Get Rule Group Model Mapping
curl --request POST \
--url https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1 \
--header 'Authorization: <api-key>' \
--header 'Content-Type: application/json' \
--data '
{
"creator": "<string>",
"description": "<string>",
"enabled": true,
"hidden": true,
"name": "<string>",
"order": 1,
"ruleMatchers": [
{
"applicationName": {
"value": "<string>"
},
"severity": {},
"subsystemName": {
"value": "<string>"
}
}
],
"ruleSubgroups": [
{
"enabled": true,
"order": 1,
"rules": [
{
"description": "<string>",
"enabled": true,
"name": "<string>",
"order": 1,
"parameters": {
"extractParameters": {
"rule": "<string>"
},
"allowParameters": {
"keepBlockedLogs": true,
"rule": "<string>"
},
"blockParameters": {
"keepBlockedLogs": true,
"rule": "<string>"
},
"extractTimestampParameters": {
"format": "<string>"
},
"jsonExtractParameters": {
"destinationFieldText": "<string>",
"rule": "<string>"
},
"jsonParseParameters": {
"deleteSource": true,
"destinationField": "<string>",
"escapedValue": true,
"overrideDest": true
},
"jsonStringifyParameters": {
"deleteSource": true,
"destinationField": "<string>"
},
"parseParameters": {
"destinationField": "<string>",
"rule": "<string>"
},
"removeFieldsParameters": {
"fields": [
"<string>"
]
},
"replaceParameters": {
"destinationField": "<string>",
"replaceNewVal": "<string>",
"rule": "<string>"
}
},
"sourceField": "<string>"
}
]
}
]
}
'import requests
url = "https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1"
payload = {
"creator": "<string>",
"description": "<string>",
"enabled": True,
"hidden": True,
"name": "<string>",
"order": 1,
"ruleMatchers": [
{
"applicationName": { "value": "<string>" },
"severity": {},
"subsystemName": { "value": "<string>" }
}
],
"ruleSubgroups": [
{
"enabled": True,
"order": 1,
"rules": [
{
"description": "<string>",
"enabled": True,
"name": "<string>",
"order": 1,
"parameters": {
"extractParameters": { "rule": "<string>" },
"allowParameters": {
"keepBlockedLogs": True,
"rule": "<string>"
},
"blockParameters": {
"keepBlockedLogs": True,
"rule": "<string>"
},
"extractTimestampParameters": { "format": "<string>" },
"jsonExtractParameters": {
"destinationFieldText": "<string>",
"rule": "<string>"
},
"jsonParseParameters": {
"deleteSource": True,
"destinationField": "<string>",
"escapedValue": True,
"overrideDest": True
},
"jsonStringifyParameters": {
"deleteSource": True,
"destinationField": "<string>"
},
"parseParameters": {
"destinationField": "<string>",
"rule": "<string>"
},
"removeFieldsParameters": { "fields": ["<string>"] },
"replaceParameters": {
"destinationField": "<string>",
"replaceNewVal": "<string>",
"rule": "<string>"
}
},
"sourceField": "<string>"
}
]
}
]
}
headers = {
"Authorization": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
creator: '<string>',
description: '<string>',
enabled: true,
hidden: true,
name: '<string>',
order: 1,
ruleMatchers: [
{
applicationName: {value: '<string>'},
severity: {},
subsystemName: {value: '<string>'}
}
],
ruleSubgroups: [
{
enabled: true,
order: 1,
rules: [
{
description: '<string>',
enabled: true,
name: '<string>',
order: 1,
parameters: {
extractParameters: {rule: '<string>'},
allowParameters: {keepBlockedLogs: true, rule: '<string>'},
blockParameters: {keepBlockedLogs: true, rule: '<string>'},
extractTimestampParameters: {format: '<string>'},
jsonExtractParameters: {destinationFieldText: '<string>', rule: '<string>'},
jsonParseParameters: {
deleteSource: true,
destinationField: '<string>',
escapedValue: true,
overrideDest: true
},
jsonStringifyParameters: {deleteSource: true, destinationField: '<string>'},
parseParameters: {destinationField: '<string>', rule: '<string>'},
removeFieldsParameters: {fields: ['<string>']},
replaceParameters: {destinationField: '<string>', replaceNewVal: '<string>', rule: '<string>'}
},
sourceField: '<string>'
}
]
}
]
})
};
fetch('https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'creator' => '<string>',
'description' => '<string>',
'enabled' => true,
'hidden' => true,
'name' => '<string>',
'order' => 1,
'ruleMatchers' => [
[
'applicationName' => [
'value' => '<string>'
],
'severity' => [
],
'subsystemName' => [
'value' => '<string>'
]
]
],
'ruleSubgroups' => [
[
'enabled' => true,
'order' => 1,
'rules' => [
[
'description' => '<string>',
'enabled' => true,
'name' => '<string>',
'order' => 1,
'parameters' => [
'extractParameters' => [
'rule' => '<string>'
],
'allowParameters' => [
'keepBlockedLogs' => true,
'rule' => '<string>'
],
'blockParameters' => [
'keepBlockedLogs' => true,
'rule' => '<string>'
],
'extractTimestampParameters' => [
'format' => '<string>'
],
'jsonExtractParameters' => [
'destinationFieldText' => '<string>',
'rule' => '<string>'
],
'jsonParseParameters' => [
'deleteSource' => true,
'destinationField' => '<string>',
'escapedValue' => true,
'overrideDest' => true
],
'jsonStringifyParameters' => [
'deleteSource' => true,
'destinationField' => '<string>'
],
'parseParameters' => [
'destinationField' => '<string>',
'rule' => '<string>'
],
'removeFieldsParameters' => [
'fields' => [
'<string>'
]
],
'replaceParameters' => [
'destinationField' => '<string>',
'replaceNewVal' => '<string>',
'rule' => '<string>'
]
],
'sourceField' => '<string>'
]
]
]
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: <api-key>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1"
payload := strings.NewReader("{\n \"creator\": \"<string>\",\n \"description\": \"<string>\",\n \"enabled\": true,\n \"hidden\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"ruleMatchers\": [\n {\n \"applicationName\": {\n \"value\": \"<string>\"\n },\n \"severity\": {},\n \"subsystemName\": {\n \"value\": \"<string>\"\n }\n }\n ],\n \"ruleSubgroups\": [\n {\n \"enabled\": true,\n \"order\": 1,\n \"rules\": [\n {\n \"description\": \"<string>\",\n \"enabled\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"parameters\": {\n \"extractParameters\": {\n \"rule\": \"<string>\"\n },\n \"allowParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"blockParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"extractTimestampParameters\": {\n \"format\": \"<string>\"\n },\n \"jsonExtractParameters\": {\n \"destinationFieldText\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"jsonParseParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\",\n \"escapedValue\": true,\n \"overrideDest\": true\n },\n \"jsonStringifyParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\"\n },\n \"parseParameters\": {\n \"destinationField\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"removeFieldsParameters\": {\n \"fields\": [\n \"<string>\"\n ]\n },\n \"replaceParameters\": {\n \"destinationField\": \"<string>\",\n \"replaceNewVal\": \"<string>\",\n \"rule\": \"<string>\"\n }\n },\n \"sourceField\": \"<string>\"\n }\n ]\n }\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1")
.header("Authorization", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"creator\": \"<string>\",\n \"description\": \"<string>\",\n \"enabled\": true,\n \"hidden\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"ruleMatchers\": [\n {\n \"applicationName\": {\n \"value\": \"<string>\"\n },\n \"severity\": {},\n \"subsystemName\": {\n \"value\": \"<string>\"\n }\n }\n ],\n \"ruleSubgroups\": [\n {\n \"enabled\": true,\n \"order\": 1,\n \"rules\": [\n {\n \"description\": \"<string>\",\n \"enabled\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"parameters\": {\n \"extractParameters\": {\n \"rule\": \"<string>\"\n },\n \"allowParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"blockParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"extractTimestampParameters\": {\n \"format\": \"<string>\"\n },\n \"jsonExtractParameters\": {\n \"destinationFieldText\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"jsonParseParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\",\n \"escapedValue\": true,\n \"overrideDest\": true\n },\n \"jsonStringifyParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\"\n },\n \"parseParameters\": {\n \"destinationField\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"removeFieldsParameters\": {\n \"fields\": [\n \"<string>\"\n ]\n },\n \"replaceParameters\": {\n \"destinationField\": \"<string>\",\n \"replaceNewVal\": \"<string>\",\n \"rule\": \"<string>\"\n }\n },\n \"sourceField\": \"<string>\"\n }\n ]\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"creator\": \"<string>\",\n \"description\": \"<string>\",\n \"enabled\": true,\n \"hidden\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"ruleMatchers\": [\n {\n \"applicationName\": {\n \"value\": \"<string>\"\n },\n \"severity\": {},\n \"subsystemName\": {\n \"value\": \"<string>\"\n }\n }\n ],\n \"ruleSubgroups\": [\n {\n \"enabled\": true,\n \"order\": 1,\n \"rules\": [\n {\n \"description\": \"<string>\",\n \"enabled\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"parameters\": {\n \"extractParameters\": {\n \"rule\": \"<string>\"\n },\n \"allowParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"blockParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"extractTimestampParameters\": {\n \"format\": \"<string>\"\n },\n \"jsonExtractParameters\": {\n \"destinationFieldText\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"jsonParseParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\",\n \"escapedValue\": true,\n \"overrideDest\": true\n },\n \"jsonStringifyParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\"\n },\n \"parseParameters\": {\n \"destinationField\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"removeFieldsParameters\": {\n \"fields\": [\n \"<string>\"\n ]\n },\n \"replaceParameters\": {\n \"destinationField\": \"<string>\",\n \"replaceNewVal\": \"<string>\",\n \"rule\": \"<string>\"\n }\n },\n \"sourceField\": \"<string>\"\n }\n ]\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"ruleDefinition": {}
}{
"code": 349,
"message": "<string>"
}{
"code": 349,
"message": "<string>"
}{
"code": 349,
"message": "<string>"
}Rule Groups Service
Get Rule Group Model Mapping
Returns the model mapping for a parsing rule group.
