Module Values.PutInsightRuleInputSource

Creates a Contributor Insights rule. Rules evaluate log events in a CloudWatch Logs log group, enabling you to find contributor data for the log events in that log group. For more information, see Using Contributor Insights to Analyze High-Cardinality Data. If you create a rule, delete it, and then re-create it with the same name, historical data from the first time the rule was created might not be available.

Sourcetype nonrec t = {
  1. ruleName : InsightRuleName.t;
    (*

    A unique name for the rule.

    *)
  2. ruleState : InsightRuleState.t option;
    (*

    The state of the rule. Valid values are ENABLED and DISABLED.

    *)
  3. ruleDefinition : InsightRuleDefinition.t;
    (*

    The definition of the rule, as a JSON object. For details on the valid syntax, see Contributor Insights Rule Syntax.

    *)
  4. tags : TagList.t option;
    (*

    A list of key-value pairs to associate with the Contributor Insights rule. You can associate as many as 50 tags with a rule. Tags can help you organize and categorize your resources. You can also use them to scope user permissions, by granting a user permission to access or change only the resources that have certain tag values. To be able to associate tags with a rule, you must have the cloudwatch:TagResource permission in addition to the cloudwatch:PutInsightRule permission. If you are using this operation to update an existing Contributor Insights rule, any tags you specify in this parameter are ignored. To change the tags of an existing rule, use TagResource.

    *)
  5. applyOnTransformedLogs : InsightRuleOnTransformedLogs.t option;
    (*

    Specify true to have this rule evaluate log events after they have been transformed by Log transformation. If you specify true, then the log events in log groups that have transformers will be evaluated by Contributor Insights after being transformed. Log groups that don't have transformers will still have their original log events evaluated by Contributor Insights. The default is false If a log group has a transformer, and transformation fails for some log events, those log events won't be evaluated by Contributor Insights. For information about investigating log transformation failures, see Transformation metrics and errors.

    *)
}
Sourceval context_ : string
Sourceval make : ?ruleState:??? -> ?tags:??? -> ?applyOnTransformedLogs:??? -> ruleName:InsightRuleName.t -> ruleDefinition:InsightRuleDefinition.t -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `Boolean of InsightRuleOnTransformedLogs.t | `List of [> `Structure of (string * [> `String of TagKey.t ]) list ] list | `String of InsightRuleName.t ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t