import * as pulumi from "@pulumi/pulumi"; import * as inputs from "./types/input"; import * as outputs from "./types/output"; /** * Provides a Sumo Logic CSE Custom Insight. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as sumologic from "@pulumi/sumologic"; * * const customInsight = new sumologic.CseCustomInsight("custom_insight", { * description: "Insight description", * enabled: true, * ordered: true, * name: "Custom Insight Example", * ruleIds: [ * "MATCH-S00001", * "THRESHOLD-U00005", * ], * severity: "HIGH", * signalMatchStrategy: "ENTITY", * dynamicSeverities: [{ * minimumSignalSeverity: 8, * insightSeverity: "CRITICAL", * }], * signalNames: [ * "Some Signal Name", * "Wildcard Signal Name *", * ], * tags: ["_mitreAttackTactic:TA0009"], * }); * ``` * * ## Import * * Custom Insights can be imported using the field id, e.g.: * * hcl * * ```sh * $ pulumi import sumologic:index/cseCustomInsight:CseCustomInsight custom_insight id * ``` */ export declare class CseCustomInsight extends pulumi.CustomResource { /** * Get an existing CseCustomInsight resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: CseCustomInsightState, opts?: pulumi.CustomResourceOptions): CseCustomInsight; /** * Returns true if the given object is an instance of CseCustomInsight. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is CseCustomInsight; /** * The description of the generated Insights */ readonly description: pulumi.Output; /** * The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight. */ readonly dynamicSeverities: pulumi.Output; /** * Whether the Custom Insight should generate Insights */ readonly enabled: pulumi.Output; /** * The name of the Custom Insight and the generated Insights */ readonly name: pulumi.Output; /** * Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight */ readonly ordered: pulumi.Output; /** * The Rule IDs to match to generate an Insight (exactly one of ruleIds or signalNames must be specified) */ readonly ruleIds: pulumi.Output; /** * The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW) */ readonly severity: pulumi.Output; /** * The signal match strategy to use when generating insights (ENTITY, STRICT) */ readonly signalMatchStrategy: pulumi.Output; /** * The Signal names to match to generate an Insight (exactly one of ruleIds or signalNames must be specified) */ readonly signalNames: pulumi.Output; /** * The tags of the generated Insights * * The following attributes are exported: */ readonly tags: pulumi.Output; /** * Create a CseCustomInsight resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: CseCustomInsightArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering CseCustomInsight resources. */ export interface CseCustomInsightState { /** * The description of the generated Insights */ description?: pulumi.Input; /** * The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight. */ dynamicSeverities?: pulumi.Input[]>; /** * Whether the Custom Insight should generate Insights */ enabled?: pulumi.Input; /** * The name of the Custom Insight and the generated Insights */ name?: pulumi.Input; /** * Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight */ ordered?: pulumi.Input; /** * The Rule IDs to match to generate an Insight (exactly one of ruleIds or signalNames must be specified) */ ruleIds?: pulumi.Input[]>; /** * The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW) */ severity?: pulumi.Input; /** * The signal match strategy to use when generating insights (ENTITY, STRICT) */ signalMatchStrategy?: pulumi.Input; /** * The Signal names to match to generate an Insight (exactly one of ruleIds or signalNames must be specified) */ signalNames?: pulumi.Input[]>; /** * The tags of the generated Insights * * The following attributes are exported: */ tags?: pulumi.Input[]>; } /** * The set of arguments for constructing a CseCustomInsight resource. */ export interface CseCustomInsightArgs { /** * The description of the generated Insights */ description: pulumi.Input; /** * The severity of the generated Insight that is based on the severity of the Signals that trigger the Insight. */ dynamicSeverities?: pulumi.Input[]>; /** * Whether the Custom Insight should generate Insights */ enabled: pulumi.Input; /** * The name of the Custom Insight and the generated Insights */ name?: pulumi.Input; /** * Whether the signals matching the rule IDs/signal names must be in the same chronological order as they are listed in the Custom Insight */ ordered: pulumi.Input; /** * The Rule IDs to match to generate an Insight (exactly one of ruleIds or signalNames must be specified) */ ruleIds?: pulumi.Input[]>; /** * The severity of the generated Insights (CRITICAL, HIGH, MEDIUM, or LOW) */ severity: pulumi.Input; /** * The signal match strategy to use when generating insights (ENTITY, STRICT) */ signalMatchStrategy?: pulumi.Input; /** * The Signal names to match to generate an Insight (exactly one of ruleIds or signalNames must be specified) */ signalNames?: pulumi.Input[]>; /** * The tags of the generated Insights * * The following attributes are exported: */ tags: pulumi.Input[]>; }