1. Packages
  2. Sumo Logic
  3. API Docs
  4. LogSearch
Sumo Logic v0.22.1 published on Sunday, Jun 9, 2024 by Pulumi

sumologic.LogSearch

Explore with Pulumi AI

sumologic logo
Sumo Logic v0.22.1 published on Sunday, Jun 9, 2024 by Pulumi

    Provides a Sumologic Log Search.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as sumologic from "@pulumi/sumologic";
    
    const personalFolder = sumologic.getPersonalFolder({});
    const exampleLogSearch = new sumologic.LogSearch("example_log_search", {
        name: "Demo Search",
        description: "Demo search description",
        parentId: personalFolder.then(personalFolder => personalFolder.id),
        queryString: `        _sourceCategory=api
            | parse "parameter1=*," as parameter1
            | parse "parameter2=*," as parameter2
            | where parameter1 matches {{param1}}
            | where parameter2 matches {{param2}}
            | count by _sourceHost
    `,
        parsingMode: "AutoParse",
        runByReceiptTime: true,
        timeRange: {
            beginBoundedTimeRange: {
                from: {
                    relativeTimeRange: {
                        relativeTime: "-30m",
                    },
                },
            },
        },
        queryParameters: [
            {
                name: "param1",
                description: "Description for param1",
                dataType: "STRING",
                value: "*",
            },
            {
                name: "param2",
                description: "Description for param2",
                dataType: "STRING",
                value: "*",
            },
        ],
        schedule: {
            cronExpression: "0 0 * * * ? *",
            muteErrorEmails: false,
            notification: {
                emailSearchNotification: {
                    includeCsvAttachment: false,
                    includeHistogram: false,
                    includeQuery: true,
                    includeResultSet: true,
                    subjectTemplate: "Search Alert: {{TriggerCondition}} found for {{SearchName}}",
                    toLists: ["will@acme.com"],
                },
            },
            parseableTimeRange: {
                beginBoundedTimeRange: {
                    from: {
                        relativeTimeRange: {
                            relativeTime: "-15m",
                        },
                    },
                },
            },
            scheduleType: "1Week",
            threshold: {
                count: 10,
                operator: "gt",
                thresholdType: "group",
            },
            timeZone: "America/Los_Angeles",
            parameters: [
                {
                    name: "param1",
                    value: "*",
                },
                {
                    name: "param2",
                    value: "*",
                },
            ],
        },
    });
    
    import pulumi
    import pulumi_sumologic as sumologic
    
    personal_folder = sumologic.get_personal_folder()
    example_log_search = sumologic.LogSearch("example_log_search",
        name="Demo Search",
        description="Demo search description",
        parent_id=personal_folder.id,
        query_string="""        _sourceCategory=api
            | parse "parameter1=*," as parameter1
            | parse "parameter2=*," as parameter2
            | where parameter1 matches {{param1}}
            | where parameter2 matches {{param2}}
            | count by _sourceHost
    """,
        parsing_mode="AutoParse",
        run_by_receipt_time=True,
        time_range=sumologic.LogSearchTimeRangeArgs(
            begin_bounded_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeArgs(
                from_=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromArgs(
                    relative_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs(
                        relative_time="-30m",
                    ),
                ),
            ),
        ),
        query_parameters=[
            sumologic.LogSearchQueryParameterArgs(
                name="param1",
                description="Description for param1",
                data_type="STRING",
                value="*",
            ),
            sumologic.LogSearchQueryParameterArgs(
                name="param2",
                description="Description for param2",
                data_type="STRING",
                value="*",
            ),
        ],
        schedule=sumologic.LogSearchScheduleArgs(
            cron_expression="0 0 * * * ? *",
            mute_error_emails=False,
            notification=sumologic.LogSearchScheduleNotificationArgs(
                email_search_notification=sumologic.LogSearchScheduleNotificationEmailSearchNotificationArgs(
                    include_csv_attachment=False,
                    include_histogram=False,
                    include_query=True,
                    include_result_set=True,
                    subject_template="Search Alert: {{TriggerCondition}} found for {{SearchName}}",
                    to_lists=["will@acme.com"],
                ),
            ),
            parseable_time_range=sumologic.LogSearchScheduleParseableTimeRangeArgs(
                begin_bounded_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs(
                    from_=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs(
                        relative_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs(
                            relative_time="-15m",
                        ),
                    ),
                ),
            ),
            schedule_type="1Week",
            threshold=sumologic.LogSearchScheduleThresholdArgs(
                count=10,
                operator="gt",
                threshold_type="group",
            ),
            time_zone="America/Los_Angeles",
            parameters=[
                sumologic.LogSearchScheduleParameterArgs(
                    name="param1",
                    value="*",
                ),
                sumologic.LogSearchScheduleParameterArgs(
                    name="param2",
                    value="*",
                ),
            ],
        ))
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-sumologic/sdk/go/sumologic"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		personalFolder, err := sumologic.GetPersonalFolder(ctx, nil, nil)
    		if err != nil {
    			return err
    		}
    		_, err = sumologic.NewLogSearch(ctx, "example_log_search", &sumologic.LogSearchArgs{
    			Name:        pulumi.String("Demo Search"),
    			Description: pulumi.String("Demo search description"),
    			ParentId:    pulumi.String(personalFolder.Id),
    			QueryString: pulumi.String(`        _sourceCategory=api
            | parse "parameter1=*," as parameter1
            | parse "parameter2=*," as parameter2
            | where parameter1 matches {{param1}}
            | where parameter2 matches {{param2}}
            | count by _sourceHost
    `),
    			ParsingMode:      pulumi.String("AutoParse"),
    			RunByReceiptTime: pulumi.Bool(true),
    			TimeRange: &sumologic.LogSearchTimeRangeArgs{
    				BeginBoundedTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeArgs{
    					From: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromArgs{
    						RelativeTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs{
    							RelativeTime: pulumi.String("-30m"),
    						},
    					},
    				},
    			},
    			QueryParameters: sumologic.LogSearchQueryParameterArray{
    				&sumologic.LogSearchQueryParameterArgs{
    					Name:        pulumi.String("param1"),
    					Description: pulumi.String("Description for param1"),
    					DataType:    pulumi.String("STRING"),
    					Value:       pulumi.String("*"),
    				},
    				&sumologic.LogSearchQueryParameterArgs{
    					Name:        pulumi.String("param2"),
    					Description: pulumi.String("Description for param2"),
    					DataType:    pulumi.String("STRING"),
    					Value:       pulumi.String("*"),
    				},
    			},
    			Schedule: &sumologic.LogSearchScheduleArgs{
    				CronExpression:  pulumi.String("0 0 * * * ? *"),
    				MuteErrorEmails: pulumi.Bool(false),
    				Notification: &sumologic.LogSearchScheduleNotificationArgs{
    					EmailSearchNotification: &sumologic.LogSearchScheduleNotificationEmailSearchNotificationArgs{
    						IncludeCsvAttachment: pulumi.Bool(false),
    						IncludeHistogram:     pulumi.Bool(false),
    						IncludeQuery:         pulumi.Bool(true),
    						IncludeResultSet:     pulumi.Bool(true),
    						SubjectTemplate:      pulumi.String("Search Alert: {{TriggerCondition}} found for {{SearchName}}"),
    						ToLists: pulumi.StringArray{
    							pulumi.String("will@acme.com"),
    						},
    					},
    				},
    				ParseableTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeArgs{
    					BeginBoundedTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs{
    						From: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs{
    							RelativeTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs{
    								RelativeTime: pulumi.String("-15m"),
    							},
    						},
    					},
    				},
    				ScheduleType: pulumi.String("1Week"),
    				Threshold: &sumologic.LogSearchScheduleThresholdArgs{
    					Count:         pulumi.Int(10),
    					Operator:      pulumi.String("gt"),
    					ThresholdType: pulumi.String("group"),
    				},
    				TimeZone: pulumi.String("America/Los_Angeles"),
    				Parameters: sumologic.LogSearchScheduleParameterArray{
    					&sumologic.LogSearchScheduleParameterArgs{
    						Name:  pulumi.String("param1"),
    						Value: pulumi.String("*"),
    					},
    					&sumologic.LogSearchScheduleParameterArgs{
    						Name:  pulumi.String("param2"),
    						Value: pulumi.String("*"),
    					},
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using SumoLogic = Pulumi.SumoLogic;
    
