be either attached or inline. See action.email.inline.

func (SavedSearchesOutput) ActionEmailSubject added in v1.1.5

func (o SavedSearchesOutput) ActionEmailSubject() pulumi.StringOutput

Specifies an alternate email subject.Defaults to SplunkAlert-<savedsearchname>.

func (SavedSearchesOutput) ActionEmailTo added in v1.1.5

func (o SavedSearchesOutput) ActionEmailTo() pulumi.StringOutput

A comma or semicolon separated list of recipient email addresses. Required if this search is scheduled and the email alert action is enabled.

func (SavedSearchesOutput) ActionEmailTrackAlert added in v1.1.5

func (o SavedSearchesOutput) ActionEmailTrackAlert() pulumi.BoolOutput

Indicates whether the execution of this action signifies a trackable alert.

func (SavedSearchesOutput) ActionEmailTtl added in v1.1.5

func (o SavedSearchesOutput) ActionEmailTtl() pulumi.StringOutput

Valid values are Integer[p].Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows <Integer>, int is the number of scheduled periods. Defaults to 86400 (24 hours).If no actions are triggered, the artifacts have their ttl determined by dispatch.ttl in savedsearches.conf.

func (SavedSearchesOutput) ActionEmailUseSsl added in v1.1.5

func (o SavedSearchesOutput) ActionEmailUseSsl() pulumi.BoolOutput

Indicates whether to use SSL when communicating with the SMTP server. Defaults to false.

func (SavedSearchesOutput) ActionEmailUseTls added in v1.1.5

func (o SavedSearchesOutput) ActionEmailUseTls() pulumi.BoolOutput

Indicates whether to use TLS (transport layer security) when communicating with the SMTP server (starttls).Defaults to false.

func (SavedSearchesOutput) ActionEmailWidthSortColumns added in v1.1.5

func (o SavedSearchesOutput) ActionEmailWidthSortColumns() pulumi.BoolOutput

Indicates whether columns should be sorted from least wide to most wide, left to right.Only valid if format=text.

func (SavedSearchesOutput) ActionJiraServiceDeskParamAccount added in v1.1.5

func (o SavedSearchesOutput) ActionJiraServiceDeskParamAccount() pulumi.StringPtrOutput

Jira Service Desk account name

func (SavedSearchesOutput) ActionJiraServiceDeskParamJiraDescription added in v1.1.5

func (o SavedSearchesOutput) ActionJiraServiceDeskParamJiraDescription() pulumi.StringPtrOutput

Jira issue description

func (SavedSearchesOutput) ActionJiraServiceDeskParamJiraIssueType added in v1.1.5

func (o SavedSearchesOutput) ActionJiraServiceDeskParamJiraIssueType() pulumi.StringPtrOutput

Jira issue type name

func (SavedSearchesOutput) ActionJiraServiceDeskParamJiraPriority added in v1.1.5

func (o SavedSearchesOutput) ActionJiraServiceDeskParamJiraPriority() pulumi.StringPtrOutput

Jira priority of issue

func (SavedSearchesOutput) ActionJiraServiceDeskParamJiraProject added in v1.1.5

func (o SavedSearchesOutput) ActionJiraServiceDeskParamJiraProject() pulumi.StringPtrOutput

Jira Project name

func (SavedSearchesOutput) ActionJiraServiceDeskParamJiraSummary added in v1.1.5

func (o SavedSearchesOutput) ActionJiraServiceDeskParamJiraSummary() pulumi.StringPtrOutput

Jira issue title/summary

func (SavedSearchesOutput) ActionPagerdutyCustomDetails added in v1.2.2

func (o SavedSearchesOutput) ActionPagerdutyCustomDetails() pulumi.StringOutput

The PagerDuty custom details information.

func (SavedSearchesOutput) ActionPagerdutyIntegrationKey added in v1.2.2

func (o SavedSearchesOutput) ActionPagerdutyIntegrationKey() pulumi.StringOutput

The PagerDuty integration Key.

func (SavedSearchesOutput) ActionPagerdutyIntegrationKeyOverride added in v1.2.2

func (o SavedSearchesOutput) ActionPagerdutyIntegrationKeyOverride() pulumi.StringOutput

The PagerDuty integration Key override.

func (SavedSearchesOutput) ActionPagerdutyIntegrationUrl added in v1.2.1

func (o SavedSearchesOutput) ActionPagerdutyIntegrationUrl() pulumi.StringPtrOutput

The pagerduty integration URL. This integration uses Splunk's native webhooks to send events to PagerDuty.

func (SavedSearchesOutput) ActionPagerdutyIntegrationUrlOverride added in v1.2.1

func (o SavedSearchesOutput) ActionPagerdutyIntegrationUrlOverride() pulumi.StringPtrOutput

The pagerduty integration URL override. This integration uses Splunk's native webhooks to send events to PagerDuty.

func (SavedSearchesOutput) ActionPopulateLookup added in v1.1.5

func (o SavedSearchesOutput) ActionPopulateLookup() pulumi.BoolOutput

The state of the populate lookup action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.

func (SavedSearchesOutput) ActionPopulateLookupCommand added in v1.1.5

func (o SavedSearchesOutput) ActionPopulateLookupCommand() pulumi.StringOutput

The search command (or pipeline) which is responsible for executing the action.

func (SavedSearchesOutput) ActionPopulateLookupDest added in v1.1.5

func (o SavedSearchesOutput) ActionPopulateLookupDest() pulumi.StringOutput

Lookup name of path of the lookup to populate

func (SavedSearchesOutput) ActionPopulateLookupHostname added in v1.1.5

func (o SavedSearchesOutput) ActionPopulateLookupHostname() pulumi.StringOutput

Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms: hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)

func (SavedSearchesOutput) ActionPopulateLookupMaxResults added in v1.1.5

func (o SavedSearchesOutput) ActionPopulateLookupMaxResults() pulumi.IntOutput

Sets the maximum number of search results sent using alerts. Defaults to 100.

func (SavedSearchesOutput) ActionPopulateLookupMaxTime added in v1.1.5

func (o SavedSearchesOutput) ActionPopulateLookupMaxTime() pulumi.IntOutput

Valid values are: Integer[m|s|h|d]Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 5m.

func (SavedSearchesOutput) ActionPopulateLookupTrackAlert added in v1.1.5

func (o SavedSearchesOutput) ActionPopulateLookupTrackAlert() pulumi.BoolOutput

Indicates whether the execution of this action signifies a trackable alert.

func (SavedSearchesOutput) ActionPopulateLookupTtl added in v1.1.5

func (o SavedSearchesOutput) ActionPopulateLookupTtl() pulumi.StringOutput

Valid values are Integer[p]Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, then this specifies the number of scheduled periods. Defaults to 10p.

func (SavedSearchesOutput) ActionRss added in v1.1.5

func (o SavedSearchesOutput) ActionRss() pulumi.BoolOutput

The state of the rss action. Read-only attribute. Value ignored on POST.Use actions to specify a list of enabled actions. Defaults to 0.

func (SavedSearchesOutput) ActionRssCommand added in v1.1.5

func (o SavedSearchesOutput) ActionRssCommand() pulumi.StringOutput

The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.

func (SavedSearchesOutput) ActionRssHostname added in v1.1.5

func (o SavedSearchesOutput) ActionRssHostname() pulumi.StringOutput

Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)

func (SavedSearchesOutput) ActionRssMaxResults added in v1.1.5

func (o SavedSearchesOutput) ActionRssMaxResults() pulumi.IntOutput

Sets the maximum number of search results sent using alerts. Defaults to 100.

func (SavedSearchesOutput) ActionRssMaxTime added in v1.1.5

func (o SavedSearchesOutput) ActionRssMaxTime() pulumi.IntOutput

Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.

func (SavedSearchesOutput) ActionRssTrackAlert added in v1.1.5

func (o SavedSearchesOutput) ActionRssTrackAlert() pulumi.BoolOutput

Indicates whether the execution of this action signifies a trackable alert.

func (SavedSearchesOutput) ActionRssTtl added in v1.1.5

func (o SavedSearchesOutput) ActionRssTtl() pulumi.StringOutput

Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).

func (SavedSearchesOutput) ActionScript added in v1.1.5

func (o SavedSearchesOutput) ActionScript() pulumi.BoolOutput

The state of the script action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.

func (SavedSearchesOutput) ActionScriptCommand added in v1.1.5

func (o SavedSearchesOutput) ActionScriptCommand() pulumi.StringOutput

The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.

func (SavedSearchesOutput) ActionScriptFilename added in v1.1.5

func (o SavedSearchesOutput) ActionScriptFilename() pulumi.StringOutput

File name of the script to call. Required if script action is enabled

func (SavedSearchesOutput) ActionScriptHostname added in v1.1.5

func (o SavedSearchesOutput) ActionScriptHostname() pulumi.StringOutput

Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)

func (SavedSearchesOutput) ActionScriptMaxResults added in v1.1.5

func (o SavedSearchesOutput) ActionScriptMaxResults() pulumi.IntOutput

Sets the maximum number of search results sent using alerts. Defaults to 100.

func (SavedSearchesOutput) ActionScriptMaxTime added in v1.1.5

func (o SavedSearchesOutput) ActionScriptMaxTime() pulumi.IntOutput

Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.

func (SavedSearchesOutput) ActionScriptTrackAlert added in v1.1.5

func (o SavedSearchesOutput) ActionScriptTrackAlert() pulumi.BoolOutput

Indicates whether the execution of this action signifies a trackable alert.

func (SavedSearchesOutput) ActionScriptTtl added in v1.1.5

func (o SavedSearchesOutput) ActionScriptTtl() pulumi.StringOutput

Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).

