splunk.OutputsTcpGroup
Explore with Pulumi AI
# Resource: splunk.OutputsTcpGroup
Access to the configuration of a group of one or more data forwarding destinations.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as splunk from "@pulumi/splunk";
const tcpGroup = new splunk.OutputsTcpGroup("tcp_group", {
name: "tcp-group",
disabled: false,
dropEventsOnQueueFull: 60,
sendCookedData: true,
maxQueueSize: "100KB",
servers: [
"1.1.1.1:1234",
"2.2.2.2:1234",
],
});
import pulumi
import pulumi_splunk as splunk
tcp_group = splunk.OutputsTcpGroup("tcp_group",
name="tcp-group",
disabled=False,
drop_events_on_queue_full=60,
send_cooked_data=True,
max_queue_size="100KB",
servers=[
"1.1.1.1:1234",
"2.2.2.2:1234",
])
package main
import (
"github.com/pulumi/pulumi-splunk/sdk/go/splunk"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := splunk.NewOutputsTcpGroup(ctx, "tcp_group", &splunk.OutputsTcpGroupArgs{
Name: pulumi.String("tcp-group"),
Disabled: pulumi.Bool(false),
DropEventsOnQueueFull: pulumi.Int(60),
SendCookedData: pulumi.Bool(true),
MaxQueueSize: pulumi.String("100KB"),
Servers: pulumi.StringArray{
pulumi.String("1.1.1.1:1234"),
pulumi.String("2.2.2.2:1234"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Splunk = Pulumi.Splunk;
return await Deployment.RunAsync(() =>
{
var tcpGroup = new Splunk.OutputsTcpGroup("tcp_group", new()
{
Name = "tcp-group",
Disabled = false,
DropEventsOnQueueFull = 60,
SendCookedData = true,
MaxQueueSize = "100KB",
Servers = new[]
{
"1.1.1.1:1234",
"2.2.2.2:1234",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.splunk.OutputsTcpGroup;
import com.pulumi.splunk.OutputsTcpGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var tcpGroup = new OutputsTcpGroup("tcpGroup", OutputsTcpGroupArgs.builder()
.name("tcp-group")
.disabled(false)
.dropEventsOnQueueFull(60)
.sendCookedData(true)
.maxQueueSize("100KB")
.servers(
"1.1.1.1:1234",
"2.2.2.2:1234")
.build());
}
}
resources:
tcpGroup:
type: splunk:OutputsTcpGroup
name: tcp_group
properties:
name: tcp-group
disabled: false
dropEventsOnQueueFull: 60
sendCookedData: true
maxQueueSize: 100KB
servers:
- 1.1.1.1:1234
- 2.2.2.2:1234
Create OutputsTcpGroup Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new OutputsTcpGroup(name: string, args: OutputsTcpGroupArgs, opts?: CustomResourceOptions);
@overload
def OutputsTcpGroup(resource_name: str,
args: OutputsTcpGroupArgs,
opts: Optional[ResourceOptions] = None)
@overload
def OutputsTcpGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
servers: Optional[Sequence[str]] = None,
acl: Optional[OutputsTcpGroupAclArgs] = None,
compressed: Optional[bool] = None,
disabled: Optional[bool] = None,
drop_events_on_queue_full: Optional[int] = None,
heartbeat_frequency: Optional[int] = None,
max_queue_size: Optional[str] = None,
method: Optional[str] = None,
name: Optional[str] = None,
send_cooked_data: Optional[bool] = None,
token: Optional[str] = None)
func NewOutputsTcpGroup(ctx *Context, name string, args OutputsTcpGroupArgs, opts ...ResourceOption) (*OutputsTcpGroup, error)
public OutputsTcpGroup(string name, OutputsTcpGroupArgs args, CustomResourceOptions? opts = null)
public OutputsTcpGroup(String name, OutputsTcpGroupArgs args)
public OutputsTcpGroup(String name, OutputsTcpGroupArgs args, CustomResourceOptions options)
type: splunk:OutputsTcpGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args OutputsTcpGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args OutputsTcpGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args OutputsTcpGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args OutputsTcpGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args OutputsTcpGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var outputsTcpGroupResource = new Splunk.OutputsTcpGroup("outputsTcpGroupResource", new()
{
Servers = new[]
{
"string",
},
