You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-`name` - (Required) The name of the collector. This is required, and has to be unique. Changing this will force recreation the collector.
25
27
-`description` - (Optional) The description of the collector.
26
28
-`category` - (Optional) The default source category for any source attached to this collector. Can be overridden in the configuration of said sources.
@@ -29,8 +31,8 @@ The following arguments are supported:
29
31
-`lookup_by_name` - (Optional) Configures an existent collector using the same 'name' or creates a new one if non existent. Defaults to false.
30
32
-`destroy` - (Optional) Whether or not to delete the collector in Sumo when it is removed from Terraform. Defaults to true.
31
33
32
-
## Attributes reference
33
34
The following attributes are exported:
35
+
34
36
-`id` - The internal ID of the collector. This can be used to attach sources to the collector.
"description": "Runs every hour with timerange of 15m and sends email notifications"
55
+
}
56
+
}
57
+
```
58
+
59
+
## Argument reference
60
+
61
+
The following arguments are supported:
62
+
63
+
-`parent_id` - (Required) The identifier of the folder to import into. Identifiers from the Library in the Sumo user interface are provided in decimal format which is incompatible with Terraform. The identifier needs to be in hexadecimal format.
64
+
-`config` - (Required) JSON block for the content to import.
-`name` - (Required) Name of the field extraction rule. Use a name that makes it easy to identify the rule.
26
+
-`scope` - (Required) Scope of the field extraction rule. This could be a sourceCategory, sourceHost, or any other metadata that describes the data you want to extract from. Think of the Scope as the first portion of an ad hoc search, before the first pipe ( | ). You'll use the Scope to run a search against the rule.
27
+
-`parse_expression` - (Required) Describes the fields to be parsed.
28
+
-`enabled` - (Required) Is the field extraction rule enabled.
29
+
30
+
## Attributes reference
31
+
32
+
The following attributes are exported:
33
+
34
+
-`id` - Unique identifier for the field extraction rule.
0 commit comments