func (SavedSearchesOutput) ActionSlackParamAttachment added in v1.1.5

func (o SavedSearchesOutput) ActionSlackParamAttachment() pulumi.StringPtrOutput

Include a message attachment. Valid values are message, none, or alert_link

func (SavedSearchesOutput) ActionSlackParamChannel added in v1.1.5

func (o SavedSearchesOutput) ActionSlackParamChannel() pulumi.StringPtrOutput

Slack channel to send the message to (Should start with # or @)

func (SavedSearchesOutput) ActionSlackParamFields added in v1.1.5

func (o SavedSearchesOutput) ActionSlackParamFields() pulumi.StringPtrOutput

Show one or more fields from the search results below your Slack message. Comma-separated list of field names. Allows wildcards. eg. index,source*

func (SavedSearchesOutput) ActionSlackParamMessage added in v1.1.5

func (o SavedSearchesOutput) ActionSlackParamMessage() pulumi.StringPtrOutput

Enter the chat message to send to the Slack channel. The message can include tokens that insert text based on the results of the search.

func (SavedSearchesOutput) ActionSlackParamWebhookUrlOverride added in v1.1.5

func (o SavedSearchesOutput) ActionSlackParamWebhookUrlOverride() pulumi.StringPtrOutput

You can override the Slack webhook URL here if you need to send the alert message to a different Slack team

func (SavedSearchesOutput) ActionSnowEventParamAccount added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamAccount() pulumi.StringOutput

Account(s) for which the event is/ are to be created across ServiceNow instance(s).

func (SavedSearchesOutput) ActionSnowEventParamAdditionalInfo added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamAdditionalInfo() pulumi.StringOutput

You can pass additional information that might be of use to the user. This field can also be used to supply the URL of your Splunk search head. When you use the snow_event.py alert-triggered script, the Splunk platform uses the URL to create a deep link that allows a ServiceNow user to navigate back to this Splunk platform search. You can find the resulting full URL for navigation from ServiceNow to the Splunk platform search by clicking Splunk Drilldown in the event page in ServiceNow. See an example below. Note that if you create events using the commands snowevent or snoweventstream, you must supply the URL in this field.You can pass the URL of Splunk as url=<value>. You can also pass other fields and their values by || separated key-value format. For example, url=<value>||k1=v1||k2=v2||....

func (SavedSearchesOutput) ActionSnowEventParamCiIdentifier added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamCiIdentifier() pulumi.StringOutput

String that represents a configuration item in your network. You can pass value as || separated key-value format. For example, k1=v1||k2=v2.

func (SavedSearchesOutput) ActionSnowEventParamCustomFields added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamCustomFields() pulumi.StringOutput

The custom fields which are configured at the ServiceNow Instance. You can pass the custom fields and their values in the || separated format. For example, custom_field1=value1||custom_field2=value2||...custom_fields used must be present in the em_event table of ServiceNow.

func (SavedSearchesOutput) ActionSnowEventParamDescription added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamDescription() pulumi.StringOutput

A brief description of the event.

func (SavedSearchesOutput) ActionSnowEventParamNode added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamNode() pulumi.StringOutput

The node, formatted to follow your organization's ITIL standards and mapping. If the node value matches a CI with the same host name, the event is automatically assigned to the matching CI.

func (SavedSearchesOutput) ActionSnowEventParamResource added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamResource() pulumi.StringOutput

The resource, formatted to follow your organization's ITIL standards and mapping. For example, resource='CPU'.

func (SavedSearchesOutput) ActionSnowEventParamSeverity added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamSeverity() pulumi.IntOutput

The severity associated with the event. 0 - Clear 1 - Critical 2 - Major 3 - Minor 4 - Warning

func (SavedSearchesOutput) ActionSnowEventParamType added in v1.2.0

func (o SavedSearchesOutput) ActionSnowEventParamType() pulumi.StringOutput

The type, formatted to follow your organization's ITIL standards and mapping. For example, type='Virtual Machine'.

func (SavedSearchesOutput) ActionSummaryIndex added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndex() pulumi.BoolOutput

The state of the summary index action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.

func (SavedSearchesOutput) ActionSummaryIndexCommand added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndexCommand() pulumi.StringOutput

The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.

func (SavedSearchesOutput) ActionSummaryIndexHostname added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndexHostname() pulumi.StringOutput

Sets the hostname used in the web link (url) sent in summary-index alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)protocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)

func (SavedSearchesOutput) ActionSummaryIndexInline added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndexInline() pulumi.BoolOutput

Determines whether to execute the summary indexing action as part of the scheduled search.NOTE: This option is considered only if the summary index action is enabled and is always executed (in other words, if counttype = always).Defaults to true

func (SavedSearchesOutput) ActionSummaryIndexMaxResults added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndexMaxResults() pulumi.IntOutput

Sets the maximum number of search results sent using alerts. Defaults to 100.

func (SavedSearchesOutput) ActionSummaryIndexMaxTime added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndexMaxTime() pulumi.IntOutput

Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.

func (SavedSearchesOutput) ActionSummaryIndexName added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndexName() pulumi.StringOutput

Specifies the name of the summary index where the results of the scheduled search are saved.Defaults to summary.

func (SavedSearchesOutput) ActionSummaryIndexTrackAlert added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndexTrackAlert() pulumi.BoolOutput

Indicates whether the execution of this action signifies a trackable alert.

func (SavedSearchesOutput) ActionSummaryIndexTtl added in v1.1.5

func (o SavedSearchesOutput) ActionSummaryIndexTtl() pulumi.StringOutput

Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).

func (SavedSearchesOutput) ActionWebhookParamUrl added in v1.1.5

func (o SavedSearchesOutput) ActionWebhookParamUrl() pulumi.StringPtrOutput

URL to send the HTTP POST request to. Must be accessible from the Splunk server

func (SavedSearchesOutput) Actions added in v1.1.5

A comma-separated list of actions to enable. For example: rss,email

func (SavedSearchesOutput) AlertComparator added in v1.1.5

func (o SavedSearchesOutput) AlertComparator() pulumi.StringOutput

One of the following strings: greater than, less than, equal to, rises by, drops by, rises by perc, drops by percUsed with alertThreshold to trigger alert actions.

func (SavedSearchesOutput) AlertCondition added in v1.1.5

func (o SavedSearchesOutput) AlertCondition() pulumi.StringOutput

Contains a conditional search that is evaluated against the results of the saved search. Defaults to an empty string.

func (SavedSearchesOutput) AlertDigestMode added in v1.1.5

func (o SavedSearchesOutput) AlertDigestMode() pulumi.BoolOutput

Specifies whether alert actions are applied to the entire result set or on each individual result.Defaults to 1 (true).

func (SavedSearchesOutput) AlertExpires added in v1.1.5

func (o SavedSearchesOutput) AlertExpires() pulumi.StringOutput

Valid values: [number][time-unit]Sets the period of time to show the alert in the dashboard. Defaults to 24h.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.

func (SavedSearchesOutput) AlertSeverity added in v1.1.5

func (o SavedSearchesOutput) AlertSeverity() pulumi.IntOutput

Valid values: (1 | 2 | 3 | 4 | 5 | 6) Sets the alert severity level.Valid values are:1 DEBUG 2 INFO 3 WARN 4 ERROR 5 SEVERE 6 FATAL Defaults to 3.

func (SavedSearchesOutput) AlertSuppress added in v1.1.5

func (o SavedSearchesOutput) AlertSuppress() pulumi.BoolOutput

Indicates whether alert suppression is enabled for this scheduled search.

func (SavedSearchesOutput) AlertSuppressFields added in v1.1.5

func (o SavedSearchesOutput) AlertSuppressFields() pulumi.StringOutput

Comma delimited list of fields to use for suppression when doing per result alerting. Required if suppression is turned on and per result alerting is enabled.

func (SavedSearchesOutput) AlertSuppressPeriod added in v1.1.5

func (o SavedSearchesOutput) AlertSuppressPeriod() pulumi.StringOutput

Valid values: [number][time-unit] Specifies the suppresion period. Only valid if alert.supress is enabled.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.

func (SavedSearchesOutput) AlertThreshold added in v1.1.5

func (o SavedSearchesOutput) AlertThreshold() pulumi.StringOutput

Valid values are: Integer[%!](MISSING)Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alertComparator is set to rises by perc or drops by perc.

func (SavedSearchesOutput) AlertTrack added in v1.1.5

func (o SavedSearchesOutput) AlertTrack() pulumi.BoolOutput

Valid values: (true | false | auto) Specifies whether to track the actions triggered by this scheduled search.auto - determine whether to track or not based on the tracking setting of each action, do not track scheduled searches that always trigger actions. Default value true - force alert tracking.false - disable alert tracking for this search.

func (SavedSearchesOutput) AlertType added in v1.1.5

func (o SavedSearchesOutput) AlertType() pulumi.StringOutput

What to base the alert on, overriden by alertCondition if it is specified. Valid values are: always, custom, number of events, number of hosts, number of sources.

func (SavedSearchesOutput) AllowSkew added in v1.1.5

func (o SavedSearchesOutput) AllowSkew() pulumi.StringOutput

Allows the search scheduler to distribute scheduled searches randomly and more evenly over their specified search periods.

func (SavedSearchesOutput) AutoSummarize added in v1.1.5

func (o SavedSearchesOutput) AutoSummarize() pulumi.BoolOutput

Indicates whether the scheduler should ensure that the data for this search is automatically summarized. Defaults to 0.

func (SavedSearchesOutput) AutoSummarizeCommand added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeCommand() pulumi.StringOutput

An auto summarization template for this search. See auto summarization options in savedsearches.conf for more details.

func (SavedSearchesOutput) AutoSummarizeCronSchedule added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeCronSchedule() pulumi.StringOutput

Cron schedule that probes and generates the summaries for this saved search.The default value is */10 * * * * and corresponds to \`every ten hours\`.