    return await Deployment.RunAsync(() => 
    {
        var personalFolder = SumoLogic.GetPersonalFolder.Invoke();
    
        var exampleLogSearch = new SumoLogic.LogSearch("example_log_search", new()
        {
            Name = "Demo Search",
            Description = "Demo search description",
            ParentId = personalFolder.Apply(getPersonalFolderResult => getPersonalFolderResult.Id),
            QueryString = @"        _sourceCategory=api
            | parse ""parameter1=*,"" as parameter1
            | parse ""parameter2=*,"" as parameter2
            | where parameter1 matches {{param1}}
            | where parameter2 matches {{param2}}
            | count by _sourceHost
    ",
            ParsingMode = "AutoParse",
            RunByReceiptTime = true,
            TimeRange = new SumoLogic.Inputs.LogSearchTimeRangeArgs
            {
                BeginBoundedTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeArgs
                {
                    From = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromArgs
                    {
                        RelativeTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs
                        {
                            RelativeTime = "-30m",
                        },
                    },
                },
            },
            QueryParameters = new[]
            {
                new SumoLogic.Inputs.LogSearchQueryParameterArgs
                {
                    Name = "param1",
                    Description = "Description for param1",
                    DataType = "STRING",
                    Value = "*",
                },
                new SumoLogic.Inputs.LogSearchQueryParameterArgs
                {
                    Name = "param2",
                    Description = "Description for param2",
                    DataType = "STRING",
                    Value = "*",
                },
            },
            Schedule = new SumoLogic.Inputs.LogSearchScheduleArgs
            {
                CronExpression = "0 0 * * * ? *",
                MuteErrorEmails = false,
                Notification = new SumoLogic.Inputs.LogSearchScheduleNotificationArgs
                {
                    EmailSearchNotification = new SumoLogic.Inputs.LogSearchScheduleNotificationEmailSearchNotificationArgs
                    {
                        IncludeCsvAttachment = false,
                        IncludeHistogram = false,
                        IncludeQuery = true,
                        IncludeResultSet = true,
                        SubjectTemplate = "Search Alert: {{TriggerCondition}} found for {{SearchName}}",
                        ToLists = new[]
                        {
                            "will@acme.com",
                        },
                    },
                },
                ParseableTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeArgs
                {
                    BeginBoundedTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs
                    {
                        From = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs
                        {
                            RelativeTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs
                            {
                                RelativeTime = "-15m",
                            },
                        },
                    },
                },
                ScheduleType = "1Week",
                Threshold = new SumoLogic.Inputs.LogSearchScheduleThresholdArgs
                {
                    Count = 10,
                    Operator = "gt",
                    ThresholdType = "group",
                },
                TimeZone = "America/Los_Angeles",
                Parameters = new[]
                {
                    new SumoLogic.Inputs.LogSearchScheduleParameterArgs
                    {
                        Name = "param1",
                        Value = "*",
                    },
                    new SumoLogic.Inputs.LogSearchScheduleParameterArgs
                    {
                        Name = "param2",
                        Value = "*",
                    },
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.sumologic.SumologicFunctions;
    import com.pulumi.sumologic.inputs.GetPersonalFolderArgs;
    import com.pulumi.sumologic.LogSearch;
    import com.pulumi.sumologic.LogSearchArgs;
    import com.pulumi.sumologic.inputs.LogSearchTimeRangeArgs;
    import com.pulumi.sumologic.inputs.LogSearchTimeRangeBeginBoundedTimeRangeArgs;
    import com.pulumi.sumologic.inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromArgs;
    import com.pulumi.sumologic.inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs;
    import com.pulumi.sumologic.inputs.LogSearchQueryParameterArgs;
    import com.pulumi.sumologic.inputs.LogSearchScheduleArgs;
    import com.pulumi.sumologic.inputs.LogSearchScheduleNotificationArgs;
    import com.pulumi.sumologic.inputs.LogSearchScheduleNotificationEmailSearchNotificationArgs;
    import com.pulumi.sumologic.inputs.LogSearchScheduleParseableTimeRangeArgs;
    import com.pulumi.sumologic.inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs;
    import com.pulumi.sumologic.inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs;
    import com.pulumi.sumologic.inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs;
    import com.pulumi.sumologic.inputs.LogSearchScheduleThresholdArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var personalFolder = SumologicFunctions.getPersonalFolder();
    
            var exampleLogSearch = new LogSearch("exampleLogSearch", LogSearchArgs.builder()
                .name("Demo Search")
                .description("Demo search description")
                .parentId(personalFolder.applyValue(getPersonalFolderResult -> getPersonalFolderResult.id()))
                .queryString("""
            _sourceCategory=api
            | parse "parameter1=*," as parameter1
            | parse "parameter2=*," as parameter2
            | where parameter1 matches {{param1}}
            | where parameter2 matches {{param2}}
            | count by _sourceHost
                """)
                .parsingMode("AutoParse")
                .runByReceiptTime(true)
                .timeRange(LogSearchTimeRangeArgs.builder()
                    .beginBoundedTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeArgs.builder()
                        .from(LogSearchTimeRangeBeginBoundedTimeRangeFromArgs.builder()
                            .relativeTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs.builder()
                                .relativeTime("-30m")
                                .build())
                            .build())
                        .build())
                    .build())
                .queryParameters(            
                    LogSearchQueryParameterArgs.builder()
                        .name("param1")
                        .description("Description for param1")
                        .dataType("STRING")
                        .value("*")
                        .build(),
                    LogSearchQueryParameterArgs.builder()
                        .name("param2")
                        .description("Description for param2")
                        .dataType("STRING")
                        .value("*")
                        .build())
                .schedule(LogSearchScheduleArgs.builder()
                    .cronExpression("0 0 * * * ? *")
                    .muteErrorEmails(false)
                    .notification(LogSearchScheduleNotificationArgs.builder()
                        .emailSearchNotification(LogSearchScheduleNotificationEmailSearchNotificationArgs.builder()
                            .includeCsvAttachment(false)
                            .includeHistogram(false)
                            .includeQuery(true)
                            .includeResultSet(true)
                            .subjectTemplate("Search Alert: {{TriggerCondition}} found for {{SearchName}}")
                            .toLists("will@acme.com")
                            .build())
                        .build())
                    .parseableTimeRange(LogSearchScheduleParseableTimeRangeArgs.builder()
                        .beginBoundedTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs.builder()
                            .from(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs.builder()
                                .relativeTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs.builder()
                                    .relativeTime("-15m")
                                    .build())
                                .build())
                            .build())
                        .build())
                    .scheduleType("1Week")
                    .threshold(LogSearchScheduleThresholdArgs.builder()
                        .count(10)
                        .operator("gt")
                        .thresholdType("group")
                        .build())
                    .timeZone("America/Los_Angeles")
                    .parameters(                
                        LogSearchScheduleParameterArgs.builder()
                            .name("param1")
                            .value("*")
                            .build(),
                        LogSearchScheduleParameterArgs.builder()
                            .name("param2")
                            .value("*")
                            .build())
                    .build())
                .build());
    