Acl = new Splunk.Inputs.OutputsTcpGroupAclArgs
{
App = "string",
CanChangePerms = false,
CanShareApp = false,
CanShareGlobal = false,
CanShareUser = false,
CanWrite = false,
Owner = "string",
Reads = new[]
{
"string",
},
Removable = false,
Sharing = "string",
Writes = new[]
{
"string",
},
},
Compressed = false,
Disabled = false,
DropEventsOnQueueFull = 0,
HeartbeatFrequency = 0,
MaxQueueSize = "string",
Method = "string",
Name = "string",
SendCookedData = false,
Token = "string",
});
example, err := splunk.NewOutputsTcpGroup(ctx, "outputsTcpGroupResource", &splunk.OutputsTcpGroupArgs{
Servers: pulumi.StringArray{
pulumi.String("string"),
},
Acl: &splunk.OutputsTcpGroupAclArgs{
App: pulumi.String("string"),
CanChangePerms: pulumi.Bool(false),
CanShareApp: pulumi.Bool(false),
CanShareGlobal: pulumi.Bool(false),
CanShareUser: pulumi.Bool(false),
CanWrite: pulumi.Bool(false),
Owner: pulumi.String("string"),
Reads: pulumi.StringArray{
pulumi.String("string"),
},
Removable: pulumi.Bool(false),
Sharing: pulumi.String("string"),
Writes: pulumi.StringArray{
pulumi.String("string"),
},
},
Compressed: pulumi.Bool(false),
Disabled: pulumi.Bool(false),
DropEventsOnQueueFull: pulumi.Int(0),
HeartbeatFrequency: pulumi.Int(0),
MaxQueueSize: pulumi.String("string"),
Method: pulumi.String("string"),
Name: pulumi.String("string"),
SendCookedData: pulumi.Bool(false),
Token: pulumi.String("string"),
})
var outputsTcpGroupResource = new OutputsTcpGroup("outputsTcpGroupResource", OutputsTcpGroupArgs.builder()
.servers("string")
.acl(OutputsTcpGroupAclArgs.builder()
.app("string")
.canChangePerms(false)
.canShareApp(false)
.canShareGlobal(false)
.canShareUser(false)
.canWrite(false)
.owner("string")
.reads("string")
.removable(false)
.sharing("string")
.writes("string")
.build())
.compressed(false)
.disabled(false)
.dropEventsOnQueueFull(0)
.heartbeatFrequency(0)
.maxQueueSize("string")
.method("string")
.name("string")
.sendCookedData(false)
.token("string")
.build());
outputs_tcp_group_resource = splunk.OutputsTcpGroup("outputsTcpGroupResource",
servers=["string"],
acl=splunk.OutputsTcpGroupAclArgs(
app="string",
can_change_perms=False,
can_share_app=False,
can_share_global=False,
can_share_user=False,
can_write=False,
owner="string",
reads=["string"],
removable=False,
sharing="string",
writes=["string"],
),
compressed=False,
disabled=False,
drop_events_on_queue_full=0,
heartbeat_frequency=0,
max_queue_size="string",
method="string",
name="string",
send_cooked_data=False,
token="string")
const outputsTcpGroupResource = new splunk.OutputsTcpGroup("outputsTcpGroupResource", {
servers: ["string"],
acl: {
app: "string",
canChangePerms: false,
canShareApp: false,
canShareGlobal: false,
canShareUser: false,
canWrite: false,
owner: "string",
reads: ["string"],
removable: false,
sharing: "string",
writes: ["string"],
},
compressed: false,
disabled: false,
dropEventsOnQueueFull: 0,
heartbeatFrequency: 0,
maxQueueSize: "string",
method: "string",
name: "string",
sendCookedData: false,
token: "string",
});
type: splunk:OutputsTcpGroup
properties:
acl:
app: string
canChangePerms: false
canShareApp: false
canShareGlobal: false
canShareUser: false
canWrite: false
owner: string
reads:
- string
removable: false
sharing: string
writes:
- string
compressed: false
disabled: false
dropEventsOnQueueFull: 0
heartbeatFrequency: 0
maxQueueSize: string
method: string
name: string
sendCookedData: false
servers:
- string
token: string
OutputsTcpGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The OutputsTcpGroup resource accepts the following input properties:
- Servers List<string>
- Comma-separated list of servers to include in the group.
- Acl
Outputs
Tcp Group Acl - The app/user context that is the namespace for the resource
- Compressed bool
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- Disabled bool
- If true, disables the group.