func (SavedSearchesOutput) AutoSummarizeDispatchEarliestTime added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeDispatchEarliestTime() pulumi.StringOutput

A time string that specifies the earliest time for summarizing this search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.

func (SavedSearchesOutput) AutoSummarizeDispatchLatestTime added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeDispatchLatestTime() pulumi.StringOutput

A time string that specifies the latest time for summarizing this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.

func (SavedSearchesOutput) AutoSummarizeDispatchTimeFormat added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeDispatchTimeFormat() pulumi.StringOutput

Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %!F(MISSING)T%!T(MISSING).%!Q(MISSING)%!:(MISSING)z

func (SavedSearchesOutput) AutoSummarizeDispatchTtl added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeDispatchTtl() pulumi.StringOutput

Valid values: Integer[p]. Defaults to 60.Indicates the time to live (in seconds) for the artifacts of the summarization of the scheduled search.

func (SavedSearchesOutput) AutoSummarizeMaxDisabledBuckets added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeMaxDisabledBuckets() pulumi.IntOutput

The maximum number of buckets with the suspended summarization before the summarization search is completely stopped, and the summarization of the search is suspended for auto_summarize.suspend_period. Defaults to 2.

func (SavedSearchesOutput) AutoSummarizeMaxSummaryRatio added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeMaxSummaryRatio() pulumi.Float64Output

The maximum ratio of summary_size/bucket_size, which specifies when to stop summarization and deem it unhelpful for a bucket. Defaults to 0.1 Note: The test is only performed if the summary size is larger than auto_summarize.max_summary_size.

func (SavedSearchesOutput) AutoSummarizeMaxSummarySize added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeMaxSummarySize() pulumi.IntOutput

The minimum summary size, in bytes, before testing whether the summarization is helpful.The default value is 52428800 and is equivalent to 5MB.

func (SavedSearchesOutput) AutoSummarizeMaxTime added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeMaxTime() pulumi.IntOutput

Maximum time (in seconds) that the summary search is allowed to run. Defaults to 3600.Note: This is an approximate time. The summary search stops at clean bucket boundaries.

func (SavedSearchesOutput) AutoSummarizeSuspendPeriod added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeSuspendPeriod() pulumi.StringOutput

Time specfier indicating when to suspend summarization of this search if the summarization is deemed unhelpful.Defaults to 24h.

func (SavedSearchesOutput) AutoSummarizeTimespan added in v1.1.5

func (o SavedSearchesOutput) AutoSummarizeTimespan() pulumi.StringOutput

The list of time ranges that each summarized chunk should span. This comprises the list of available granularity levels for which summaries would be available. Specify a comma delimited list of time specifiers.For example a timechart over the last month whose granuality is at the day level should set this to 1d. If you need the same data summarized at the hour level for weekly charts, use: 1h,1d.

func (SavedSearchesOutput) CronSchedule added in v1.1.5

func (o SavedSearchesOutput) CronSchedule() pulumi.StringOutput

Valid values: cron stringThe cron schedule to execute this search. For example: */5 * * * * causes the search to execute every 5 minutes.

func (SavedSearchesOutput) Description added in v1.1.5

func (o SavedSearchesOutput) Description() pulumi.StringOutput

Human-readable description of this saved search. Defaults to empty string.

func (SavedSearchesOutput) Disabled added in v1.1.5

func (o SavedSearchesOutput) Disabled() pulumi.BoolOutput

Indicates if the saved search is enabled. Defaults to 0.Disabled saved searches are not visible in Splunk Web.

func (SavedSearchesOutput) DispatchBuckets added in v1.1.5

func (o SavedSearchesOutput) DispatchBuckets() pulumi.IntOutput

The maximum number of timeline buckets. Defaults to 0.

func (SavedSearchesOutput) DispatchEarliestTime added in v1.1.5

func (o SavedSearchesOutput) DispatchEarliestTime() pulumi.StringOutput

A time string that specifies the earliest time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.

func (SavedSearchesOutput) DispatchIndexEarliest added in v1.1.5

func (o SavedSearchesOutput) DispatchIndexEarliest() pulumi.StringOutput

A time string that specifies the earliest index time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.

func (SavedSearchesOutput) DispatchIndexLatest added in v1.1.5

func (o SavedSearchesOutput) DispatchIndexLatest() pulumi.StringOutput

A time string that specifies the latest index time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.

func (SavedSearchesOutput) DispatchIndexedRealtime added in v1.1.5

func (o SavedSearchesOutput) DispatchIndexedRealtime() pulumi.BoolOutput

A time string that specifies the earliest time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.

func (SavedSearchesOutput) DispatchIndexedRealtimeMinspan added in v1.1.5

func (o SavedSearchesOutput) DispatchIndexedRealtimeMinspan() pulumi.IntOutput

Allows for a per-job override of the [search] indexedRealtimeDiskSyncDelay setting in limits.conf.

func (SavedSearchesOutput) DispatchIndexedRealtimeOffset added in v1.1.5

func (o SavedSearchesOutput) DispatchIndexedRealtimeOffset() pulumi.IntOutput

Allows for a per-job override of the [search] indexedRealtimeDiskSyncDelay setting in limits.conf.

func (SavedSearchesOutput) DispatchLatestTime added in v1.1.5

func (o SavedSearchesOutput) DispatchLatestTime() pulumi.StringOutput

A time string that specifies the latest time for this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.

func (SavedSearchesOutput) DispatchLookups added in v1.1.5

func (o SavedSearchesOutput) DispatchLookups() pulumi.BoolOutput

Enables or disables the lookups for this search. Defaults to 1.

func (SavedSearchesOutput) DispatchMaxCount added in v1.1.5

func (o SavedSearchesOutput) DispatchMaxCount() pulumi.IntOutput

The maximum number of results before finalizing the search. Defaults to 500000.

func (SavedSearchesOutput) DispatchMaxTime added in v1.1.5

func (o SavedSearchesOutput) DispatchMaxTime() pulumi.IntOutput

Indicates the maximum amount of time (in seconds) before finalizing the search. Defaults to 0.

func (SavedSearchesOutput) DispatchReduceFreq added in v1.1.5

func (o SavedSearchesOutput) DispatchReduceFreq() pulumi.IntOutput

Specifies, in seconds, how frequently the MapReduce reduce phase runs on accumulated map values. Defaults to 10.

func (SavedSearchesOutput) DispatchRtBackfill added in v1.1.5

func (o SavedSearchesOutput) DispatchRtBackfill() pulumi.BoolOutput

Whether to back fill the real time window for this search. Parameter valid only if this is a real time search. Defaults to 0.

func (SavedSearchesOutput) DispatchRtMaximumSpan added in v1.1.5

func (o SavedSearchesOutput) DispatchRtMaximumSpan() pulumi.IntOutput

Allows for a per-job override of the [search] indexedRealtimeMaximumSpan setting in limits.conf.

func (SavedSearchesOutput) DispatchSpawnProcess added in v1.1.5

func (o SavedSearchesOutput) DispatchSpawnProcess() pulumi.BoolOutput

Specifies whether a new search process spawns when this saved search is executed. Defaults to 1. Searches against indexes must run in a separate process.

func (SavedSearchesOutput) DispatchTimeFormat added in v1.1.5

func (o SavedSearchesOutput) DispatchTimeFormat() pulumi.StringOutput

A time format string that defines the time format for specifying the earliest and latest time. Defaults to %!F(MISSING)T%!T(MISSING).%!Q(MISSING)%!:(MISSING)z

func (SavedSearchesOutput) DispatchTtl added in v1.1.5

func (o SavedSearchesOutput) DispatchTtl() pulumi.StringOutput

Valid values: Integer[p]. Defaults to 2p.Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no actions are triggered.

func (SavedSearchesOutput) DisplayView added in v1.1.5

func (o SavedSearchesOutput) DisplayView() pulumi.StringOutput

Defines the default UI view name (not label) in which to load the results. Accessibility is subject to the user having sufficient permissions.

func (SavedSearchesOutput) ElementType

func (SavedSearchesOutput) ElementType() reflect.Type

func (SavedSearchesOutput) IsScheduled added in v1.1.5

func (o SavedSearchesOutput) IsScheduled() pulumi.BoolOutput

Whether this search is to be run on a schedule

func (SavedSearchesOutput) IsVisible added in v1.1.5

Specifies whether this saved search should be listed in the visible saved search list. Defaults to 1.

func (SavedSearchesOutput) MaxConcurrent added in v1.1.5

func (o SavedSearchesOutput) MaxConcurrent() pulumi.IntOutput

The maximum number of concurrent instances of this search the scheduler is allowed to run. Defaults to 1.

func (SavedSearchesOutput) Name added in v1.1.5

A name for the search.

func (SavedSearchesOutput) RealtimeSchedule added in v1.1.5

func (o SavedSearchesOutput) RealtimeSchedule() pulumi.BoolOutput

Defaults to 1. Controls the way the scheduler computes the next execution time of a scheduled search. If this value is set to 1, the scheduler bases its determination of the next scheduled search execution time on the current time. If this value is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time. This is called continuous scheduling. If set to 0, the scheduler never skips scheduled execution periods. However, the execution of the saved search might fall behind depending on the scheduler load. Use continuous scheduling whenever you enable the summary index option.

func (SavedSearchesOutput) RequestUiDispatchApp added in v1.1.5

func (o SavedSearchesOutput) RequestUiDispatchApp() pulumi.StringOutput

Specifies a field used by Splunk Web to denote the app this search should be dispatched in.

func (SavedSearchesOutput) RequestUiDispatchView added in v1.1.5

func (o SavedSearchesOutput) RequestUiDispatchView() pulumi.StringOutput

Specifies a field used by Splunk Web to denote the view this search should be displayed in.

