import * as pulumi from "@pulumi/pulumi"; import * as outputs from "../types/output"; /** * This data source provides details about a specific Audit Event Analytic resource in Oracle Cloud Infrastructure Data Safe service. * * By default ListAuditEventAnalytics operation will return all of the summary columns. To filter desired summary columns, specify * it in the `summaryOf` query parameter. * * **Example:** /ListAuditEventAnalytics?summaryField=targetName&summaryField=userName&summaryField=clientHostName&summaryField * &summaryField=dmls&summaryField=privilege_changes&summaryField=ddls&summaryField=login_failure&summaryField=login_success * &summaryField=eventcount&q=(operationTime ge '2021-06-13T23:49:14')&groupBy=targetName * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as oci from "@pulumi/oci"; * * const testAuditEventAnalytic = oci.datasafe.getAuditEventAnalytic({ * compartmentId: compartmentId, * accessLevel: auditEventAnalyticAccessLevel, * compartmentIdInSubtree: auditEventAnalyticCompartmentIdInSubtree === "true", * groupBies: auditEventAnalyticGroupBy, * queryTimeZone: auditEventAnalyticQueryTimeZone, * scimQuery: auditEventAnalyticScimQuery, * summaryFields: auditEventAnalyticSummaryField, * timeEnded: auditEventAnalyticTimeEnded, * timeStarted: auditEventAnalyticTimeStarted, * }); * ``` */ export declare function getAuditEventAnalytic(args: GetAuditEventAnalyticArgs, opts?: pulumi.InvokeOptions): Promise; /** * A collection of arguments for invoking getAuditEventAnalytic. */ export interface GetAuditEventAnalyticArgs { /** * Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed. */ accessLevel?: string; /** * A filter to return only resources that match the specified compartment OCID. */ compartmentId: string; /** * Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting. */ compartmentIdInSubtree?: boolean; /** * A groupBy can only be used in combination with summaryField parameter. A groupBy value has to be a subset of the values mentioned in summaryField parameter. */ groupBies?: string[]; /** * Default time zone is UTC if no time zone provided. The date-time considerations of the resource will be in accordance with the specified time zone. */ queryTimeZone?: string; /** * The scimQuery query parameter accepts filter expressions that use the syntax described in Section 3.2.2.2 of the System for Cross-Domain Identity Management (SCIM) specification, which is available at [RFC3339](https://tools.ietf.org/html/draft-ietf-scim-api-12). In SCIM filtering expressions, text, date, and time values must be enclosed in quotation marks, with date and time values using ISO-8601 format. (Numeric and boolean values should not be quoted.) * * **Example:** query=(operationTime ge '2021-06-04T01-00-26') and (eventName eq 'LOGON') */ scimQuery?: string; /** * Specifies a subset of summarized fields to be returned in the response. */ summaryFields?: string[]; /** * An optional filter to return audit events whose creation time in the database is less than and equal to the date-time specified, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ timeEnded?: string; /** * An optional filter to return audit events whose creation time in the database is greater than and equal to the date-time specified, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ timeStarted?: string; } /** * A collection of values returned by getAuditEventAnalytic. */ export interface GetAuditEventAnalyticResult { readonly accessLevel?: string; readonly compartmentId: string; readonly compartmentIdInSubtree?: boolean; readonly groupBies?: string[]; /** * The provider-assigned unique ID for this managed resource. */ readonly id: string; /** * The aggregated data point items. */ readonly items: outputs.DataSafe.GetAuditEventAnalyticItem[]; readonly queryTimeZone?: string; readonly scimQuery?: string; readonly summaryFields?: string[]; /** * The time at which the aggregation ended. */ readonly timeEnded?: string; /** * The time at which the aggregation started. */ readonly timeStarted?: string; } /** * This data source provides details about a specific Audit Event Analytic resource in Oracle Cloud Infrastructure Data Safe service. * * By default ListAuditEventAnalytics operation will return all of the summary columns. To filter desired summary columns, specify * it in the `summaryOf` query parameter. * * **Example:** /ListAuditEventAnalytics?summaryField=targetName&summaryField=userName&summaryField=clientHostName&summaryField * &summaryField=dmls&summaryField=privilege_changes&summaryField=ddls&summaryField=login_failure&summaryField=login_success * &summaryField=eventcount&q=(operationTime ge '2021-06-13T23:49:14')&groupBy=targetName * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as oci from "@pulumi/oci"; * * const testAuditEventAnalytic = oci.datasafe.getAuditEventAnalytic({ * compartmentId: compartmentId, * accessLevel: auditEventAnalyticAccessLevel, * compartmentIdInSubtree: auditEventAnalyticCompartmentIdInSubtree === "true", * groupBies: auditEventAnalyticGroupBy, * queryTimeZone: auditEventAnalyticQueryTimeZone, * scimQuery: auditEventAnalyticScimQuery, * summaryFields: auditEventAnalyticSummaryField, * timeEnded: auditEventAnalyticTimeEnded, * timeStarted: auditEventAnalyticTimeStarted, * }); * ``` */ export declare function getAuditEventAnalyticOutput(args: GetAuditEventAnalyticOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output; /** * A collection of arguments for invoking getAuditEventAnalytic. */ export interface GetAuditEventAnalyticOutputArgs { /** * Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed. */ accessLevel?: pulumi.Input; /** * A filter to return only resources that match the specified compartment OCID. */ compartmentId: pulumi.Input; /** * Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting. */ compartmentIdInSubtree?: pulumi.Input; /** * A groupBy can only be used in combination with summaryField parameter. A groupBy value has to be a subset of the values mentioned in summaryField parameter. */ groupBies?: pulumi.Input[] | undefined>; /** * Default time zone is UTC if no time zone provided. The date-time considerations of the resource will be in accordance with the specified time zone. */ queryTimeZone?: pulumi.Input; /** * The scimQuery query parameter accepts filter expressions that use the syntax described in Section 3.2.2.2 of the System for Cross-Domain Identity Management (SCIM) specification, which is available at [RFC3339](https://tools.ietf.org/html/draft-ietf-scim-api-12). In SCIM filtering expressions, text, date, and time values must be enclosed in quotation marks, with date and time values using ISO-8601 format. (Numeric and boolean values should not be quoted.) * * **Example:** query=(operationTime ge '2021-06-04T01-00-26') and (eventName eq 'LOGON') */ scimQuery?: pulumi.Input; /** * Specifies a subset of summarized fields to be returned in the response. */ summaryFields?: pulumi.Input[] | undefined>; /** * An optional filter to return audit events whose creation time in the database is less than and equal to the date-time specified, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ timeEnded?: pulumi.Input; /** * An optional filter to return audit events whose creation time in the database is greater than and equal to the date-time specified, in the format defined by [RFC3339](https://tools.ietf.org/html/rfc3339). */ timeStarted?: pulumi.Input; } //# sourceMappingURL=getAuditEventAnalytic.d.ts.map