- Drop
Events intOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- Heartbeat
Frequency int - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- Max
Queue stringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- Method string
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- Name string
- The name of the group of receivers.
- Send
Cooked boolData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- Token string
- Token value generated by the indexer after configuration.
- Servers []string
- Comma-separated list of servers to include in the group.
- Acl
Outputs
Tcp Group Acl Args - The app/user context that is the namespace for the resource
- Compressed bool
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- Disabled bool
- If true, disables the group.
- Drop
Events intOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- Heartbeat
Frequency int - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- Max
Queue stringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- Method string
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- Name string
- The name of the group of receivers.
- Send
Cooked boolData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- Token string
- Token value generated by the indexer after configuration.
- servers List<String>
- Comma-separated list of servers to include in the group.
- acl
Outputs
Tcp Group Acl - The app/user context that is the namespace for the resource
- compressed Boolean
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- disabled Boolean
- If true, disables the group.
- drop
Events IntegerOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- heartbeat
Frequency Integer - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- max
Queue StringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- method String
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- name String
- The name of the group of receivers.
- send
Cooked BooleanData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- token String
- Token value generated by the indexer after configuration.
- servers string[]
- Comma-separated list of servers to include in the group.
- acl
Outputs
Tcp Group Acl - The app/user context that is the namespace for the resource
- compressed boolean
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- disabled boolean
- If true, disables the group.
- drop
Events numberOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- heartbeat
Frequency number - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- max
Queue stringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- method string
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- name string
- The name of the group of receivers.
- send
Cooked booleanData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- token string
- Token value generated by the indexer after configuration.
- servers Sequence[str]
- Comma-separated list of servers to include in the group.
- acl
Outputs
Tcp Group Acl Args - The app/user context that is the namespace for the resource
- compressed bool
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- disabled bool
- If true, disables the group.
- drop_
events_ inton_ queue_ full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- heartbeat_
frequency int - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- max_
queue_ strsize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- method str
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- name str
- The name of the group of receivers.
- send_
cooked_ booldata - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- token str
- Token value generated by the indexer after configuration.
- servers List<String>
- Comma-separated list of servers to include in the group.
- acl Property Map
- The app/user context that is the namespace for the resource
- compressed Boolean
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- disabled Boolean
- If true, disables the group.
- drop
Events NumberOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- heartbeat
Frequency Number - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- max
Queue StringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- method String
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- name String
- The name of the group of receivers.
- send
Cooked BooleanData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- token String
- Token value generated by the indexer after configuration.
Outputs
All input properties are implicitly available as output properties. Additionally, the OutputsTcpGroup resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing OutputsTcpGroup Resource
Get an existing OutputsTcpGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: OutputsTcpGroupState, opts?: CustomResourceOptions): OutputsTcpGroup
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
acl: Optional[OutputsTcpGroupAclArgs] = None,
compressed: Optional[bool] = None,
disabled: Optional[bool] = None,
drop_events_on_queue_full: Optional[int] = None,
heartbeat_frequency: Optional[int] = None,
max_queue_size: Optional[str] = None,
method: Optional[str] = None,
name: Optional[str] = None,
send_cooked_data: Optional[bool] = None,
servers: Optional[Sequence[str]] = None,
token: Optional[str] = None) -> OutputsTcpGroup
func GetOutputsTcpGroup(ctx *Context, name string, id IDInput, state *OutputsTcpGroupState, opts ...ResourceOption) (*OutputsTcpGroup, error)
public static OutputsTcpGroup Get(string name, Input<string> id, OutputsTcpGroupState? state, CustomResourceOptions? opts = null)
public static OutputsTcpGroup get(String name, Output<String> id, OutputsTcpGroupState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Acl
Outputs
Tcp Group Acl - The app/user context that is the namespace for the resource
- Compressed bool
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- Disabled bool
- If true, disables the group.
- Drop
Events intOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- Heartbeat
Frequency int - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- Max
Queue stringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- Method string
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- Name string
- The name of the group of receivers.
- Send
Cooked boolData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- Servers List<string>
- Comma-separated list of servers to include in the group.
- Token string
- Token value generated by the indexer after configuration.
- Acl
Outputs
Tcp Group Acl Args - The app/user context that is the namespace for the resource
- Compressed bool
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- Disabled bool
- If true, disables the group.