func (SavedSearchesOutput) RestartOnSearchpeerAdd added in v1.1.5

func (o SavedSearchesOutput) RestartOnSearchpeerAdd() pulumi.BoolOutput

Specifies whether to restart a real-time search managed by the scheduler when a search peer becomes available for this saved search. Defaults to 1.

func (SavedSearchesOutput) RunOnStartup added in v1.1.5

func (o SavedSearchesOutput) RunOnStartup() pulumi.BoolOutput

Indicates whether this search runs at startup. If it does not run on startup, it runs at the next scheduled time. Defaults to 0. Set to 1 for scheduled searches that populate lookup tables.

func (SavedSearchesOutput) SchedulePriority added in v1.1.5

func (o SavedSearchesOutput) SchedulePriority() pulumi.StringOutput

Raises the scheduling priority of the named search. Defaults to Default

func (SavedSearchesOutput) ScheduleWindow added in v1.1.5

func (o SavedSearchesOutput) ScheduleWindow() pulumi.StringOutput

Time window (in minutes) during which the search has lower priority. Defaults to 0. The scheduler can give higher priority to more critical searches during this window. The window must be smaller than the search period.Set to auto to let the scheduler determine the optimal window value automatically. Requires the editSearchScheduleWindow capability to override auto.

func (SavedSearchesOutput) Search added in v1.1.5

Required when creating a new search.

func (SavedSearchesOutput) ToSavedSearchesOutput

func (o SavedSearchesOutput) ToSavedSearchesOutput() SavedSearchesOutput

func (SavedSearchesOutput) ToSavedSearchesOutputWithContext

func (o SavedSearchesOutput) ToSavedSearchesOutputWithContext(ctx context.Context) SavedSearchesOutput

func (SavedSearchesOutput) Vsid added in v1.1.5

Defines the viewstate id associated with the UI view listed in 'displayview'.

func (SavedSearchesOutput) WorkloadPool added in v1.1.5

func (o SavedSearchesOutput) WorkloadPool() pulumi.StringOutput

Specifies the new workload pool where the existing running search will be placed.`