        }
    }
    
    resources:
      exampleLogSearch:
        type: sumologic:LogSearch
        name: example_log_search
        properties:
          name: Demo Search
          description: Demo search description
          parentId: ${personalFolder.id}
          queryString: |2
                    _sourceCategory=api
                    | parse "parameter1=*," as parameter1
                    | parse "parameter2=*," as parameter2
                    | where parameter1 matches {{param1}}
                    | where parameter2 matches {{param2}}
                    | count by _sourceHost
          parsingMode: AutoParse
          runByReceiptTime: true
          timeRange:
            beginBoundedTimeRange:
              from:
                relativeTimeRange:
                  relativeTime: -30m
          queryParameters:
            - name: param1
              description: Description for param1
              dataType: STRING
              value: '*'
            - name: param2
              description: Description for param2
              dataType: STRING
              value: '*'
          schedule:
            cronExpression: 0 0 * * * ? *
            muteErrorEmails: false
            notification:
              emailSearchNotification:
                includeCsvAttachment: false
                includeHistogram: false
                includeQuery: true
                includeResultSet: true
                subjectTemplate: 'Search Alert: {{TriggerCondition}} found for {{SearchName}}'
                toLists:
                  - will@acme.com
            parseableTimeRange:
              beginBoundedTimeRange:
                from:
                  relativeTimeRange:
                    relativeTime: -15m
            scheduleType: 1Week
            threshold:
              count: 10
              operator: gt
              thresholdType: group
            timeZone: America/Los_Angeles
            parameters:
              - name: param1
                value: '*'
              - name: param2
                value: '*'
    variables:
      personalFolder:
        fn::invoke:
          Function: sumologic:getPersonalFolder
          Arguments: {}
    

    Attributes reference

    In addition to all arguments above, the following attributes are exported:

    • id - The ID of the log search.

    Create LogSearch Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new LogSearch(name: string, args: LogSearchArgs, opts?: CustomResourceOptions);
    @overload
    def LogSearch(resource_name: str,
                  args: LogSearchArgs,
                  opts: Optional[ResourceOptions] = None)
    
    @overload
    def LogSearch(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  parent_id: Optional[str] = None,
                  query_string: Optional[str] = None,
                  time_range: Optional[LogSearchTimeRangeArgs] = None,
                  description: Optional[str] = None,
                  name: Optional[str] = None,
                  parsing_mode: Optional[str] = None,
                  query_parameters: Optional[Sequence[LogSearchQueryParameterArgs]] = None,
                  run_by_receipt_time: Optional[bool] = None,
                  schedule: Optional[LogSearchScheduleArgs] = None)
    func NewLogSearch(ctx *Context, name string, args LogSearchArgs, opts ...ResourceOption) (*LogSearch, error)
    public LogSearch(string name, LogSearchArgs args, CustomResourceOptions? opts = null)
    public LogSearch(String name, LogSearchArgs args)
    public LogSearch(String name, LogSearchArgs args, CustomResourceOptions options)
    
    type: sumologic:LogSearch
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args LogSearchArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args LogSearchArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args LogSearchArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args LogSearchArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args LogSearchArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var logSearchResource = new SumoLogic.LogSearch("logSearchResource", new()
    {
        ParentId = "string",
        QueryString = "string",
        TimeRange = new SumoLogic.Inputs.LogSearchTimeRangeArgs
        {
            BeginBoundedTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeArgs
            {
                From = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromArgs
                {
                    EpochTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs
                    {
                        EpochMillis = 0,
                    },
                    Iso8601TimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs
                    {
                        Iso8601Time = "string",
                    },
                    LiteralTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs
                    {
                        RangeName = "string",
                    },
                    RelativeTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs
                    {
                        RelativeTime = "string",
                    },
                },
                To = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeToArgs
                {
                    EpochTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs
                    {
                        EpochMillis = 0,
                    },
                    Iso8601TimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs
                    {
                        Iso8601Time = "string",
                    },
                    LiteralTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs
                    {
                        RangeName = "string",
                    },
                    RelativeTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs
                    {
                        RelativeTime = "string",
                    },
                },
            },
            CompleteLiteralTimeRange = new SumoLogic.Inputs.LogSearchTimeRangeCompleteLiteralTimeRangeArgs
            {
                RangeName = "string",
            },
        },
        Description = "string",
        Name = "string",
        ParsingMode = "string",
        QueryParameters = new[]
        {
            new SumoLogic.Inputs.LogSearchQueryParameterArgs
            {
                DataType = "string",
                Name = "string",
                Value = "string",
                Description = "string",
            },
        },
        RunByReceiptTime = false,
        Schedule = new SumoLogic.Inputs.LogSearchScheduleArgs
        {
            Notification = new SumoLogic.Inputs.LogSearchScheduleNotificationArgs
            {
                AlertSearchNotification = new SumoLogic.Inputs.LogSearchScheduleNotificationAlertSearchNotificationArgs
                {
                    SourceId = "string",
                },
                CseSignalNotification = new SumoLogic.Inputs.LogSearchScheduleNotificationCseSignalNotificationArgs
                {
                    RecordType = "string",
                },
                EmailSearchNotification = new SumoLogic.Inputs.LogSearchScheduleNotificationEmailSearchNotificationArgs
                {
                    ToLists = new[]
                    {
                        "string",
                    },
                    IncludeCsvAttachment = false,
                    IncludeHistogram = false,
                    IncludeQuery = false,
                    IncludeResultSet = false,
                    SubjectTemplate = "string",
                },
                SaveToLookupNotification = new SumoLogic.Inputs.LogSearchScheduleNotificationSaveToLookupNotificationArgs
                {
                    IsLookupMergeOperation = false,
                    LookupFilePath = "string",
                },
                SaveToViewNotification = new SumoLogic.Inputs.LogSearchScheduleNotificationSaveToViewNotificationArgs
                {
                    ViewName = "string",
                },
                ServiceNowSearchNotification = new SumoLogic.Inputs.LogSearchScheduleNotificationServiceNowSearchNotificationArgs
                {
                    ExternalId = "string",
                    Fields = new SumoLogic.Inputs.LogSearchScheduleNotificationServiceNowSearchNotificationFieldsArgs
                    {
                        EventType = "string",
                        Node = "string",
                        Resource = "string",
                        Severity = 0,
                    },
                },
                WebhookSearchNotification = new SumoLogic.Inputs.LogSearchScheduleNotificationWebhookSearchNotificationArgs
                {
                    WebhookId = "string",
                    ItemizeAlerts = false,
                    MaxItemizedAlerts = 0,
                    Payload = "string",
                },
            },
            ParseableTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeArgs
            {
                BeginBoundedTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs
                {
                    From = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs
                    {
                        EpochTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs
                        {
                            EpochMillis = 0,
                        },
                        Iso8601TimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs
                        {
                            Iso8601Time = "string",
                        },
                        LiteralTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs
                        {
                            RangeName = "string",
                        },
                        RelativeTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs
                        {
                            RelativeTime = "string",
                        },
                    },
                    To = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToArgs
                    {
                        EpochTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs
                        {
                            EpochMillis = 0,
                        },
                        Iso8601TimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs
                        {
                            Iso8601Time = "string",
                        },
                        LiteralTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs
                        {
                            RangeName = "string",
                        },
                        RelativeTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs
                        {
                            RelativeTime = "string",
                        },
                    },
                },
                CompleteLiteralTimeRange = new SumoLogic.Inputs.LogSearchScheduleParseableTimeRangeCompleteLiteralTimeRangeArgs
                {
                    RangeName = "string",
                },
            },
            ScheduleType = "string",
            TimeZone = "string",
            CronExpression = "string",
            MuteErrorEmails = false,
            Parameters = new[]
            {
                new SumoLogic.Inputs.LogSearchScheduleParameterArgs
                {
                    Name = "string",
                    Value = "string",
                },
            },
            Threshold = new SumoLogic.Inputs.LogSearchScheduleThresholdArgs
            {
                Count = 0,
                Operator = "string",
                ThresholdType = "string",
            },
        },
    });
    
