pulumi-gcp-kotlin/com.pulumi.gcp.chronicle.kotlin/Watchlist

Watchlist

class Watchlist : KotlinCustomResource

A watchlist is a list of entities that allows for bulk operations over the included entities. To get more information about Watchlist, see:

Example Usage

Chronicle Watchlist Basic

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const example = new gcp.chronicle.Watchlist("example", {
    location: "us",
    instance: "00000000-0000-0000-0000-000000000000",
    watchlistId: "watchlist-id",
    description: "watchlist-description",
    displayName: "watchlist_name",
    multiplyingFactor: 1,
    entityPopulationMechanism: {
        manual: {},
    },
    watchlistUserPreferences: {
        pinned: true,
    },
});
Content copied to clipboard
import pulumi
import pulumi_gcp as gcp
example = gcp.chronicle.Watchlist("example",
    location="us",
    instance="00000000-0000-0000-0000-000000000000",
    watchlist_id="watchlist-id",
    description="watchlist-description",
    display_name="watchlist_name",
    multiplying_factor=1,
    entity_population_mechanism={
        "manual": {},
    },
    watchlist_user_preferences={
        "pinned": True,
    })
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
    var example = new Gcp.Chronicle.Watchlist("example", new()
    {
        Location = "us",
        Instance = "00000000-0000-0000-0000-000000000000",
        WatchlistId = "watchlist-id",
        Description = "watchlist-description",
        DisplayName = "watchlist_name",
        MultiplyingFactor = 1,
        EntityPopulationMechanism = new Gcp.Chronicle.Inputs.WatchlistEntityPopulationMechanismArgs
        {
            Manual = null,
        },
        WatchlistUserPreferences = new Gcp.Chronicle.Inputs.WatchlistWatchlistUserPreferencesArgs
        {
            Pinned = true,
        },
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewWatchlist(ctx, "example", &chronicle.WatchlistArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			WatchlistId:       pulumi.String("watchlist-id"),
			Description:       pulumi.String("watchlist-description"),
			DisplayName:       pulumi.String("watchlist_name"),
			MultiplyingFactor: pulumi.Float64(1),
			EntityPopulationMechanism: &chronicle.WatchlistEntityPopulationMechanismArgs{
				Manual: &chronicle.WatchlistEntityPopulationMechanismManualArgs{},
			},
			WatchlistUserPreferences: &chronicle.WatchlistWatchlistUserPreferencesArgs{
				Pinned: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.chronicle.Watchlist;
import com.pulumi.gcp.chronicle.WatchlistArgs;
import com.pulumi.gcp.chronicle.inputs.WatchlistEntityPopulationMechanismArgs;
import com.pulumi.gcp.chronicle.inputs.WatchlistEntityPopulationMechanismManualArgs;
import com.pulumi.gcp.chronicle.inputs.WatchlistWatchlistUserPreferencesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new Watchlist("example", WatchlistArgs.builder()
            .location("us")
            .instance("00000000-0000-0000-0000-000000000000")
            .watchlistId("watchlist-id")
            .description("watchlist-description")
            .displayName("watchlist_name")
            .multiplyingFactor(1.0)
            .entityPopulationMechanism(WatchlistEntityPopulationMechanismArgs.builder()
                .manual(WatchlistEntityPopulationMechanismManualArgs.builder()
                    .build())
                .build())
            .watchlistUserPreferences(WatchlistWatchlistUserPreferencesArgs.builder()
                .pinned(true)
                .build())
            .build());
    }
}
Content copied to clipboard
resources:
  example:
    type: gcp:chronicle:Watchlist
    properties:
      location: us
      instance: 00000000-0000-0000-0000-000000000000
      watchlistId: watchlist-id
      description: watchlist-description
      displayName: watchlist_name
      multiplyingFactor: 1
      entityPopulationMechanism:
        manual: {}
      watchlistUserPreferences:
        pinned: true
Content copied to clipboard

Chronicle Watchlist Without Id

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const example = new gcp.chronicle.Watchlist("example", {
    location: "us",
    instance: "00000000-0000-0000-0000-000000000000",
    description: "watchlist-description",
    displayName: "watchlist-name",
    multiplyingFactor: 1,
    entityPopulationMechanism: {
        manual: {},
    },
    watchlistUserPreferences: {
        pinned: true,
    },
});
Content copied to clipboard
import pulumi
import pulumi_gcp as gcp
example = gcp.chronicle.Watchlist("example",
    location="us",
    instance="00000000-0000-0000-0000-000000000000",
    description="watchlist-description",
    display_name="watchlist-name",
    multiplying_factor=1,
    entity_population_mechanism={
        "manual": {},
    },
    watchlist_user_preferences={
        "pinned": True,
    })
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
    var example = new Gcp.Chronicle.Watchlist("example", new()
    {
        Location = "us",
        Instance = "00000000-0000-0000-0000-000000000000",
        Description = "watchlist-description",
        DisplayName = "watchlist-name",
        MultiplyingFactor = 1,
        EntityPopulationMechanism = new Gcp.Chronicle.Inputs.WatchlistEntityPopulationMechanismArgs
        {
            Manual = null,
        },
        WatchlistUserPreferences = new Gcp.Chronicle.Inputs.WatchlistWatchlistUserPreferencesArgs
        {
            Pinned = true,
        },
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewWatchlist(ctx, "example", &chronicle.WatchlistArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			Description:       pulumi.String("watchlist-description"),
			DisplayName:       pulumi.String("watchlist-name"),
			MultiplyingFactor: pulumi.Float64(1),
			EntityPopulationMechanism: &chronicle.WatchlistEntityPopulationMechanismArgs{
				Manual: &chronicle.WatchlistEntityPopulationMechanismManualArgs{},
			},
			WatchlistUserPreferences: &chronicle.WatchlistWatchlistUserPreferencesArgs{
				Pinned: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.chronicle.Watchlist;
import com.pulumi.gcp.chronicle.WatchlistArgs;
import com.pulumi.gcp.chronicle.inputs.WatchlistEntityPopulationMechanismArgs;
import com.pulumi.gcp.chronicle.inputs.WatchlistEntityPopulationMechanismManualArgs;
import com.pulumi.gcp.chronicle.inputs.WatchlistWatchlistUserPreferencesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new Watchlist("example", WatchlistArgs.builder()
            .location("us")
            .instance("00000000-0000-0000-0000-000000000000")
            .description("watchlist-description")
            .displayName("watchlist-name")
            .multiplyingFactor(1.0)
            .entityPopulationMechanism(WatchlistEntityPopulationMechanismArgs.builder()
                .manual(WatchlistEntityPopulationMechanismManualArgs.builder()
                    .build())
                .build())
            .watchlistUserPreferences(WatchlistWatchlistUserPreferencesArgs.builder()
                .pinned(true)
                .build())
            .build());
    }
}
Content copied to clipboard
resources:
  example:
    type: gcp:chronicle:Watchlist
    properties:
      location: us
      instance: 00000000-0000-0000-0000-000000000000
      description: watchlist-description
      displayName: watchlist-name
      multiplyingFactor: 1
      entityPopulationMechanism:
        manual: {}
      watchlistUserPreferences:
        pinned: true
Content copied to clipboard

Import

Watchlist can be imported using any of these accepted formats:

  • projects/{{project}}/locations/{{location}}/instances/{{instance}}/watchlists/{{watchlist_id}}

  • {{project}}/{{location}}/{{instance}}/{{watchlist_id}}

  • {{location}}/{{instance}}/{{watchlist_id}} When using the pulumi import command, Watchlist can be imported using one of the formats above. For example:

$ pulumi import gcp:chronicle/watchlist:Watchlist default projects/{{project}}/locations/{{location}}/instances/{{instance}}/watchlists/{{watchlist_id}}
Content copied to clipboard
$ pulumi import gcp:chronicle/watchlist:Watchlist default {{project}}/{{location}}/{{instance}}/{{watchlist_id}}
Content copied to clipboard
$ pulumi import gcp:chronicle/watchlist:Watchlist default {{location}}/{{instance}}/{{watchlist_id}}
Content copied to clipboard

Properties

Link copied to clipboard
val createTime: Output<String>

Output only. Time the watchlist was created.

Link copied to clipboard
val description: Output<String>?

Optional. Description of the watchlist.

Link copied to clipboard
val displayName: Output<String>

Required. Display name of the watchlist. Note that it must be at least one character and less than 63 characters (https://google.aip.dev/148).

Link copied to clipboard
val entityCounts: Output<List<WatchlistEntityCount>>

Count of different types of entities in the watchlist. Structure is documented below.

Link copied to clipboard
val entityPopulationMechanism: Output<WatchlistEntityPopulationMechanism>

Mechanism to populate entities in the watchlist. Structure is documented below.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val instance: Output<String>

The unique identifier for the Chronicle instance, which is the same as the customer ID.

Link copied to clipboard
val location: Output<String>

The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".

Link copied to clipboard
val multiplyingFactor: Output<Double>?

Optional. Weight applied to the risk score for entities in this watchlist. The default is 1.0 if it is not specified.

Link copied to clipboard
val name: Output<String>

Identifier. Resource name of the watchlist. This unique identifier is generated using values provided for the URL parameters. Format: projects/{project}/locations/{location}/instances/{instance}/watchlists/{watchlist}

Link copied to clipboard
val project: Output<String>
Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val updateTime: Output<String>

Output only. Time the watchlist was last updated.

Link copied to clipboard
val urn: Output<String>
Link copied to clipboard
val watchlistId: Output<String>

Optional. The ID to use for the watchlist, which will become the final component of the watchlist's resource name. This value should be 4-63 characters, and valid characters are /a-z-/.

Link copied to clipboard
val watchlistUserPreferences: Output<WatchlistWatchlistUserPreferences>

A collection of user preferences for watchlist UI configuration.