type SavedSearchesState

type SavedSearchesState struct {
	// The app/user context that is the namespace for the resource
	Acl SavedSearchesAclPtrInput
	// Enable XSOAR alerting (Should by 1 (Enabled) or 0 (Disabled))
	ActionCreateXsoarIncident pulumi.StringPtrInput
	// XSOAR custom incident fields (should be a comma separated list)
	ActionCreateXsoarIncidentParamCustomFields pulumi.StringPtrInput
	// XSOAR incident description
	ActionCreateXsoarIncidentParamDetails pulumi.StringPtrInput
	// XSOAR incident name
	ActionCreateXsoarIncidentParamIncidentName pulumi.StringPtrInput
	// XSOAR incident time
	ActionCreateXsoarIncidentParamOccurred pulumi.StringPtrInput
	// Enable XSOAR alerting sending to all servers (Should by 1 (Enabled) or 0 (Disabled)
	ActionCreateXsoarIncidentParamSendAllServers pulumi.StringPtrInput
	// XSOAR Server instance URL (Should start with https:// || http://)
	ActionCreateXsoarIncidentParamServerUrl pulumi.StringPtrInput
	// XSOAR Severity (1 - Low, 2 - Medium, 3 - High, 4 - Critical)
	ActionCreateXsoarIncidentParamSeverity pulumi.StringPtrInput
	// XSOAR incident type
	ActionCreateXsoarIncidentParamType pulumi.StringPtrInput
	// The state of the email action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.
	ActionEmail pulumi.BoolPtrInput
	// The password to use when authenticating with the SMTP server. Normally this value is set when editing the email settings, however you can set a clear text password here and it is encrypted on the next platform restart.Defaults to empty string.
	ActionEmailAuthPassword pulumi.StringPtrInput
	// The username to use when authenticating with the SMTP server. If this is empty string, no authentication is attempted. Defaults to empty stringNOTE: Your SMTP server might reject unauthenticated emails.
	ActionEmailAuthUsername pulumi.StringPtrInput
	// BCC email address to use if action.email is enabled.
	ActionEmailBcc pulumi.StringPtrInput
	// CC email address to use if action.email is enabled.
	ActionEmailCc pulumi.StringPtrInput
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionEmailCommand pulumi.StringPtrInput
	// Valid values: (table | plain | html | raw | csv)Specify the format of text in the email. This value also applies to any attachments.
	ActionEmailFormat pulumi.StringPtrInput
	// Email address from which the email action originates.Defaults to splunk@$LOCALHOST or whatever value is set in alert_actions.conf.
	ActionEmailFrom pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in email actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)
	ActionEmailHostname pulumi.StringPtrInput
	// Specify whether to include a link to the results. Defaults to 0.
	ActionEmailIncludeResultsLink pulumi.IntPtrInput
	// Specify whether to include the search that caused an email to be sent. Defaults to 0.
	ActionEmailIncludeSearch pulumi.IntPtrInput
	// Specify whether to show the trigger condition that caused the alert to fire. Defaults to 0.
	ActionEmailIncludeTrigger pulumi.IntPtrInput
	// Specify whether to show the time that the alert was fired. Defaults to 0.
	ActionEmailIncludeTriggerTime pulumi.IntPtrInput
	// Specify whether to show the title and a link to enable the user to edit the saved search. Defaults to 0.
	ActionEmailIncludeViewLink pulumi.IntPtrInput
	// Indicates whether the search results are contained in the body of the email.Results can be either inline or attached to an email.
	ActionEmailInline pulumi.BoolPtrInput
	// Set the address of the MTA server to be used to send the emails.Defaults to <LOCALHOST> or whatever is set in alert_actions.conf.
	ActionEmailMailserver pulumi.StringPtrInput
	// Sets the global maximum number of search results to send when email.action is enabled. Defaults to 100.
	ActionEmailMaxResults pulumi.IntPtrInput
	// Valid values are Integer[m|s|h|d].Specifies the maximum amount of time the execution of an email action takes before the action is aborted. Defaults to 5m.
	ActionEmailMaxTime pulumi.StringPtrInput
	// Customize the message sent in the emailed alert. Defaults to: The alert condition for '$name$' was triggered.
	ActionEmailMessageAlert pulumi.StringPtrInput
	// Customize the message sent in the emailed report. Defaults to: The scheduled report '$name$' has run
	ActionEmailMessageReport pulumi.StringPtrInput
	// The name of the view to deliver if sendpdf is enabled
	ActionEmailPdfview pulumi.StringPtrInput
	// Search string to preprocess results before emailing them. Defaults to empty string (no preprocessing).Usually the preprocessing consists of filtering out unwanted internal fields.
	ActionEmailPreprocessResults pulumi.StringPtrInput
	// Space-separated list. Specifies the set (and load order) of CID fonts for handling Simplified Chinese(gb), Traditional Chinese(cns), Japanese(jp), and Korean(kor) in Integrated PDF Rendering.If multiple fonts provide a glyph for a given character code, the glyph from the first font specified in the list is used.To skip loading any CID fonts, specify the empty string.Defaults to 'gb cns jp kor'
	ActionEmailReportCidFontList pulumi.StringPtrInput
	ActionEmailReportIncludeSplunkLogo pulumi.BoolPtrInput
	// Valid values: (portrait | landscape)Specifies the paper orientation: portrait or landscape. Defaults to portrait.
	ActionEmailReportPaperOrientation pulumi.StringPtrInput
	// Valid values: (letter | legal | ledger | a2 | a3 | a4 | a5)Specifies the paper size for PDFs. Defaults to letter.
	ActionEmailReportPaperSize pulumi.StringPtrInput
	// No Supported
	ActionEmailReportServerEnabled pulumi.BoolPtrInput
	// Not supported.For a default locally installed report server, the URL is http://localhost:8091/
	ActionEmailReportServerUrl pulumi.StringPtrInput
	// Specify whether to send results as a CSV file. Defaults to 0.
	ActionEmailSendCsv pulumi.IntPtrInput
	// Indicates whether to create and send the results as a PDF. Defaults to false.
	ActionEmailSendPdf pulumi.BoolPtrInput
	// Indicates whether to attach the search results in the email.Results can be either attached or inline. See action.email.inline.
	ActionEmailSendResults pulumi.BoolPtrInput
	// Specifies an alternate email subject.Defaults to SplunkAlert-<savedsearchname>.
	ActionEmailSubject pulumi.StringPtrInput
	// A comma or semicolon separated list of recipient email addresses. Required if this search is scheduled and the email alert action is enabled.
	ActionEmailTo pulumi.StringPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionEmailTrackAlert pulumi.BoolPtrInput
	// Valid values are Integer[p].Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows <Integer>, int is the number of scheduled periods. Defaults to 86400 (24 hours).If no actions are triggered, the artifacts have their ttl determined by dispatch.ttl in savedsearches.conf.
	ActionEmailTtl pulumi.StringPtrInput
	// Indicates whether to use SSL when communicating with the SMTP server. Defaults to false.
	ActionEmailUseSsl pulumi.BoolPtrInput
	// Indicates whether to use TLS (transport layer security) when communicating with the SMTP server (starttls).Defaults to false.
	ActionEmailUseTls pulumi.BoolPtrInput
	// Indicates whether columns should be sorted from least wide to most wide, left to right.Only valid if format=text.
	ActionEmailWidthSortColumns pulumi.BoolPtrInput
	// Jira Service Desk account name
	ActionJiraServiceDeskParamAccount pulumi.StringPtrInput
	// Jira issue description
	ActionJiraServiceDeskParamJiraDescription pulumi.StringPtrInput
	// Jira issue type name
	ActionJiraServiceDeskParamJiraIssueType pulumi.StringPtrInput
	// Jira priority of issue
	ActionJiraServiceDeskParamJiraPriority pulumi.StringPtrInput
	// Jira Project name
	ActionJiraServiceDeskParamJiraProject pulumi.StringPtrInput
	// Jira issue title/summary
	ActionJiraServiceDeskParamJiraSummary pulumi.StringPtrInput
	// The PagerDuty custom details information.
	ActionPagerdutyCustomDetails pulumi.StringPtrInput
	// The PagerDuty integration Key.
	ActionPagerdutyIntegrationKey pulumi.StringPtrInput
	// The PagerDuty integration Key override.
	ActionPagerdutyIntegrationKeyOverride pulumi.StringPtrInput
	// The pagerduty integration URL. This integration uses Splunk's native webhooks to send events to PagerDuty.
	ActionPagerdutyIntegrationUrl pulumi.StringPtrInput
	// The pagerduty integration URL override. This integration uses Splunk's native webhooks to send events to PagerDuty.
	ActionPagerdutyIntegrationUrlOverride pulumi.StringPtrInput
	// The state of the populate lookup action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.
	ActionPopulateLookup pulumi.BoolPtrInput
	// The search command (or pipeline) which is responsible for executing the action.
	ActionPopulateLookupCommand pulumi.StringPtrInput
	// Lookup name of path of the lookup to populate
	ActionPopulateLookupDest pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms: hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionPopulateLookupHostname pulumi.StringPtrInput
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionPopulateLookupMaxResults pulumi.IntPtrInput
	// Valid values are: Integer[m|s|h|d]Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 5m.
	ActionPopulateLookupMaxTime pulumi.IntPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionPopulateLookupTrackAlert pulumi.BoolPtrInput
	// Valid values are Integer[p]Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, then this specifies the number of scheduled periods. Defaults to 10p.
	ActionPopulateLookupTtl pulumi.StringPtrInput
	// The state of the rss action. Read-only attribute. Value ignored on POST.Use actions to specify a list of enabled actions. Defaults to 0.
	ActionRss pulumi.BoolPtrInput
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionRssCommand pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionRssHostname pulumi.StringPtrInput
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionRssMaxResults pulumi.IntPtrInput
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionRssMaxTime pulumi.IntPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionRssTrackAlert pulumi.BoolPtrInput
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionRssTtl pulumi.StringPtrInput
	// The state of the script action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.
	ActionScript pulumi.BoolPtrInput
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionScriptCommand pulumi.StringPtrInput
	// File name of the script to call. Required if script action is enabled
	ActionScriptFilename pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)\n\nprotocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionScriptHostname pulumi.StringPtrInput
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionScriptMaxResults pulumi.IntPtrInput
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionScriptMaxTime pulumi.IntPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionScriptTrackAlert pulumi.BoolPtrInput
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionScriptTtl pulumi.StringPtrInput
	// Include a message attachment. Valid values are message, none, or alert_link
	ActionSlackParamAttachment pulumi.StringPtrInput
	// Slack channel to send the message to (Should start with # or @)
	ActionSlackParamChannel pulumi.StringPtrInput
	// Show one or more fields from the search results below your Slack message. Comma-separated list of field names. Allows wildcards. eg. index,source*
	ActionSlackParamFields pulumi.StringPtrInput
	// Enter the chat message to send to the Slack channel. The message can include tokens that insert text based on the results of the search.
	ActionSlackParamMessage pulumi.StringPtrInput
	// You can override the Slack webhook URL here if you need to send the alert message to a different Slack team
	ActionSlackParamWebhookUrlOverride pulumi.StringPtrInput
	// Account(s) for which the event is/ are to be created across ServiceNow instance(s).
	ActionSnowEventParamAccount pulumi.StringPtrInput
	// You can pass additional information that might be of use to the user. This field can also be used to supply the URL of
	// your Splunk search head. When you use the snow_event.py alert-triggered script, the Splunk platform uses the URL to
	// create a deep link that allows a ServiceNow user to navigate back to this Splunk platform search. You can find the
	// resulting full URL for navigation from ServiceNow to the Splunk platform search by clicking Splunk Drilldown in the
	// event page in ServiceNow. See an example below. Note that if you create events using the commands snowevent or
	// snoweventstream, you must supply the URL in this field.You can pass the URL of Splunk as url=<value>. You can also pass
	// other fields and their values by || separated key-value format. For example, url=<value>||k1=v1||k2=v2||....
	ActionSnowEventParamAdditionalInfo pulumi.StringPtrInput
	// String that represents a configuration item in your network. You can pass value as || separated key-value format. For
	// example, k1=v1||k2=v2.
	ActionSnowEventParamCiIdentifier pulumi.StringPtrInput
	// The custom fields which are configured at the ServiceNow Instance. You can pass the custom fields and their values in
	// the || separated format. For example, custom_field1=value1||custom_field2=value2||...custom_fields used must be present
	// in the em_event table of ServiceNow.
	ActionSnowEventParamCustomFields pulumi.StringPtrInput
	// A brief description of the event.
	ActionSnowEventParamDescription pulumi.StringPtrInput
	// The node, formatted to follow your organization's ITIL standards and mapping. If the node value matches a CI with the
	// same host name, the event is automatically assigned to the matching CI.
	ActionSnowEventParamNode pulumi.StringPtrInput
	// The resource, formatted to follow your organization's ITIL standards and mapping. For example, resource='CPU'.
	ActionSnowEventParamResource pulumi.StringPtrInput
	// The severity associated with the event. 0 - Clear 1 - Critical 2 - Major 3 - Minor 4 - Warning
	ActionSnowEventParamSeverity pulumi.IntPtrInput
	// The type, formatted to follow your organization's ITIL standards and mapping. For example, type='Virtual Machine'.
	ActionSnowEventParamType pulumi.StringPtrInput
	// The state of the summary index action. Read-only attribute. Value ignored on POST. Use actions to specify a list of enabled actions. Defaults to 0.
	ActionSummaryIndex pulumi.BoolPtrInput
	// The search command (or pipeline) which is responsible for executing the action.Generally the command is a template search pipeline which is realized with values from the saved search. To reference saved search field values wrap them in $, for example to reference the savedsearch name use $name$, to reference the search use $search$.
	ActionSummaryIndexCommand pulumi.StringPtrInput
	// Sets the hostname used in the web link (url) sent in summary-index alert actions.This value accepts two forms:hostname (for example, splunkserver, splunkserver.example.com)protocol://hostname:port (for example, http://splunkserver:8000, https://splunkserver.example.com:443)
	ActionSummaryIndexHostname pulumi.StringPtrInput
	// Determines whether to execute the summary indexing action as part of the scheduled search.NOTE: This option is considered only if the summary index action is enabled and is always executed (in other words, if counttype = always).Defaults to true
	ActionSummaryIndexInline pulumi.BoolPtrInput
	// Sets the maximum number of search results sent using alerts. Defaults to 100.
	ActionSummaryIndexMaxResults pulumi.IntPtrInput
	// Valid values are Integer[m|s|h|d].Sets the maximum amount of time the execution of an action takes before the action is aborted. Defaults to 1m.
	ActionSummaryIndexMaxTime pulumi.IntPtrInput
	// Specifies the name of the summary index where the results of the scheduled search are saved.Defaults to summary.
	ActionSummaryIndexName pulumi.StringPtrInput
	// Indicates whether the execution of this action signifies a trackable alert.
	ActionSummaryIndexTrackAlert pulumi.BoolPtrInput
	// Valid values are: Integer[p] Specifies the minimum time-to-live in seconds of the search artifacts if this action is triggered. If p follows Integer, specifies the number of scheduled periods. Defaults to 86400 (24 hours).
	ActionSummaryIndexTtl pulumi.StringPtrInput
	// URL to send the HTTP POST request to. Must be accessible from the Splunk server
	ActionWebhookParamUrl pulumi.StringPtrInput
	// A comma-separated list of actions to enable. For example: rss,email
	Actions pulumi.StringPtrInput
	// One of the following strings: greater than, less than, equal to, rises by, drops by, rises by perc, drops by percUsed with alertThreshold to trigger alert actions.
	AlertComparator pulumi.StringPtrInput
	// Contains a conditional search that is evaluated against the results of the saved search. Defaults to an empty string.
	AlertCondition pulumi.StringPtrInput
	// Specifies whether alert actions are applied to the entire result set or on each individual result.Defaults to 1 (true).
	AlertDigestMode pulumi.BoolPtrInput
	// Valid values: [number][time-unit]Sets the period of time to show the alert in the dashboard. Defaults to 24h.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
	AlertExpires pulumi.StringPtrInput
	// Valid values: (1 | 2 | 3 | 4 | 5 | 6) Sets the alert severity level.Valid values are:1 DEBUG 2 INFO 3 WARN 4 ERROR 5 SEVERE 6 FATAL Defaults to 3.
	AlertSeverity pulumi.IntPtrInput
	// Indicates whether alert suppression is enabled for this scheduled search.
	AlertSuppress pulumi.BoolPtrInput
	// Comma delimited list of fields to use for suppression when doing per result alerting. Required if suppression is turned on and per result alerting is enabled.
	AlertSuppressFields pulumi.StringPtrInput
	// Valid values: [number][time-unit] Specifies the suppresion period. Only valid if alert.supress is enabled.Use [number][time-unit] to specify a time. For example: 60 = 60 seconds, 1m = 1 minute, 1h = 60 minutes = 1 hour.
	AlertSuppressPeriod pulumi.StringPtrInput
	// Valid values are: Integer[%!](MISSING)Specifies the value to compare (see alert_comparator) before triggering the alert actions. If expressed as a percentage, indicates value to use when alertComparator is set to rises by perc or drops by perc.
	AlertThreshold pulumi.StringPtrInput
	// Valid values: (true | false | auto) Specifies whether to track the actions triggered by this scheduled search.auto - determine whether to track or not based on the tracking setting of each action, do not track scheduled searches that always trigger actions. Default value true - force alert tracking.false - disable alert tracking for this search.
	AlertTrack pulumi.BoolPtrInput
	// What to base the alert on, overriden by alertCondition if it is specified. Valid values are: always, custom, number of events, number of hosts, number of sources.
	AlertType pulumi.StringPtrInput
	// Allows the search scheduler to distribute scheduled searches randomly and more evenly over their specified search periods.
	AllowSkew pulumi.StringPtrInput
	// Indicates whether the scheduler should ensure that the data for this search is automatically summarized. Defaults to 0.
	AutoSummarize pulumi.BoolPtrInput
	// An auto summarization template for this search. See auto summarization options in savedsearches.conf for more details.
	AutoSummarizeCommand pulumi.StringPtrInput
	// Cron schedule that probes and generates the summaries for this saved search.The default value is */10 * * * * and corresponds to \`every ten hours\`.
	AutoSummarizeCronSchedule pulumi.StringPtrInput
	// A time string that specifies the earliest time for summarizing this search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	AutoSummarizeDispatchEarliestTime pulumi.StringPtrInput
	// A time string that specifies the latest time for summarizing this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	AutoSummarizeDispatchLatestTime pulumi.StringPtrInput
	// Defines the time format that Splunk software uses to specify the earliest and latest time. Defaults to %!F(MISSING)T%!T(MISSING).%!Q(MISSING)%!:(MISSING)z
	AutoSummarizeDispatchTimeFormat pulumi.StringPtrInput
	// Valid values: Integer[p]. Defaults to 60.Indicates the time to live (in seconds) for the artifacts of the summarization of the scheduled search.
	AutoSummarizeDispatchTtl pulumi.StringPtrInput
	// The maximum number of buckets with the suspended summarization before the summarization search is completely stopped, and the summarization of the search is suspended for auto_summarize.suspend_period. Defaults to 2.
	AutoSummarizeMaxDisabledBuckets pulumi.IntPtrInput
	// The maximum ratio of summary_size/bucket_size, which specifies when to stop summarization and deem it unhelpful for a bucket. Defaults to 0.1 Note: The test is only performed if the summary size is larger than auto_summarize.max_summary_size.
	AutoSummarizeMaxSummaryRatio pulumi.Float64PtrInput
	// The minimum summary size, in bytes, before testing whether the summarization is helpful.The default value is 52428800 and is equivalent to 5MB.
	AutoSummarizeMaxSummarySize pulumi.IntPtrInput
	// Maximum time (in seconds) that the summary search is allowed to run. Defaults to 3600.Note: This is an approximate time. The summary search stops at clean bucket boundaries.
	AutoSummarizeMaxTime pulumi.IntPtrInput
	// Time specfier indicating when to suspend summarization of this search if the summarization is deemed unhelpful.Defaults to 24h.
	AutoSummarizeSuspendPeriod pulumi.StringPtrInput
	// The list of time ranges that each summarized chunk should span. This comprises the list of available granularity levels for which summaries would be available. Specify a comma delimited list of time specifiers.For example a timechart over the last month whose granuality is at the day level should set this to 1d. If you need the same data summarized at the hour level for weekly charts, use: 1h,1d.
	AutoSummarizeTimespan pulumi.StringPtrInput
	// Valid values: cron stringThe cron schedule to execute this search. For example: */5 * * * * causes the search to execute every 5 minutes.
	CronSchedule pulumi.StringPtrInput
	// Human-readable description of this saved search. Defaults to empty string.
	Description pulumi.StringPtrInput
	// Indicates if the saved search is enabled. Defaults to 0.Disabled saved searches are not visible in Splunk Web.
	Disabled pulumi.BoolPtrInput
	// The maximum number of timeline buckets. Defaults to 0.
	DispatchBuckets pulumi.IntPtrInput
	// A time string that specifies the earliest time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchEarliestTime pulumi.StringPtrInput
	// A time string that specifies the earliest index time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexEarliest pulumi.StringPtrInput
	// A time string that specifies the latest index time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexLatest pulumi.StringPtrInput
	// A time string that specifies the earliest time for this search. Can be a relative or absolute time. If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchIndexedRealtime pulumi.BoolPtrInput
	// Allows for a per-job override of the [search] indexedRealtimeDiskSyncDelay setting in limits.conf.
	DispatchIndexedRealtimeMinspan pulumi.IntPtrInput
	// Allows for a per-job override of the [search] indexedRealtimeDiskSyncDelay setting in limits.conf.
	DispatchIndexedRealtimeOffset pulumi.IntPtrInput
	// A time string that specifies the latest time for this saved search. Can be a relative or absolute time.If this value is an absolute time, use the dispatch.time_format to format the value.
	DispatchLatestTime pulumi.StringPtrInput
	// Enables or disables the lookups for this search. Defaults to 1.
	DispatchLookups pulumi.BoolPtrInput
	// The maximum number of results before finalizing the search. Defaults to 500000.
	DispatchMaxCount pulumi.IntPtrInput
	// Indicates the maximum amount of time (in seconds) before finalizing the search. Defaults to 0.
	DispatchMaxTime pulumi.IntPtrInput
	// Specifies, in seconds, how frequently the MapReduce reduce phase runs on accumulated map values. Defaults to 10.
	DispatchReduceFreq pulumi.IntPtrInput
	// Whether to back fill the real time window for this search. Parameter valid only if this is a real time search. Defaults to 0.
	DispatchRtBackfill pulumi.BoolPtrInput
	// Allows for a per-job override of the [search] indexedRealtimeMaximumSpan setting in limits.conf.
	DispatchRtMaximumSpan pulumi.IntPtrInput
	// Specifies whether a new search process spawns when this saved search is executed. Defaults to 1. Searches against indexes must run in a separate process.
	DispatchSpawnProcess pulumi.BoolPtrInput
	// A time format string that defines the time format for specifying the earliest and latest time. Defaults to %!F(MISSING)T%!T(MISSING).%!Q(MISSING)%!:(MISSING)z
	DispatchTimeFormat pulumi.StringPtrInput
	// Valid values: Integer[p]. Defaults to 2p.Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no actions are triggered.
	DispatchTtl pulumi.StringPtrInput
	// Defines the default UI view name (not label) in which to load the results. Accessibility is subject to the user having sufficient permissions.
	DisplayView pulumi.StringPtrInput
	// Whether this search is to be run on a schedule
	IsScheduled pulumi.BoolPtrInput
	// Specifies whether this saved search should be listed in the visible saved search list. Defaults to 1.
	IsVisible pulumi.BoolPtrInput
	// The maximum number of concurrent instances of this search the scheduler is allowed to run. Defaults to 1.
	MaxConcurrent pulumi.IntPtrInput
	// A name for the search.
	Name pulumi.StringPtrInput
	// Defaults to 1. Controls the way the scheduler computes the next execution time of a scheduled search. If this value is set to 1, the scheduler bases its determination of the next scheduled search execution time on the current time. If this value is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time. This is called continuous scheduling. If set to 0, the scheduler never skips scheduled execution periods. However, the execution of the saved search might fall behind depending on the scheduler load. Use continuous scheduling whenever you enable the summary index option.
	RealtimeSchedule pulumi.BoolPtrInput
	// Specifies a field used by Splunk Web to denote the app this search should be dispatched in.
	RequestUiDispatchApp pulumi.StringPtrInput
	// Specifies a field used by Splunk Web to denote the view this search should be displayed in.
	RequestUiDispatchView pulumi.StringPtrInput
	// Specifies whether to restart a real-time search managed by the scheduler when a search peer becomes available for this saved search. Defaults to 1.
	RestartOnSearchpeerAdd pulumi.BoolPtrInput
	// Indicates whether this search runs at startup. If it does not run on startup, it runs at the next scheduled time. Defaults to 0. Set to 1 for scheduled searches that populate lookup tables.
	RunOnStartup pulumi.BoolPtrInput
	// Raises the scheduling priority of the named search. Defaults to Default
	SchedulePriority pulumi.StringPtrInput
	// Time window (in minutes) during which the search has lower priority. Defaults to 0. The scheduler can give higher priority to more critical searches during this window. The window must be smaller than the search period.Set to auto to let the scheduler determine the optimal window value automatically. Requires the editSearchScheduleWindow capability to override auto.
	ScheduleWindow pulumi.StringPtrInput
	// Required when creating a new search.
	Search pulumi.StringPtrInput
	// Defines the viewstate id associated with the UI view listed in 'displayview'.
	Vsid pulumi.StringPtrInput
	// Specifies the new workload pool where the existing running search will be placed.`
	WorkloadPool pulumi.StringPtrInput
}