    example, err := sumologic.NewLogSearch(ctx, "logSearchResource", &sumologic.LogSearchArgs{
    	ParentId:    pulumi.String("string"),
    	QueryString: pulumi.String("string"),
    	TimeRange: &sumologic.LogSearchTimeRangeArgs{
    		BeginBoundedTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeArgs{
    			From: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromArgs{
    				EpochTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs{
    					EpochMillis: pulumi.Int(0),
    				},
    				Iso8601TimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs{
    					Iso8601Time: pulumi.String("string"),
    				},
    				LiteralTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs{
    					RangeName: pulumi.String("string"),
    				},
    				RelativeTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs{
    					RelativeTime: pulumi.String("string"),
    				},
    			},
    			To: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToArgs{
    				EpochTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs{
    					EpochMillis: pulumi.Int(0),
    				},
    				Iso8601TimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs{
    					Iso8601Time: pulumi.String("string"),
    				},
    				LiteralTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs{
    					RangeName: pulumi.String("string"),
    				},
    				RelativeTimeRange: &sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs{
    					RelativeTime: pulumi.String("string"),
    				},
    			},
    		},
    		CompleteLiteralTimeRange: &sumologic.LogSearchTimeRangeCompleteLiteralTimeRangeArgs{
    			RangeName: pulumi.String("string"),
    		},
    	},
    	Description: pulumi.String("string"),
    	Name:        pulumi.String("string"),
    	ParsingMode: pulumi.String("string"),
    	QueryParameters: sumologic.LogSearchQueryParameterArray{
    		&sumologic.LogSearchQueryParameterArgs{
    			DataType:    pulumi.String("string"),
    			Name:        pulumi.String("string"),
    			Value:       pulumi.String("string"),
    			Description: pulumi.String("string"),
    		},
    	},
    	RunByReceiptTime: pulumi.Bool(false),
    	Schedule: &sumologic.LogSearchScheduleArgs{
    		Notification: &sumologic.LogSearchScheduleNotificationArgs{
    			AlertSearchNotification: &sumologic.LogSearchScheduleNotificationAlertSearchNotificationArgs{
    				SourceId: pulumi.String("string"),
    			},
    			CseSignalNotification: &sumologic.LogSearchScheduleNotificationCseSignalNotificationArgs{
    				RecordType: pulumi.String("string"),
    			},
    			EmailSearchNotification: &sumologic.LogSearchScheduleNotificationEmailSearchNotificationArgs{
    				ToLists: pulumi.StringArray{
    					pulumi.String("string"),
    				},
    				IncludeCsvAttachment: pulumi.Bool(false),
    				IncludeHistogram:     pulumi.Bool(false),
    				IncludeQuery:         pulumi.Bool(false),
    				IncludeResultSet:     pulumi.Bool(false),
    				SubjectTemplate:      pulumi.String("string"),
    			},
    			SaveToLookupNotification: &sumologic.LogSearchScheduleNotificationSaveToLookupNotificationArgs{
    				IsLookupMergeOperation: pulumi.Bool(false),
    				LookupFilePath:         pulumi.String("string"),
    			},
    			SaveToViewNotification: &sumologic.LogSearchScheduleNotificationSaveToViewNotificationArgs{
    				ViewName: pulumi.String("string"),
    			},
    			ServiceNowSearchNotification: &sumologic.LogSearchScheduleNotificationServiceNowSearchNotificationArgs{
    				ExternalId: pulumi.String("string"),
    				Fields: &sumologic.LogSearchScheduleNotificationServiceNowSearchNotificationFieldsArgs{
    					EventType: pulumi.String("string"),
    					Node:      pulumi.String("string"),
    					Resource:  pulumi.String("string"),
    					Severity:  pulumi.Int(0),
    				},
    			},
    			WebhookSearchNotification: &sumologic.LogSearchScheduleNotificationWebhookSearchNotificationArgs{
    				WebhookId:         pulumi.String("string"),
    				ItemizeAlerts:     pulumi.Bool(false),
    				MaxItemizedAlerts: pulumi.Int(0),
    				Payload:           pulumi.String("string"),
    			},
    		},
    		ParseableTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeArgs{
    			BeginBoundedTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs{
    				From: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs{
    					EpochTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs{
    						EpochMillis: pulumi.Int(0),
    					},
    					Iso8601TimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs{
    						Iso8601Time: pulumi.String("string"),
    					},
    					LiteralTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs{
    						RangeName: pulumi.String("string"),
    					},
    					RelativeTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs{
    						RelativeTime: pulumi.String("string"),
    					},
    				},
    				To: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToArgs{
    					EpochTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs{
    						EpochMillis: pulumi.Int(0),
    					},
    					Iso8601TimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs{
    						Iso8601Time: pulumi.String("string"),
    					},
    					LiteralTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs{
    						RangeName: pulumi.String("string"),
    					},
    					RelativeTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs{
    						RelativeTime: pulumi.String("string"),
    					},
    				},
    			},
    			CompleteLiteralTimeRange: &sumologic.LogSearchScheduleParseableTimeRangeCompleteLiteralTimeRangeArgs{
    				RangeName: pulumi.String("string"),
    			},
    		},
    		ScheduleType:    pulumi.String("string"),
    		TimeZone:        pulumi.String("string"),
    		CronExpression:  pulumi.String("string"),
    		MuteErrorEmails: pulumi.Bool(false),
    		Parameters: sumologic.LogSearchScheduleParameterArray{
    			&sumologic.LogSearchScheduleParameterArgs{
    				Name:  pulumi.String("string"),
    				Value: pulumi.String("string"),
    			},
    		},
    		Threshold: &sumologic.LogSearchScheduleThresholdArgs{
    			Count:         pulumi.Int(0),
    			Operator:      pulumi.String("string"),
    			ThresholdType: pulumi.String("string"),
    		},
    	},
    })
    
