Skip to main content

dynamic_parsing_rules

Overview

Namedynamic_parsing_rules
TypeResource
Idsumologic.dynamic_parsing_rules.dynamic_parsing_rules

Fields

NameDatatypeDescription
idstringUnique identifier for the dynamic parsing rule.
namestringName of the dynamic parsing rule. Use a name that makes it easy to identify the rule.
createdBystringIdentifier of the user who created the resource.
scopestringScope of the dynamic parsing rule. This could be a sourceCategory, sourceHost, or any other metadata that describes the data you want to extract from. Think of the Scope as the first portion of an ad hoc search, before the first pipe ( | ). You'll use the Scope to run a search against the rule.
createdAtstringCreation timestamp in UTC in RFC3339 format.
isSystemRulebooleanWhether the rule has been defined by the system, rather than by a user.
modifiedAtstringLast modification timestamp in UTC.
enabledbooleanIs the dynamic parsing rule enabled.
modifiedBystringIdentifier of the user who last modified the resource.

Methods

NameAccessible byRequired ParamsDescription
getDynamicParsingRuleSELECTid, regionGet a dynamic parsing rule with the given identifier.
listDynamicParsingRulesSELECTregionGet a list of all dynamic parsing rules. The response is paginated with a default limit of 100 dynamic parsing rules per page.
createDynamicParsingRuleINSERTdata__enabled, data__name, data__scope, regionCreate a new dynamic parsing rule.
deleteDynamicParsingRuleDELETEid, regionDelete a dynamic parsing rule with the given identifier.
updateDynamicParsingRuleEXECid, data__enabled, data__name, data__scope, regionUpdate an existing dynamic parsing rule. All properties specified in the request are replaced. Missing properties are set to their default values.