func (SavedSearchesState) ElementType

func (SavedSearchesState) ElementType() reflect.Type

type ShIndexesManager added in v0.4.0

type ShIndexesManager struct {
	pulumi.CustomResourceState

	Acl ShIndexesManagerAclOutput `pulumi:"acl"`
	// Valid values: (event | metric). Specifies the type of index.
	Datatype pulumi.StringOutput `pulumi:"datatype"`
	// Number of seconds after which indexed data rolls to frozen.
	// Defaults to 94608000 (3 years).Freezing data means it is removed from the index. If you need to archive your data, refer to coldToFrozenDir and coldToFrozenScript parameter documentation.
	FrozenTimePeriodInSecs pulumi.StringPtrOutput `pulumi:"frozenTimePeriodInSecs"`
	// The maximum size of an index (in MB). If an index grows larger than the maximum size, the oldest data is frozen.
	// Defaults to 100 MB.
	MaxGlobalRawDataSizeMb pulumi.StringPtrOutput `pulumi:"maxGlobalRawDataSizeMb"`
	// The name of the index to create.
	Name pulumi.StringOutput `pulumi:"name"`
}

## # Resource: ShIndexesManager

Create indexes on Splunk Cloud instances. [BETA]

## Authorization and authentication

As of now there is no support to create indexes in user-specified workspaces on Splunk Cloud.