    var logSearchResource = new LogSearch("logSearchResource", LogSearchArgs.builder()
        .parentId("string")
        .queryString("string")
        .timeRange(LogSearchTimeRangeArgs.builder()
            .beginBoundedTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeArgs.builder()
                .from(LogSearchTimeRangeBeginBoundedTimeRangeFromArgs.builder()
                    .epochTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs.builder()
                        .epochMillis(0)
                        .build())
                    .iso8601TimeRange(LogSearchTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs.builder()
                        .iso8601Time("string")
                        .build())
                    .literalTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs.builder()
                        .rangeName("string")
                        .build())
                    .relativeTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs.builder()
                        .relativeTime("string")
                        .build())
                    .build())
                .to(LogSearchTimeRangeBeginBoundedTimeRangeToArgs.builder()
                    .epochTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs.builder()
                        .epochMillis(0)
                        .build())
                    .iso8601TimeRange(LogSearchTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs.builder()
                        .iso8601Time("string")
                        .build())
                    .literalTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs.builder()
                        .rangeName("string")
                        .build())
                    .relativeTimeRange(LogSearchTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs.builder()
                        .relativeTime("string")
                        .build())
                    .build())
                .build())
            .completeLiteralTimeRange(LogSearchTimeRangeCompleteLiteralTimeRangeArgs.builder()
                .rangeName("string")
                .build())
            .build())
        .description("string")
        .name("string")
        .parsingMode("string")
        .queryParameters(LogSearchQueryParameterArgs.builder()
            .dataType("string")
            .name("string")
            .value("string")
            .description("string")
            .build())
        .runByReceiptTime(false)
        .schedule(LogSearchScheduleArgs.builder()
            .notification(LogSearchScheduleNotificationArgs.builder()
                .alertSearchNotification(LogSearchScheduleNotificationAlertSearchNotificationArgs.builder()
                    .sourceId("string")
                    .build())
                .cseSignalNotification(LogSearchScheduleNotificationCseSignalNotificationArgs.builder()
                    .recordType("string")
                    .build())
                .emailSearchNotification(LogSearchScheduleNotificationEmailSearchNotificationArgs.builder()
                    .toLists("string")
                    .includeCsvAttachment(false)
                    .includeHistogram(false)
                    .includeQuery(false)
                    .includeResultSet(false)
                    .subjectTemplate("string")
                    .build())
                .saveToLookupNotification(LogSearchScheduleNotificationSaveToLookupNotificationArgs.builder()
                    .isLookupMergeOperation(false)
                    .lookupFilePath("string")
                    .build())
                .saveToViewNotification(LogSearchScheduleNotificationSaveToViewNotificationArgs.builder()
                    .viewName("string")
                    .build())
                .serviceNowSearchNotification(LogSearchScheduleNotificationServiceNowSearchNotificationArgs.builder()
                    .externalId("string")
                    .fields(LogSearchScheduleNotificationServiceNowSearchNotificationFieldsArgs.builder()
                        .eventType("string")
                        .node("string")
                        .resource("string")
                        .severity(0)
                        .build())
                    .build())
                .webhookSearchNotification(LogSearchScheduleNotificationWebhookSearchNotificationArgs.builder()
                    .webhookId("string")
                    .itemizeAlerts(false)
                    .maxItemizedAlerts(0)
                    .payload("string")
                    .build())
                .build())
            .parseableTimeRange(LogSearchScheduleParseableTimeRangeArgs.builder()
                .beginBoundedTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs.builder()
                    .from(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs.builder()
                        .epochTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs.builder()
                            .epochMillis(0)
                            .build())
                        .iso8601TimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs.builder()
                            .iso8601Time("string")
                            .build())
                        .literalTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs.builder()
                            .rangeName("string")
                            .build())
                        .relativeTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs.builder()
                            .relativeTime("string")
                            .build())
                        .build())
                    .to(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToArgs.builder()
                        .epochTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs.builder()
                            .epochMillis(0)
                            .build())
                        .iso8601TimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs.builder()
                            .iso8601Time("string")
                            .build())
                        .literalTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs.builder()
                            .rangeName("string")
                            .build())
                        .relativeTimeRange(LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs.builder()
                            .relativeTime("string")
                            .build())
                        .build())
                    .build())
                .completeLiteralTimeRange(LogSearchScheduleParseableTimeRangeCompleteLiteralTimeRangeArgs.builder()
                    .rangeName("string")
                    .build())
                .build())
            .scheduleType("string")
            .timeZone("string")
            .cronExpression("string")
            .muteErrorEmails(false)
            .parameters(LogSearchScheduleParameterArgs.builder()
                .name("string")
                .value("string")
                .build())
            .threshold(LogSearchScheduleThresholdArgs.builder()
                .count(0)
                .operator("string")
                .thresholdType("string")
                .build())
            .build())
        .build());
    