- Drop
Events intOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- Heartbeat
Frequency int - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- Max
Queue stringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- Method string
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- Name string
- The name of the group of receivers.
- Send
Cooked boolData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- Servers []string
- Comma-separated list of servers to include in the group.
- Token string
- Token value generated by the indexer after configuration.
- acl
Outputs
Tcp Group Acl - The app/user context that is the namespace for the resource
- compressed Boolean
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- disabled Boolean
- If true, disables the group.
- drop
Events IntegerOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- heartbeat
Frequency Integer - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- max
Queue StringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- method String
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- name String
- The name of the group of receivers.
- send
Cooked BooleanData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- servers List<String>
- Comma-separated list of servers to include in the group.
- token String
- Token value generated by the indexer after configuration.
- acl
Outputs
Tcp Group Acl - The app/user context that is the namespace for the resource
- compressed boolean
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- disabled boolean
- If true, disables the group.
- drop
Events numberOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- heartbeat
Frequency number - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- max
Queue stringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- method string
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- name string
- The name of the group of receivers.
- send
Cooked booleanData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- servers string[]
- Comma-separated list of servers to include in the group.
- token string
- Token value generated by the indexer after configuration.
- acl
Outputs
Tcp Group Acl Args - The app/user context that is the namespace for the resource
- compressed bool
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- disabled bool
- If true, disables the group.
- drop_
events_ inton_ queue_ full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- heartbeat_
frequency int - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- max_
queue_ strsize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- method str
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- name str
- The name of the group of receivers.
- send_
cooked_ booldata - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- servers Sequence[str]
- Comma-separated list of servers to include in the group.
- token str
- Token value generated by the indexer after configuration.
- acl Property Map
- The app/user context that is the namespace for the resource
- compressed Boolean
- If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on.
- disabled Boolean
- If true, disables the group.
- drop
Events NumberOn Queue Full - If set to a positive number, wait the specified number of seconds before throwing out all new events until the output queue has space. Defaults to -1 (do not drop events). CAUTION: Do not set this value to a positive integer if you are monitoring files. Setting this to -1 or 0 causes the output queue to block when it gets full, which causes further blocking up the processing chain. If any target group queue is blocked, no more data reaches any other target group. Using auto load-balancing is the best way to minimize this condition, because, in that case, multiple receivers must be down (or jammed up) before queue blocking can occur.
- heartbeat
Frequency Number - How often (in seconds) to send a heartbeat packet to the receiving server. Heartbeats are only sent if sendCookedData=true. Defaults to 30 seconds.
- max
Queue StringSize - Specify an integer or integer[KB|MB|GB]. Sets the maximum size of the forwarder output queue. It also sets the maximum size of the wait queue to 3x this value, if you have enabled indexer acknowledgment (useACK=true). Although the wait queue and the output queues are both configured by this attribute, they are separate queues. The setting determines the maximum size of the queue in-memory (RAM) buffer. For heavy forwarders sending parsed data, maxQueueSize is the maximum number of events. Since events are typically much shorter than data blocks, the memory consumed by the queue on a parsing forwarder is likely to be much smaller than on a non-parsing forwarder, if you use this version of the setting. If specified as a lone integer (for example, maxQueueSize=100), maxQueueSize indicates the maximum number of queued events (for parsed data) or blocks of data (for unparsed data). A block of data is approximately 64KB. For non-parsing forwarders, such as universal forwarders, that send unparsed data, maxQueueSize is the maximum number of data blocks. If specified as an integer followed by KB, MB, or GB (for example, maxQueueSize=100MB), maxQueueSize indicates the maximum RAM allocated to the queue buffer. Defaults to 500KB (which means a maximum size of 500KB for the output queue and 1500KB for the wait queue, if any).
- method String
- Valid values: (tcpout | syslog). Specifies the type of output processor.
- name String
- The name of the group of receivers.
- send
Cooked BooleanData - If true, events are cooked (processed by Splunk software). If false, events are raw and untouched prior to sending. Defaults to true. Set to false if you are sending to a third-party system.
- servers List<String>
- Comma-separated list of servers to include in the group.
- token String
- Token value generated by the indexer after configuration.
Supporting Types
OutputsTcpGroupAcl, OutputsTcpGroupAclArgs
- App string
- The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
- Can
Change boolPerms - Indicates if the active user can change permissions for this object. Defaults to true.
- bool
- Indicates if the active user can change sharing to app level. Defaults to true.