## Example Usage

<!--Start PulumiCodeChooser --> ```go package main

import (

"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := splunk.NewShIndexesManager(ctx, "tf-index", &splunk.ShIndexesManagerArgs{
			Datatype:               pulumi.String("event"),
			FrozenTimePeriodInSecs: pulumi.String("94608000"),
			MaxGlobalRawDataSizeMb: pulumi.String("100"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` <!--End PulumiCodeChooser -->

func GetShIndexesManager added in v0.4.0

func GetShIndexesManager(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ShIndexesManagerState, opts ...pulumi.ResourceOption) (*ShIndexesManager, error)

GetShIndexesManager gets an existing ShIndexesManager resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewShIndexesManager added in v0.4.0

func NewShIndexesManager(ctx *pulumi.Context,
	name string, args *ShIndexesManagerArgs, opts ...pulumi.ResourceOption) (*ShIndexesManager, error)

NewShIndexesManager registers a new resource with the given unique name, arguments, and options.

func (*ShIndexesManager) ElementType added in v0.4.0

func (*ShIndexesManager) ElementType() reflect.Type

func (*ShIndexesManager) ToShIndexesManagerOutput added in v0.4.0

func (i *ShIndexesManager) ToShIndexesManagerOutput() ShIndexesManagerOutput

func (*ShIndexesManager) ToShIndexesManagerOutputWithContext added in v0.4.0

func (i *ShIndexesManager) ToShIndexesManagerOutputWithContext(ctx context.Context) ShIndexesManagerOutput

type ShIndexesManagerAcl added in v0.4.0

type ShIndexesManagerAcl struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App *string `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms *bool `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp *bool `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal *bool `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser *bool `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite *bool `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner *string `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads []string `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable *bool `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing *string `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes []string `pulumi:"writes"`
}

type ShIndexesManagerAclArgs added in v0.4.0

type ShIndexesManagerAclArgs struct {
	// The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
	App pulumi.StringPtrInput `pulumi:"app"`
	// Indicates if the active user can change permissions for this object. Defaults to true.
	CanChangePerms pulumi.BoolPtrInput `pulumi:"canChangePerms"`
	// Indicates if the active user can change sharing to app level. Defaults to true.
	CanShareApp pulumi.BoolPtrInput `pulumi:"canShareApp"`
	// Indicates if the active user can change sharing to system level. Defaults to true.
	CanShareGlobal pulumi.BoolPtrInput `pulumi:"canShareGlobal"`
	// Indicates if the active user can change sharing to user level. Defaults to true.
	CanShareUser pulumi.BoolPtrInput `pulumi:"canShareUser"`
	// Indicates if the active user can edit this object. Defaults to true.
	CanWrite pulumi.BoolPtrInput `pulumi:"canWrite"`
	// User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
	Owner pulumi.StringPtrInput `pulumi:"owner"`
	// Properties that indicate resource read permissions.
	Reads pulumi.StringArrayInput `pulumi:"reads"`
	// Indicates whether an admin or user with sufficient permissions can delete the entity.
	Removable pulumi.BoolPtrInput `pulumi:"removable"`
	// Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
	Sharing pulumi.StringPtrInput `pulumi:"sharing"`
	// Properties that indicate write permissions of the resource.
	Writes pulumi.StringArrayInput `pulumi:"writes"`
}

func (ShIndexesManagerAclArgs) ElementType added in v0.4.0

func (ShIndexesManagerAclArgs) ElementType() reflect.Type

func (ShIndexesManagerAclArgs) ToShIndexesManagerAclOutput added in v0.4.0

func (i ShIndexesManagerAclArgs) ToShIndexesManagerAclOutput() ShIndexesManagerAclOutput

func (ShIndexesManagerAclArgs) ToShIndexesManagerAclOutputWithContext added in v0.4.0

func (i ShIndexesManagerAclArgs) ToShIndexesManagerAclOutputWithContext(ctx context.Context) ShIndexesManagerAclOutput

func (ShIndexesManagerAclArgs) ToShIndexesManagerAclPtrOutput added in v0.4.0

func (i ShIndexesManagerAclArgs) ToShIndexesManagerAclPtrOutput() ShIndexesManagerAclPtrOutput

func (ShIndexesManagerAclArgs) ToShIndexesManagerAclPtrOutputWithContext added in v0.4.0

func (i ShIndexesManagerAclArgs) ToShIndexesManagerAclPtrOutputWithContext(ctx context.Context) ShIndexesManagerAclPtrOutput

type ShIndexesManagerAclInput added in v0.4.0

type ShIndexesManagerAclInput interface {
	pulumi.Input

	ToShIndexesManagerAclOutput() ShIndexesManagerAclOutput
	ToShIndexesManagerAclOutputWithContext(context.Context) ShIndexesManagerAclOutput
}

ShIndexesManagerAclInput is an input type that accepts ShIndexesManagerAclArgs and ShIndexesManagerAclOutput values. You can construct a concrete instance of `ShIndexesManagerAclInput` via:

ShIndexesManagerAclArgs{...}

type ShIndexesManagerAclOutput added in v0.4.0

type ShIndexesManagerAclOutput struct{ *pulumi.OutputState }

func (ShIndexesManagerAclOutput) App added in v0.4.0

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (ShIndexesManagerAclOutput) CanChangePerms added in v0.4.0

func (o ShIndexesManagerAclOutput) CanChangePerms() pulumi.BoolPtrOutput

Indicates if the active user can change permissions for this object. Defaults to true.

func (ShIndexesManagerAclOutput) CanShareApp added in v0.4.0

Indicates if the active user can change sharing to app level. Defaults to true.

func (ShIndexesManagerAclOutput) CanShareGlobal added in v0.4.0

func (o ShIndexesManagerAclOutput) CanShareGlobal() pulumi.BoolPtrOutput

Indicates if the active user can change sharing to system level. Defaults to true.

func (ShIndexesManagerAclOutput) CanShareUser added in v0.4.0

Indicates if the active user can change sharing to user level. Defaults to true.

func (ShIndexesManagerAclOutput) CanWrite added in v0.4.0

Indicates if the active user can edit this object. Defaults to true.

func (ShIndexesManagerAclOutput) ElementType added in v0.4.0

func (ShIndexesManagerAclOutput) ElementType() reflect.Type

func (ShIndexesManagerAclOutput) Owner added in v0.4.0

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (ShIndexesManagerAclOutput) Reads added in v0.4.0

Properties that indicate resource read permissions.

func (ShIndexesManagerAclOutput) Removable added in v0.4.0

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (ShIndexesManagerAclOutput) Sharing added in v0.4.0

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (ShIndexesManagerAclOutput) ToShIndexesManagerAclOutput added in v0.4.0

func (o ShIndexesManagerAclOutput) ToShIndexesManagerAclOutput() ShIndexesManagerAclOutput

func (ShIndexesManagerAclOutput) ToShIndexesManagerAclOutputWithContext added in v0.4.0

func (o ShIndexesManagerAclOutput) ToShIndexesManagerAclOutputWithContext(ctx context.Context) ShIndexesManagerAclOutput

func (ShIndexesManagerAclOutput) ToShIndexesManagerAclPtrOutput added in v0.4.0

func (o ShIndexesManagerAclOutput) ToShIndexesManagerAclPtrOutput() ShIndexesManagerAclPtrOutput

func (ShIndexesManagerAclOutput) ToShIndexesManagerAclPtrOutputWithContext added in v0.4.0

func (o ShIndexesManagerAclOutput) ToShIndexesManagerAclPtrOutputWithContext(ctx context.Context) ShIndexesManagerAclPtrOutput

func (ShIndexesManagerAclOutput) Writes added in v0.4.0

Properties that indicate write permissions of the resource.

type ShIndexesManagerAclPtrInput added in v0.4.0

type ShIndexesManagerAclPtrInput interface {
	pulumi.Input

	ToShIndexesManagerAclPtrOutput() ShIndexesManagerAclPtrOutput
	ToShIndexesManagerAclPtrOutputWithContext(context.Context) ShIndexesManagerAclPtrOutput
}

ShIndexesManagerAclPtrInput is an input type that accepts ShIndexesManagerAclArgs, ShIndexesManagerAclPtr and ShIndexesManagerAclPtrOutput values. You can construct a concrete instance of `ShIndexesManagerAclPtrInput` via:

        ShIndexesManagerAclArgs{...}

or:

        nil

func ShIndexesManagerAclPtr added in v0.4.0

func ShIndexesManagerAclPtr(v *ShIndexesManagerAclArgs) ShIndexesManagerAclPtrInput

type ShIndexesManagerAclPtrOutput added in v0.4.0

type ShIndexesManagerAclPtrOutput struct{ *pulumi.OutputState }

func (ShIndexesManagerAclPtrOutput) App added in v0.4.0

The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system

func (ShIndexesManagerAclPtrOutput) CanChangePerms added in v0.4.0

Indicates if the active user can change permissions for this object. Defaults to true.

func (ShIndexesManagerAclPtrOutput) CanShareApp added in v0.4.0

Indicates if the active user can change sharing to app level. Defaults to true.

func (ShIndexesManagerAclPtrOutput) CanShareGlobal added in v0.4.0

Indicates if the active user can change sharing to system level. Defaults to true.