    log_search_resource = sumologic.LogSearch("logSearchResource",
        parent_id="string",
        query_string="string",
        time_range=sumologic.LogSearchTimeRangeArgs(
            begin_bounded_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeArgs(
                from_=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromArgs(
                    epoch_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs(
                        epoch_millis=0,
                    ),
                    iso8601_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs(
                        iso8601_time="string",
                    ),
                    literal_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs(
                        range_name="string",
                    ),
                    relative_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs(
                        relative_time="string",
                    ),
                ),
                to=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToArgs(
                    epoch_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs(
                        epoch_millis=0,
                    ),
                    iso8601_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs(
                        iso8601_time="string",
                    ),
                    literal_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs(
                        range_name="string",
                    ),
                    relative_time_range=sumologic.LogSearchTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs(
                        relative_time="string",
                    ),
                ),
            ),
            complete_literal_time_range=sumologic.LogSearchTimeRangeCompleteLiteralTimeRangeArgs(
                range_name="string",
            ),
        ),
        description="string",
        name="string",
        parsing_mode="string",
        query_parameters=[sumologic.LogSearchQueryParameterArgs(
            data_type="string",
            name="string",
            value="string",
            description="string",
        )],
        run_by_receipt_time=False,
        schedule=sumologic.LogSearchScheduleArgs(
            notification=sumologic.LogSearchScheduleNotificationArgs(
                alert_search_notification=sumologic.LogSearchScheduleNotificationAlertSearchNotificationArgs(
                    source_id="string",
                ),
                cse_signal_notification=sumologic.LogSearchScheduleNotificationCseSignalNotificationArgs(
                    record_type="string",
                ),
                email_search_notification=sumologic.LogSearchScheduleNotificationEmailSearchNotificationArgs(
                    to_lists=["string"],
                    include_csv_attachment=False,
                    include_histogram=False,
                    include_query=False,
                    include_result_set=False,
                    subject_template="string",
                ),
                save_to_lookup_notification=sumologic.LogSearchScheduleNotificationSaveToLookupNotificationArgs(
                    is_lookup_merge_operation=False,
                    lookup_file_path="string",
                ),
                save_to_view_notification=sumologic.LogSearchScheduleNotificationSaveToViewNotificationArgs(
                    view_name="string",
                ),
                service_now_search_notification=sumologic.LogSearchScheduleNotificationServiceNowSearchNotificationArgs(
                    external_id="string",
                    fields=sumologic.LogSearchScheduleNotificationServiceNowSearchNotificationFieldsArgs(
                        event_type="string",
                        node="string",
                        resource="string",
                        severity=0,
                    ),
                ),
                webhook_search_notification=sumologic.LogSearchScheduleNotificationWebhookSearchNotificationArgs(
                    webhook_id="string",
                    itemize_alerts=False,
                    max_itemized_alerts=0,
                    payload="string",
                ),
            ),
            parseable_time_range=sumologic.LogSearchScheduleParseableTimeRangeArgs(
                begin_bounded_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs(
                    from_=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs(
                        epoch_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs(
                            epoch_millis=0,
                        ),
                        iso8601_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs(
                            iso8601_time="string",
                        ),
                        literal_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs(
                            range_name="string",
                        ),
                        relative_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs(
                            relative_time="string",
                        ),
                    ),
                    to=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToArgs(
                        epoch_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs(
                            epoch_millis=0,
                        ),
                        iso8601_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs(
                            iso8601_time="string",
                        ),
                        literal_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs(
                            range_name="string",
                        ),
                        relative_time_range=sumologic.LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs(
                            relative_time="string",
                        ),
                    ),
                ),
                complete_literal_time_range=sumologic.LogSearchScheduleParseableTimeRangeCompleteLiteralTimeRangeArgs(
                    range_name="string",
                ),
            ),
            schedule_type="string",
            time_zone="string",
            cron_expression="string",
            mute_error_emails=False,
            parameters=[sumologic.LogSearchScheduleParameterArgs(
                name="string",
                value="string",
            )],
            threshold=sumologic.LogSearchScheduleThresholdArgs(
                count=0,
                operator="string",
                threshold_type="string",
            ),
        ))
    
    const logSearchResource = new sumologic.LogSearch("logSearchResource", {
        parentId: "string",
        queryString: "string",
        timeRange: {
            beginBoundedTimeRange: {
                from: {
                    epochTimeRange: {
                        epochMillis: 0,
                    },
                    iso8601TimeRange: {
                        iso8601Time: "string",
                    },
                    literalTimeRange: {
                        rangeName: "string",
                    },
                    relativeTimeRange: {
                        relativeTime: "string",
                    },
                },
                to: {
                    epochTimeRange: {
                        epochMillis: 0,
                    },
                    iso8601TimeRange: {
                        iso8601Time: "string",
                    },
                    literalTimeRange: {
                        rangeName: "string",
                    },
                    relativeTimeRange: {
                        relativeTime: "string",
                    },
                },
            },
            completeLiteralTimeRange: {
                rangeName: "string",
            },
        },
        description: "string",
        name: "string",
        parsingMode: "string",
        queryParameters: [{
            dataType: "string",
            name: "string",
            value: "string",
            description: "string",
        }],
        runByReceiptTime: false,
        schedule: {
            notification: {
                alertSearchNotification: {
                    sourceId: "string",
                },
                cseSignalNotification: {
                    recordType: "string",
                },
                emailSearchNotification: {
                    toLists: ["string"],
                    includeCsvAttachment: false,
                    includeHistogram: false,
                    includeQuery: false,
                    includeResultSet: false,
                    subjectTemplate: "string",
                },
                saveToLookupNotification: {
                    isLookupMergeOperation: false,
                    lookupFilePath: "string",
                },
                saveToViewNotification: {
                    viewName: "string",
                },
                serviceNowSearchNotification: {
                    externalId: "string",
                    fields: {
                        eventType: "string",
                        node: "string",
                        resource: "string",
                        severity: 0,
                    },
                },
                webhookSearchNotification: {
                    webhookId: "string",
                    itemizeAlerts: false,
                    maxItemizedAlerts: 0,
                    payload: "string",
                },
            },
            parseableTimeRange: {
                beginBoundedTimeRange: {
                    from: {
                        epochTimeRange: {
                            epochMillis: 0,
                        },
                        iso8601TimeRange: {
                            iso8601Time: "string",
                        },
                        literalTimeRange: {
                            rangeName: "string",
                        },
                        relativeTimeRange: {
                            relativeTime: "string",
                        },
                    },
                    to: {
                        epochTimeRange: {
                            epochMillis: 0,
                        },
                        iso8601TimeRange: {
                            iso8601Time: "string",
                        },
                        literalTimeRange: {
                            rangeName: "string",
                        },
                        relativeTimeRange: {
                            relativeTime: "string",
                        },
                    },
                },
                completeLiteralTimeRange: {
                    rangeName: "string",
                },
            },
            scheduleType: "string",
            timeZone: "string",
            cronExpression: "string",
            muteErrorEmails: false,
            parameters: [{
                name: "string",
                value: "string",
            }],
            threshold: {
                count: 0,
                operator: "string",
                thresholdType: "string",
            },
        },
    });
    
    type: sumologic:LogSearch
    properties:
        description: string
        name: string
        parentId: string
        parsingMode: string
        queryParameters:
            - dataType: string
              description: string
              name: string
              value: string
        queryString: string
        runByReceiptTime: false
        schedule:
            cronExpression: string
            muteErrorEmails: false
            notification:
                alertSearchNotification:
                    sourceId: string
                cseSignalNotification:
                    recordType: string
                emailSearchNotification:
                    includeCsvAttachment: false
                    includeHistogram: false
                    includeQuery: false
                    includeResultSet: false
                    subjectTemplate: string
                    toLists:
                        - string
                saveToLookupNotification:
                    isLookupMergeOperation: false
                    lookupFilePath: string
                saveToViewNotification:
                    viewName: string
                serviceNowSearchNotification:
                    externalId: string
                    fields:
                        eventType: string
                        node: string
                        resource: string
                        severity: 0
                webhookSearchNotification:
                    itemizeAlerts: false
                    maxItemizedAlerts: 0
                    payload: string
                    webhookId: string
            parameters:
                - name: string
                  value: string
            parseableTimeRange:
                beginBoundedTimeRange:
                    from:
                        epochTimeRange:
                            epochMillis: 0
                        iso8601TimeRange:
                            iso8601Time: string
                        literalTimeRange:
                            rangeName: string
                        relativeTimeRange:
                            relativeTime: string
                    to:
                        epochTimeRange:
                            epochMillis: 0
                        iso8601TimeRange:
                            iso8601Time: string
                        literalTimeRange:
                            rangeName: string
                        relativeTimeRange:
                            relativeTime: string
                completeLiteralTimeRange:
                    rangeName: string
            scheduleType: string
            threshold:
                count: 0
                operator: string
                thresholdType: string
            timeZone: string
        timeRange:
            beginBoundedTimeRange:
                from:
                    epochTimeRange:
                        epochMillis: 0
                    iso8601TimeRange:
                        iso8601Time: string
                    literalTimeRange:
                        rangeName: string
                    relativeTimeRange:
                        relativeTime: string
                to:
                    epochTimeRange:
                        epochMillis: 0
                    iso8601TimeRange:
                        iso8601Time: string
                    literalTimeRange:
                        rangeName: string
                    relativeTimeRange:
                        relativeTime: string
            completeLiteralTimeRange:
                rangeName: string
    