- bool
- Indicates if the active user can change sharing to system level. Defaults to true.
- bool
- Indicates if the active user can change sharing to user level. Defaults to true.
- Can
Write bool - Indicates if the active user can edit this object. Defaults to true.
- Owner string
- User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
- Reads List<string>
- Properties that indicate resource read permissions.
- Removable bool
- Indicates whether an admin or user with sufficient permissions can delete the entity.
- string
- Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
- Writes List<string>
- Properties that indicate write permissions of the resource.
- App string
- The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
- Can
Change boolPerms - Indicates if the active user can change permissions for this object. Defaults to true.
- bool
- Indicates if the active user can change sharing to app level. Defaults to true.
- bool
- Indicates if the active user can change sharing to system level. Defaults to true.
- bool
- Indicates if the active user can change sharing to user level. Defaults to true.
- Can
Write bool - Indicates if the active user can edit this object. Defaults to true.
- Owner string
- User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
- Reads []string
- Properties that indicate resource read permissions.
- Removable bool
- Indicates whether an admin or user with sufficient permissions can delete the entity.
- string
- Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
- Writes []string
- Properties that indicate write permissions of the resource.
- app String
- The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
- can
Change BooleanPerms - Indicates if the active user can change permissions for this object. Defaults to true.
- Boolean
- Indicates if the active user can change sharing to app level. Defaults to true.
- Boolean
- Indicates if the active user can change sharing to system level. Defaults to true.
- Boolean
- Indicates if the active user can change sharing to user level. Defaults to true.
- can
Write Boolean - Indicates if the active user can edit this object. Defaults to true.
- owner String
- User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
- reads List<String>
- Properties that indicate resource read permissions.
- removable Boolean
- Indicates whether an admin or user with sufficient permissions can delete the entity.
- String
- Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
- writes List<String>
- Properties that indicate write permissions of the resource.
- app string
- The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
- can
Change booleanPerms - Indicates if the active user can change permissions for this object. Defaults to true.
- boolean
- Indicates if the active user can change sharing to app level. Defaults to true.
- boolean
- Indicates if the active user can change sharing to system level. Defaults to true.
- boolean
- Indicates if the active user can change sharing to user level. Defaults to true.
- can
Write boolean - Indicates if the active user can edit this object. Defaults to true.
- owner string
- User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
- reads string[]
- Properties that indicate resource read permissions.
- removable boolean
- Indicates whether an admin or user with sufficient permissions can delete the entity.
- string
- Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
- writes string[]
- Properties that indicate write permissions of the resource.
- app str
- The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
- can_
change_ boolperms - Indicates if the active user can change permissions for this object. Defaults to true.
- bool
- Indicates if the active user can change sharing to app level. Defaults to true.
- bool
- Indicates if the active user can change sharing to system level. Defaults to true.
- bool
- Indicates if the active user can change sharing to user level. Defaults to true.
- can_
write bool - Indicates if the active user can edit this object. Defaults to true.
- owner str
- User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
- reads Sequence[str]
- Properties that indicate resource read permissions.
- removable bool
- Indicates whether an admin or user with sufficient permissions can delete the entity.
- str
- Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
- writes Sequence[str]
- Properties that indicate write permissions of the resource.
- app String
- The app context for the resource. Required for updating saved search ACL properties. Allowed values are:The name of an app and system
- can
Change BooleanPerms - Indicates if the active user can change permissions for this object. Defaults to true.
- Boolean
- Indicates if the active user can change sharing to app level. Defaults to true.
- Boolean
- Indicates if the active user can change sharing to system level. Defaults to true.
- Boolean
- Indicates if the active user can change sharing to user level. Defaults to true.
- can
Write Boolean - Indicates if the active user can edit this object. Defaults to true.
- owner String
- User name of resource owner. Defaults to the resource creator. Required for updating any knowledge object ACL properties.nobody = All users may access the resource, but write access to the resource might be restricted.
- reads List<String>
- Properties that indicate resource read permissions.
- removable Boolean
- Indicates whether an admin or user with sufficient permissions can delete the entity.
- String
- Indicates how the resource is shared. Required for updating any knowledge object ACL properties.app: Shared within a specific appglobal: (Default) Shared globally to all apps.user: Private to a user
- writes List<String>
- Properties that indicate write permissions of the resource.
Package Details
- Repository
- Splunk pulumi/pulumi-splunk
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
splunk
Terraform Provider.