func (ShIndexesManagerAclPtrOutput) CanShareUser added in v0.4.0

Indicates if the active user can change sharing to user level. Defaults to true.

func (ShIndexesManagerAclPtrOutput) CanWrite added in v0.4.0

Indicates if the active user can edit this object. Defaults to true.

func (ShIndexesManagerAclPtrOutput) Elem added in v0.4.0

func (ShIndexesManagerAclPtrOutput) ElementType added in v0.4.0

func (ShIndexesManagerAclPtrOutput) Owner added in v0.4.0

User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.

func (ShIndexesManagerAclPtrOutput) Reads added in v0.4.0

Properties that indicate resource read permissions.

func (ShIndexesManagerAclPtrOutput) Removable added in v0.4.0

Indicates whether an admin or user with sufficient permissions can delete the entity.

func (ShIndexesManagerAclPtrOutput) Sharing added in v0.4.0

Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user

func (ShIndexesManagerAclPtrOutput) ToShIndexesManagerAclPtrOutput added in v0.4.0

func (o ShIndexesManagerAclPtrOutput) ToShIndexesManagerAclPtrOutput() ShIndexesManagerAclPtrOutput

func (ShIndexesManagerAclPtrOutput) ToShIndexesManagerAclPtrOutputWithContext added in v0.4.0

func (o ShIndexesManagerAclPtrOutput) ToShIndexesManagerAclPtrOutputWithContext(ctx context.Context) ShIndexesManagerAclPtrOutput

func (ShIndexesManagerAclPtrOutput) Writes added in v0.4.0

Properties that indicate write permissions of the resource.

type ShIndexesManagerArgs added in v0.4.0

type ShIndexesManagerArgs struct {
	Acl ShIndexesManagerAclPtrInput
	// Valid values: (event | metric). Specifies the type of index.
	Datatype pulumi.StringPtrInput
	// Number of seconds after which indexed data rolls to frozen.
	// Defaults to 94608000 (3 years).Freezing data means it is removed from the index. If you need to archive your data, refer to coldToFrozenDir and coldToFrozenScript parameter documentation.
	FrozenTimePeriodInSecs pulumi.StringPtrInput
	// The maximum size of an index (in MB). If an index grows larger than the maximum size, the oldest data is frozen.
	// Defaults to 100 MB.
	MaxGlobalRawDataSizeMb pulumi.StringPtrInput
	// The name of the index to create.
	Name pulumi.StringPtrInput
}

The set of arguments for constructing a ShIndexesManager resource.

func (ShIndexesManagerArgs) ElementType added in v0.4.0

func (ShIndexesManagerArgs) ElementType() reflect.Type

type ShIndexesManagerArray added in v0.4.0

type ShIndexesManagerArray []ShIndexesManagerInput

func (ShIndexesManagerArray) ElementType added in v0.4.0

func (ShIndexesManagerArray) ElementType() reflect.Type

func (ShIndexesManagerArray) ToShIndexesManagerArrayOutput added in v0.4.0

func (i ShIndexesManagerArray) ToShIndexesManagerArrayOutput() ShIndexesManagerArrayOutput

func (ShIndexesManagerArray) ToShIndexesManagerArrayOutputWithContext added in v0.4.0

func (i ShIndexesManagerArray) ToShIndexesManagerArrayOutputWithContext(ctx context.Context) ShIndexesManagerArrayOutput

type ShIndexesManagerArrayInput added in v0.4.0

type ShIndexesManagerArrayInput interface {
	pulumi.Input

	ToShIndexesManagerArrayOutput() ShIndexesManagerArrayOutput
	ToShIndexesManagerArrayOutputWithContext(context.Context) ShIndexesManagerArrayOutput
}

ShIndexesManagerArrayInput is an input type that accepts ShIndexesManagerArray and ShIndexesManagerArrayOutput values. You can construct a concrete instance of `ShIndexesManagerArrayInput` via:

ShIndexesManagerArray{ ShIndexesManagerArgs{...} }

type ShIndexesManagerArrayOutput added in v0.4.0

type ShIndexesManagerArrayOutput struct{ *pulumi.OutputState }

func (ShIndexesManagerArrayOutput) ElementType added in v0.4.0

func (ShIndexesManagerArrayOutput) Index added in v0.4.0

func (ShIndexesManagerArrayOutput) ToShIndexesManagerArrayOutput added in v0.4.0

func (o ShIndexesManagerArrayOutput) ToShIndexesManagerArrayOutput() ShIndexesManagerArrayOutput

func (ShIndexesManagerArrayOutput) ToShIndexesManagerArrayOutputWithContext added in v0.4.0

func (o ShIndexesManagerArrayOutput) ToShIndexesManagerArrayOutputWithContext(ctx context.Context) ShIndexesManagerArrayOutput

type ShIndexesManagerInput added in v0.4.0

type ShIndexesManagerInput interface {
	pulumi.Input

	ToShIndexesManagerOutput() ShIndexesManagerOutput
	ToShIndexesManagerOutputWithContext(ctx context.Context) ShIndexesManagerOutput
}

type ShIndexesManagerMap added in v0.4.0

type ShIndexesManagerMap map[string]ShIndexesManagerInput

func (ShIndexesManagerMap) ElementType added in v0.4.0

func (ShIndexesManagerMap) ElementType() reflect.Type

func (ShIndexesManagerMap) ToShIndexesManagerMapOutput added in v0.4.0

func (i ShIndexesManagerMap) ToShIndexesManagerMapOutput() ShIndexesManagerMapOutput

func (ShIndexesManagerMap) ToShIndexesManagerMapOutputWithContext added in v0.4.0

func (i ShIndexesManagerMap) ToShIndexesManagerMapOutputWithContext(ctx context.Context) ShIndexesManagerMapOutput

type ShIndexesManagerMapInput added in v0.4.0

type ShIndexesManagerMapInput interface {
	pulumi.Input

	ToShIndexesManagerMapOutput() ShIndexesManagerMapOutput
	ToShIndexesManagerMapOutputWithContext(context.Context) ShIndexesManagerMapOutput
}

ShIndexesManagerMapInput is an input type that accepts ShIndexesManagerMap and ShIndexesManagerMapOutput values. You can construct a concrete instance of `ShIndexesManagerMapInput` via:

ShIndexesManagerMap{ "key": ShIndexesManagerArgs{...} }

type ShIndexesManagerMapOutput added in v0.4.0

type ShIndexesManagerMapOutput struct{ *pulumi.OutputState }

func (ShIndexesManagerMapOutput) ElementType added in v0.4.0

func (ShIndexesManagerMapOutput) ElementType() reflect.Type

func (ShIndexesManagerMapOutput) MapIndex added in v0.4.0

func (ShIndexesManagerMapOutput) ToShIndexesManagerMapOutput added in v0.4.0

func (o ShIndexesManagerMapOutput) ToShIndexesManagerMapOutput() ShIndexesManagerMapOutput

func (ShIndexesManagerMapOutput) ToShIndexesManagerMapOutputWithContext added in v0.4.0

func (o ShIndexesManagerMapOutput) ToShIndexesManagerMapOutputWithContext(ctx context.Context) ShIndexesManagerMapOutput

type ShIndexesManagerOutput added in v0.4.0

type ShIndexesManagerOutput struct{ *pulumi.OutputState }

func (ShIndexesManagerOutput) Acl added in v1.1.5

func (ShIndexesManagerOutput) Datatype added in v1.1.5

Valid values: (event | metric). Specifies the type of index.

func (ShIndexesManagerOutput) ElementType added in v0.4.0

func (ShIndexesManagerOutput) ElementType() reflect.Type

func (ShIndexesManagerOutput) FrozenTimePeriodInSecs added in v1.1.5

func (o ShIndexesManagerOutput) FrozenTimePeriodInSecs() pulumi.StringPtrOutput

Number of seconds after which indexed data rolls to frozen. Defaults to 94608000 (3 years).Freezing data means it is removed from the index. If you need to archive your data, refer to coldToFrozenDir and coldToFrozenScript parameter documentation.

func (ShIndexesManagerOutput) MaxGlobalRawDataSizeMb added in v1.1.5

func (o ShIndexesManagerOutput) MaxGlobalRawDataSizeMb() pulumi.StringPtrOutput

The maximum size of an index (in MB). If an index grows larger than the maximum size, the oldest data is frozen. Defaults to 100 MB.

func (ShIndexesManagerOutput) Name added in v1.1.5

The name of the index to create.

func (ShIndexesManagerOutput) ToShIndexesManagerOutput added in v0.4.0

func (o ShIndexesManagerOutput) ToShIndexesManagerOutput() ShIndexesManagerOutput

func (ShIndexesManagerOutput) ToShIndexesManagerOutputWithContext added in v0.4.0

func (o ShIndexesManagerOutput) ToShIndexesManagerOutputWithContext(ctx context.Context) ShIndexesManagerOutput

type ShIndexesManagerState added in v0.4.0

type ShIndexesManagerState struct {
	Acl ShIndexesManagerAclPtrInput
	// Valid values: (event | metric). Specifies the type of index.
	Datatype pulumi.StringPtrInput
	// Number of seconds after which indexed data rolls to frozen.
	// Defaults to 94608000 (3 years).Freezing data means it is removed from the index. If you need to archive your data, refer to coldToFrozenDir and coldToFrozenScript parameter documentation.
	FrozenTimePeriodInSecs pulumi.StringPtrInput
	// The maximum size of an index (in MB). If an index grows larger than the maximum size, the oldest data is frozen.
	// Defaults to 100 MB.
	MaxGlobalRawDataSizeMb pulumi.StringPtrInput
	// The name of the index to create.
	Name pulumi.StringPtrInput
}

func (ShIndexesManagerState) ElementType added in v0.4.0

func (ShIndexesManagerState) ElementType() reflect.Type

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL