SIEM HTTP Destinations

Resource Schema

Required

Property	Description
destination_type String	Destination Type Possible values: `generic`, `splunk`, `azure_legacy`, `qradar`, `sumo`, `rapid7`, `solar_winds`, `new_relic`, `datadog`, `azure`, `file`, `crowdstrike`, `splunk_compatible`

Optional

Property	Description
name String	Name for this Destination
destination_url String	Destination Url
file_destination_path String	Applicable only for destination type: file. Destination folder path on Files.com.
file_format String	Applicable only for destination type: file. Generated file format. Possible values: `json`, `csv`
file_interval_minutes Int64	Applicable only for destination type: file. Interval, in minutes, between file deliveries.
additional_headers Dynamic	Additional HTTP Headers included in calls to the destination URL
sending_active Bool	Whether this SIEM HTTP Destination is currently being sent to or not
generic_payload_type String	Applicable only for destination type: generic. Indicates the type of HTTP body. Can be json_newline or json_array. json_newline is multiple log entries as JSON separated by newlines. json_array is a single JSON array containing multiple log entries as JSON. Possible values: `json_newline`, `json_array`
azure_dcr_immutable_id String	Applicable only for destination types: azure, azure_legacy. Immutable ID of the Data Collection Rule.
azure_stream_name String	Applicable only for destination type: azure. Name of the stream in the DCR that represents the destination table.
azure_oauth_client_credentials_tenant_id String	Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Tenant ID.
azure_oauth_client_credentials_client_id String	Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Client ID.
qradar_username String	Applicable only for destination type: qradar. Basic auth username provided by QRadar.
action_send_enabled Bool	Whether or not sending is enabled for action logs.
sftp_action_send_enabled Bool	Whether or not sending is enabled for sftp_action logs.
ftp_action_send_enabled Bool	Whether or not sending is enabled for ftp_action logs.
web_dav_action_send_enabled Bool	Whether or not sending is enabled for web_dav_action logs.
sync_send_enabled Bool	Whether or not sending is enabled for sync logs.
outbound_connection_send_enabled Bool	Whether or not sending is enabled for outbound_connection logs.
automation_send_enabled Bool	Whether or not sending is enabled for automation logs.
api_request_send_enabled Bool	Whether or not sending is enabled for api_request logs.
public_hosting_request_send_enabled Bool	Whether or not sending is enabled for public_hosting_request logs.
email_send_enabled Bool	Whether or not sending is enabled for email logs.
exavault_api_request_send_enabled Bool	Whether or not sending is enabled for exavault_api_request logs.
settings_change_send_enabled Bool	Whether or not sending is enabled for settings_change logs.
splunk_token String	Applicable only for destination types: splunk, splunk_compatible. Authentication token for the destination.
crowdstrike_token String	Applicable only for destination type: crowdstrike. Authentication token provided by Crowdstrike.
azure_oauth_client_credentials_client_secret String	Applicable only for destination type: azure. Client Credentials OAuth Client Secret.
qradar_password String	Applicable only for destination type: qradar. Basic auth password provided by QRadar.
solar_winds_token String	Applicable only for destination type: solar_winds. Authentication token provided by Solar Winds.
new_relic_api_key String	Applicable only for destination type: new_relic. API key provided by New Relic.
datadog_api_key String	Applicable only for destination type: datadog. API key provided by Datadog.

Read Only

Property	Description
id Int64	SIEM HTTP Destination ID
splunk_token_masked String	Applicable only for destination types: splunk, splunk_compatible. Authentication token for the destination.
crowdstrike_token_masked String	Applicable only for destination type: crowdstrike. Authentication token provided by Crowdstrike.
azure_oauth_client_credentials_client_secret_masked String	Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Client Secret.
qradar_password_masked String	Applicable only for destination type: qradar. Basic auth password provided by QRadar.
solar_winds_token_masked String	Applicable only for destination type: solar_winds. Authentication token provided by Solar Winds.
new_relic_api_key_masked String	Applicable only for destination type: new_relic. API key provided by New Relic.
datadog_api_key_masked String	Applicable only for destination type: datadog. API key provided by Datadog.
action_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
sftp_action_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
ftp_action_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
web_dav_action_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
sync_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
outbound_connection_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
automation_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
api_request_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
public_hosting_request_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
email_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
exavault_api_request_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
settings_change_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
last_http_call_target_type String	Type of URL that was last called. Can be `destination_url` or `azure_oauth_client_credentials_url` Possible values: `destination_url`, `azure_oauth_client_credentials_url`, `file_destination`
last_http_call_success Bool	Was the last HTTP call made successful?
last_http_call_response_code Int64	Last HTTP Call Response Code
last_http_call_response_body String	Last HTTP Call Response Body. Large responses are truncated.
last_http_call_error_message String	Last HTTP Call Error Message if applicable
last_http_call_time String	Time of Last HTTP Call
last_http_call_duration_ms Int64	Duration of the last HTTP Call in milliseconds
most_recent_http_call_success_time String	Time of Most Recent Successful HTTP Call
connection_test_entry String	Connection Test Entry