    LogSearch Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The LogSearch resource accepts the following input properties:

    ParentId string
    The identifier of the folder to create the log search in.
    QueryString string
    Log query to perform.
    TimeRange Pulumi.SumoLogic.Inputs.LogSearchTimeRange
    Time range of the log search. See time range schema
    Description string
    Description of the search.
    Name string
    Name of the search.
    ParsingMode string

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    QueryParameters List<Pulumi.SumoLogic.Inputs.LogSearchQueryParameter>
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    RunByReceiptTime bool
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    Schedule Pulumi.SumoLogic.Inputs.LogSearchSchedule
    Schedule of the log search. See schedule schema
    ParentId string
    The identifier of the folder to create the log search in.
    QueryString string
    Log query to perform.
    TimeRange LogSearchTimeRangeArgs
    Time range of the log search. See time range schema
    Description string
    Description of the search.
    Name string
    Name of the search.
    ParsingMode string

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    QueryParameters []LogSearchQueryParameterArgs
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    RunByReceiptTime bool
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    Schedule LogSearchScheduleArgs
    Schedule of the log search. See schedule schema
    parentId String
    The identifier of the folder to create the log search in.
    queryString String
    Log query to perform.
    timeRange LogSearchTimeRange
    Time range of the log search. See time range schema
    description String
    Description of the search.
    name String
    Name of the search.
    parsingMode String

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    queryParameters List<LogSearchQueryParameter>
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    runByReceiptTime Boolean
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    schedule LogSearchSchedule
    Schedule of the log search. See schedule schema
    parentId string
    The identifier of the folder to create the log search in.
    queryString string
    Log query to perform.
    timeRange LogSearchTimeRange
    Time range of the log search. See time range schema
    description string
    Description of the search.
    name string
    Name of the search.
    parsingMode string

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    queryParameters LogSearchQueryParameter[]
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    runByReceiptTime boolean
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    schedule LogSearchSchedule
    Schedule of the log search. See schedule schema
    parent_id str
    The identifier of the folder to create the log search in.
    query_string str
    Log query to perform.
    time_range LogSearchTimeRangeArgs
    Time range of the log search. See time range schema
    description str
    Description of the search.
    name str
    Name of the search.
    parsing_mode str

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    query_parameters Sequence[LogSearchQueryParameterArgs]
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    run_by_receipt_time bool
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    schedule LogSearchScheduleArgs
    Schedule of the log search. See schedule schema
    parentId String
    The identifier of the folder to create the log search in.
    queryString String
    Log query to perform.
    timeRange Property Map
    Time range of the log search. See time range schema
    description String
    Description of the search.
    name String
    Name of the search.
    parsingMode String

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    queryParameters List<Property Map>
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    runByReceiptTime Boolean
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    schedule Property Map
    Schedule of the log search. See schedule schema

    Outputs

    All input properties are implicitly available as output properties. Additionally, the LogSearch resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing LogSearch Resource

    Get an existing LogSearch resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: LogSearchState, opts?: CustomResourceOptions): LogSearch
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            description: Optional[str] = None,
            name: Optional[str] = None,
            parent_id: Optional[str] = None,
            parsing_mode: Optional[str] = None,
            query_parameters: Optional[Sequence[LogSearchQueryParameterArgs]] = None,
            query_string: Optional[str] = None,
            run_by_receipt_time: Optional[bool] = None,
            schedule: Optional[LogSearchScheduleArgs] = None,
            time_range: Optional[LogSearchTimeRangeArgs] = None) -> LogSearch
    func GetLogSearch(ctx *Context, name string, id IDInput, state *LogSearchState, opts ...ResourceOption) (*LogSearch, error)
    public static LogSearch Get(string name, Input<string> id, LogSearchState? state, CustomResourceOptions? opts = null)
    public static LogSearch get(String name, Output<String> id, LogSearchState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Description string
    Description of the search.
    Name string
    Name of the search.
    ParentId string
    The identifier of the folder to create the log search in.
    ParsingMode string

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    QueryParameters List<Pulumi.SumoLogic.Inputs.LogSearchQueryParameter>
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    QueryString string
    Log query to perform.
    RunByReceiptTime bool
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    Schedule Pulumi.SumoLogic.Inputs.LogSearchSchedule
    Schedule of the log search. See schedule schema
    TimeRange Pulumi.SumoLogic.Inputs.LogSearchTimeRange
    Time range of the log search. See time range schema
    Description string
    Description of the search.
    Name string
    Name of the search.
    ParentId string
    The identifier of the folder to create the log search in.
    ParsingMode string

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    QueryParameters []LogSearchQueryParameterArgs
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    QueryString string
    Log query to perform.
    RunByReceiptTime bool
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    Schedule LogSearchScheduleArgs
    Schedule of the log search. See schedule schema
    TimeRange LogSearchTimeRangeArgs
    Time range of the log search. See time range schema
    description String
    Description of the search.
    name String
    Name of the search.
    parentId String
    The identifier of the folder to create the log search in.
    parsingMode String

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    queryParameters List<LogSearchQueryParameter>
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    queryString String
    Log query to perform.
    runByReceiptTime Boolean
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    schedule LogSearchSchedule
    Schedule of the log search. See schedule schema
    timeRange LogSearchTimeRange
    Time range of the log search. See time range schema
    description string
    Description of the search.
    name string
    Name of the search.
    parentId string
    The identifier of the folder to create the log search in.
    parsingMode string

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    queryParameters LogSearchQueryParameter[]
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    queryString string
    Log query to perform.
    runByReceiptTime boolean
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    schedule LogSearchSchedule
    Schedule of the log search. See schedule schema
    timeRange LogSearchTimeRange
    Time range of the log search. See time range schema
    description str
    Description of the search.
    name str
    Name of the search.
    parent_id str
    The identifier of the folder to create the log search in.
    parsing_mode str

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    query_parameters Sequence[LogSearchQueryParameterArgs]
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    query_string str
    Log query to perform.
    run_by_receipt_time bool
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    schedule LogSearchScheduleArgs
    Schedule of the log search. See schedule schema
    time_range LogSearchTimeRangeArgs
    Time range of the log search. See time range schema
    description String
    Description of the search.
    name String
    Name of the search.
    parentId String
    The identifier of the folder to create the log search in.
    parsingMode String

    Define the parsing mode to scan the JSON format log messages. Possible values are: AutoParse and Manual. Default value is Manual.

