content.html.markdown

layout	page_title	description
sumologic	SumoLogic: sumologic_content	Provides a way to interact with Sumologic Content

sumologic_content

Provides a way to interact with Sumologic Content.

~> NOTE: If working with many content items it is recommended to reduce Terraform Parallelism to 2 in order to not be rate limited.

Example Usage

data "sumologic_personal_folder" "personalFolder" {}

resource "sumologic_content" "test" {
    parent_id = "${data.sumologic_personal_folder.personalFolder.id}"
    config = jsonencode({
        "type": "SavedSearchWithScheduleSyncDefinition",
        "name": "test-333",
        "search": {
            "queryText": "\"warn\"",
            "defaultTimeRange": "-15m",
            "byReceiptTime": false,
            "viewName": "",
            "viewStartTime": "1970-01-01T00:00:00Z",
            "queryParameters": [],
            "parsingMode": "Manual"
        },
        "searchSchedule": {
            "cronExpression": "0 0 * * * ? *",
            "displayableTimeRange": "-10m",
            "parseableTimeRange": {
                "type": "BeginBoundedTimeRange",
                "from": {
                    "type": "RelativeTimeRangeBoundary",
                    "relativeTime": "-50m"
                },
                "to": null
            },
            "timeZone": "America/Los_Angeles",
            "threshold": {
                "operator": "gt",
                "count": 0
            },
            "notification": {
                "taskType": "EmailSearchNotificationSyncDefinition",
                "toList": ["ops@acme.org"],
                "subjectTemplate": "Search Results: {{Name}}",
                "includeQuery": true,
                "includeResultSet": true,
                "includeHistogram": false,
                "includeCsvAttachment": false
            },
            "scheduleType": "1Hour",
            "muteErrorEmails": false,
            "parameters": []
        },
        "description": "Runs every hour with timerange of 15m and sends email notifications"
    })
}

Argument reference

The following arguments are supported:

• parent_id - (Required) The identifier of the folder to import into. Identifiers from the Library in the Sumo user interface are provided in decimal format which is incompatible with Terraform. The identifier needs to be in hexadecimal format.
• config - (Required) JSON block for the content to import. NOTE: Updating the name will create a new object and leave a untracked content item (delete the existing content item and create a new content item if you want to update the name).

Timeouts

sumologic_content provides the following Timeouts configuration options:

• read - (Default 1 minute) Used for waiting for the import job to be successful
• create - (Default 10 minutes) Used for waiting for the import job to be successful
• update - (Default 10 minutes) Used for waiting for the import job to be successful
• delete - (Default 1 minute) Used for waiting for the deletion job to be successful

Attributes reference

The following attributes are exported:

• id - Unique identifier for the content item.