Example Resource

resource "files_siem_http_destination" "example_siem_http_destination" {
  name                                     = "example"
  additional_headers                       = {
    key = "example value"
  }
  sending_active                           = true
  generic_payload_type                     = "example"
  file_destination_path                    = "example"
  file_format                              = "example"
  file_interval_minutes                    = 1
  azure_dcr_immutable_id                   = "example"
  azure_stream_name                        = "example"
  azure_oauth_client_credentials_tenant_id = "example"
  azure_oauth_client_credentials_client_id = "example"
  qradar_username                          = "example"
  action_send_enabled                      = true
  sftp_action_send_enabled                 = true
  ftp_action_send_enabled                  = true
  web_dav_action_send_enabled              = true
  sync_send_enabled                        = true
  outbound_connection_send_enabled         = true
  automation_send_enabled                  = true
  api_request_send_enabled                 = true
  public_hosting_request_send_enabled      = true
  email_send_enabled                       = true
  exavault_api_request_send_enabled        = true
  settings_change_send_enabled             = true
  destination_type                         = "example"
  destination_url                          = "example"
}

Resource Import

This Resource supports importing using the following syntax:

Example Import Command

# Siem Http Destinations can be imported by specifying the id.
terraform import files_siem_http_destination.example_siem_http_destination 1

Data Source Schema

Required

Property	Description
id Int64	SIEM HTTP Destination ID

Read Only

Property	Description
name String	Name for this Destination
destination_type String	Destination Type Possible values: `generic`, `splunk`, `azure_legacy`, `qradar`, `sumo`, `rapid7`, `solar_winds`, `new_relic`, `datadog`, `azure`, `file`, `crowdstrike`, `splunk_compatible`
destination_url String	Destination Url
file_destination_path String	Applicable only for destination type: file. Destination folder path on Files.com.
file_format String	Applicable only for destination type: file. Generated file format. Possible values: `json`, `csv`
file_interval_minutes Int64	Applicable only for destination type: file. Interval, in minutes, between file deliveries.
additional_headers Dynamic	Additional HTTP Headers included in calls to the destination URL
sending_active Bool	Whether this SIEM HTTP Destination is currently being sent to or not
generic_payload_type String	Applicable only for destination type: generic. Indicates the type of HTTP body. Can be json_newline or json_array. json_newline is multiple log entries as JSON separated by newlines. json_array is a single JSON array containing multiple log entries as JSON. Possible values: `json_newline`, `json_array`
splunk_token_masked String	Applicable only for destination types: splunk, splunk_compatible. Authentication token for the destination.
crowdstrike_token_masked String	Applicable only for destination type: crowdstrike. Authentication token provided by Crowdstrike.
azure_dcr_immutable_id String	Applicable only for destination types: azure, azure_legacy. Immutable ID of the Data Collection Rule.
azure_stream_name String	Applicable only for destination type: azure. Name of the stream in the DCR that represents the destination table.
azure_oauth_client_credentials_tenant_id String	Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Tenant ID.
azure_oauth_client_credentials_client_id String	Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Client ID.
azure_oauth_client_credentials_client_secret_masked String	Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Client Secret.
qradar_username String	Applicable only for destination type: qradar. Basic auth username provided by QRadar.
qradar_password_masked String	Applicable only for destination type: qradar. Basic auth password provided by QRadar.
solar_winds_token_masked String	Applicable only for destination type: solar_winds. Authentication token provided by Solar Winds.
new_relic_api_key_masked String	Applicable only for destination type: new_relic. API key provided by New Relic.
datadog_api_key_masked String	Applicable only for destination type: datadog. API key provided by Datadog.
action_send_enabled Bool	Whether or not sending is enabled for action logs.
action_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
sftp_action_send_enabled Bool	Whether or not sending is enabled for sftp_action logs.
sftp_action_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
ftp_action_send_enabled Bool	Whether or not sending is enabled for ftp_action logs.
ftp_action_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
web_dav_action_send_enabled Bool	Whether or not sending is enabled for web_dav_action logs.
web_dav_action_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
sync_send_enabled Bool	Whether or not sending is enabled for sync logs.
sync_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
outbound_connection_send_enabled Bool	Whether or not sending is enabled for outbound_connection logs.
outbound_connection_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
automation_send_enabled Bool	Whether or not sending is enabled for automation logs.
automation_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
api_request_send_enabled Bool	Whether or not sending is enabled for api_request logs.
api_request_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
public_hosting_request_send_enabled Bool	Whether or not sending is enabled for public_hosting_request logs.
public_hosting_request_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
email_send_enabled Bool	Whether or not sending is enabled for email logs.
email_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
exavault_api_request_send_enabled Bool	Whether or not sending is enabled for exavault_api_request logs.
exavault_api_request_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
settings_change_send_enabled Bool	Whether or not sending is enabled for settings_change logs.
settings_change_entries_sent Int64	Number of log entries sent for the lifetime of this destination.
last_http_call_target_type String	Type of URL that was last called. Can be `destination_url` or `azure_oauth_client_credentials_url` Possible values: `destination_url`, `azure_oauth_client_credentials_url`, `file_destination`
last_http_call_success Bool	Was the last HTTP call made successful?
last_http_call_response_code Int64	Last HTTP Call Response Code
last_http_call_response_body String	Last HTTP Call Response Body. Large responses are truncated.
last_http_call_error_message String	Last HTTP Call Error Message if applicable
last_http_call_time String	Time of Last HTTP Call
last_http_call_duration_ms Int64	Duration of the last HTTP Call in milliseconds
most_recent_http_call_success_time String	Time of Most Recent Successful HTTP Call
connection_test_entry String	Connection Test Entry

Example Data Source

data "files_siem_http_destination" "example_siem_http_destination" {
  id = 1
}