    In AutoParse mode, the system automatically figures out fields to parse based on the search query. While in the Manual mode, no fields are parsed out automatically. For more information see Dynamic Parsing.

    queryParameters List<Property Map>
    Up to 10 query_parameter blocks can be added one for each parameter in the query_string. See query parameter schema.
    queryString String
    Log query to perform.
    runByReceiptTime Boolean
    This has the value true if the search is to be run by receipt time and false if it is to be run by message time. Default value is false.
    schedule Property Map
    Schedule of the log search. See schedule schema
    timeRange Property Map
    Time range of the log search. See time range schema

    Supporting Types

    LogSearchQueryParameter, LogSearchQueryParameterArgs

    DataType string
    Name string
    Name of the search.
    Value string
    Description string
    Description of the search.
    DataType string
    Name string
    Name of the search.
    Value string
    Description string
    Description of the search.
    dataType String
    name String
    Name of the search.
    value String
    description String
    Description of the search.
    dataType string
    name string
    Name of the search.
    value string
    description string
    Description of the search.
    data_type str
    name str
    Name of the search.
    value str
    description str
    Description of the search.
    dataType String
    name String
    Name of the search.
    value String
    description String
    Description of the search.

    LogSearchSchedule, LogSearchScheduleArgs

    LogSearchScheduleNotification, LogSearchScheduleNotificationArgs

    LogSearchScheduleNotificationAlertSearchNotification, LogSearchScheduleNotificationAlertSearchNotificationArgs

    SourceId string
    SourceId string
    sourceId String
    sourceId string
    sourceId String

    LogSearchScheduleNotificationCseSignalNotification, LogSearchScheduleNotificationCseSignalNotificationArgs

    RecordType string
    RecordType string
    recordType String
    recordType string
    recordType String

    LogSearchScheduleNotificationEmailSearchNotification, LogSearchScheduleNotificationEmailSearchNotificationArgs

    LogSearchScheduleNotificationSaveToLookupNotification, LogSearchScheduleNotificationSaveToLookupNotificationArgs

    LogSearchScheduleNotificationSaveToViewNotification, LogSearchScheduleNotificationSaveToViewNotificationArgs

    ViewName string
    ViewName string
    viewName String
    viewName string
    viewName String

    LogSearchScheduleNotificationServiceNowSearchNotification, LogSearchScheduleNotificationServiceNowSearchNotificationArgs

    LogSearchScheduleNotificationServiceNowSearchNotificationFields, LogSearchScheduleNotificationServiceNowSearchNotificationFieldsArgs

    EventType string
    Node string
    Resource string
    Severity int
    EventType string
    Node string
    Resource string
    Severity int
    eventType String
    node String
    resource String
    severity Integer
    eventType string
    node string
    resource string
    severity number
    eventType String
    node String
    resource String
    severity Number

    LogSearchScheduleNotificationWebhookSearchNotification, LogSearchScheduleNotificationWebhookSearchNotificationArgs

    LogSearchScheduleParameter, LogSearchScheduleParameterArgs

    Name string
    Name of the search.
    Value string
    Name string
    Name of the search.
    Value string
    name String
    Name of the search.
    value String
    name string
    Name of the search.
    value string
    name str
    Name of the search.
    value str
    name String
    Name of the search.
    value String

    LogSearchScheduleParseableTimeRange, LogSearchScheduleParseableTimeRangeArgs

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeArgs

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFrom, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromArgs

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromEpochTimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs

    epochMillis Integer

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromIso8601TimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromLiteralTimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs

    RangeName string
    RangeName string
    rangeName String
    rangeName string
    rangeName String

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeTo, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToArgs

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToEpochTimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs

    epochMillis Integer

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToIso8601TimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToLiteralTimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs

    RangeName string
    RangeName string
    rangeName String
    rangeName string
    rangeName String

    LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToRelativeTimeRange, LogSearchScheduleParseableTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs

    LogSearchScheduleParseableTimeRangeCompleteLiteralTimeRange, LogSearchScheduleParseableTimeRangeCompleteLiteralTimeRangeArgs

    RangeName string
    RangeName string
    rangeName String
    rangeName string
    rangeName String

    LogSearchScheduleThreshold, LogSearchScheduleThresholdArgs

    Count int
    Operator string
    ThresholdType string
    Count int
    Operator string
    ThresholdType string
    count Integer
    operator String
    thresholdType String
    count number
    operator string
    thresholdType string
    count Number
    operator String
    thresholdType String

    LogSearchTimeRange, LogSearchTimeRangeArgs

    LogSearchTimeRangeBeginBoundedTimeRange, LogSearchTimeRangeBeginBoundedTimeRangeArgs

    LogSearchTimeRangeBeginBoundedTimeRangeFrom, LogSearchTimeRangeBeginBoundedTimeRangeFromArgs

    LogSearchTimeRangeBeginBoundedTimeRangeFromEpochTimeRange, LogSearchTimeRangeBeginBoundedTimeRangeFromEpochTimeRangeArgs

    epochMillis Integer

    LogSearchTimeRangeBeginBoundedTimeRangeFromIso8601TimeRange, LogSearchTimeRangeBeginBoundedTimeRangeFromIso8601TimeRangeArgs

    LogSearchTimeRangeBeginBoundedTimeRangeFromLiteralTimeRange, LogSearchTimeRangeBeginBoundedTimeRangeFromLiteralTimeRangeArgs

    RangeName string
    RangeName string
    rangeName String
    rangeName string
    rangeName String

    LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRange, LogSearchTimeRangeBeginBoundedTimeRangeFromRelativeTimeRangeArgs

    LogSearchTimeRangeBeginBoundedTimeRangeTo, LogSearchTimeRangeBeginBoundedTimeRangeToArgs

    LogSearchTimeRangeBeginBoundedTimeRangeToEpochTimeRange, LogSearchTimeRangeBeginBoundedTimeRangeToEpochTimeRangeArgs

    epochMillis Integer

    LogSearchTimeRangeBeginBoundedTimeRangeToIso8601TimeRange, LogSearchTimeRangeBeginBoundedTimeRangeToIso8601TimeRangeArgs

    LogSearchTimeRangeBeginBoundedTimeRangeToLiteralTimeRange, LogSearchTimeRangeBeginBoundedTimeRangeToLiteralTimeRangeArgs

    RangeName string
    RangeName string
    rangeName String
    rangeName string
    rangeName String

    LogSearchTimeRangeBeginBoundedTimeRangeToRelativeTimeRange, LogSearchTimeRangeBeginBoundedTimeRangeToRelativeTimeRangeArgs

    LogSearchTimeRangeCompleteLiteralTimeRange, LogSearchTimeRangeCompleteLiteralTimeRangeArgs

    RangeName string
    RangeName string
    rangeName String
    rangeName string
    rangeName String

    Import

    A log search can be imported using it’s identifier, e.g.:

    hcl

    $ pulumi import sumologic:index/logSearch:LogSearch example_search 0000000007FFD79D
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Sumo Logic pulumi/pulumi-sumologic
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sumologic Terraform Provider.
    sumologic logo
    Sumo Logic v0.22.1 published on Sunday, Jun 9, 2024 by Pulumi