Get Rule Group Model Mapping
curl --request POST \
--url https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1 \
--header 'Authorization: <api-key>' \
--header 'Content-Type: application/json' \
--data '
{
"creator": "<string>",
"description": "<string>",
"enabled": true,
"hidden": true,
"name": "<string>",
"order": 1,
"ruleMatchers": [
{
"applicationName": {
"value": "<string>"
},
"severity": {},
"subsystemName": {
"value": "<string>"
}
}
],
"ruleSubgroups": [
{
"enabled": true,
"order": 1,
"rules": [
{
"description": "<string>",
"enabled": true,
"name": "<string>",
"order": 1,
"parameters": {
"extractParameters": {
"rule": "<string>"
},
"allowParameters": {
"keepBlockedLogs": true,
"rule": "<string>"
},
"blockParameters": {
"keepBlockedLogs": true,
"rule": "<string>"
},
"extractTimestampParameters": {
"format": "<string>"
},
"jsonExtractParameters": {
"destinationFieldText": "<string>",
"rule": "<string>"
},
"jsonParseParameters": {
"deleteSource": true,
"destinationField": "<string>",
"escapedValue": true,
"overrideDest": true
},
"jsonStringifyParameters": {
"deleteSource": true,
"destinationField": "<string>"
},
"parseParameters": {
"destinationField": "<string>",
"rule": "<string>"
},
"removeFieldsParameters": {
"fields": [
"<string>"
]
},
"replaceParameters": {
"destinationField": "<string>",
"replaceNewVal": "<string>",
"rule": "<string>"
}
},
"sourceField": "<string>"
}
]
}
]
}
'import requests
url = "https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1"
payload = {
"creator": "<string>",
"description": "<string>",
"enabled": True,
"hidden": True,
"name": "<string>",
"order": 1,
"ruleMatchers": [
{
"applicationName": { "value": "<string>" },
"severity": {},
"subsystemName": { "value": "<string>" }
}
],
"ruleSubgroups": [
{
"enabled": True,
"order": 1,
"rules": [
{
"description": "<string>",
"enabled": True,
"name": "<string>",
"order": 1,
"parameters": {
"extractParameters": { "rule": "<string>" },
"allowParameters": {
"keepBlockedLogs": True,
"rule": "<string>"
},
"blockParameters": {
"keepBlockedLogs": True,
"rule": "<string>"
},
"extractTimestampParameters": { "format": "<string>" },
"jsonExtractParameters": {
"destinationFieldText": "<string>",
"rule": "<string>"
},
"jsonParseParameters": {
"deleteSource": True,
"destinationField": "<string>",
"escapedValue": True,
"overrideDest": True
},
"jsonStringifyParameters": {
"deleteSource": True,
"destinationField": "<string>"
},
"parseParameters": {
"destinationField": "<string>",
"rule": "<string>"
},
"removeFieldsParameters": { "fields": ["<string>"] },
"replaceParameters": {
"destinationField": "<string>",
"replaceNewVal": "<string>",
"rule": "<string>"
}
},
"sourceField": "<string>"
}
]
}
]
}
headers = {
"Authorization": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
creator: '<string>',
description: '<string>',
enabled: true,
hidden: true,
name: '<string>',
order: 1,
ruleMatchers: [
{
applicationName: {value: '<string>'},
severity: {},
subsystemName: {value: '<string>'}
}
],
ruleSubgroups: [
{
enabled: true,
order: 1,
rules: [
{
description: '<string>',
enabled: true,
name: '<string>',
order: 1,
parameters: {
extractParameters: {rule: '<string>'},
allowParameters: {keepBlockedLogs: true, rule: '<string>'},
blockParameters: {keepBlockedLogs: true, rule: '<string>'},
extractTimestampParameters: {format: '<string>'},
jsonExtractParameters: {destinationFieldText: '<string>', rule: '<string>'},
jsonParseParameters: {
deleteSource: true,
destinationField: '<string>',
escapedValue: true,
overrideDest: true
},
jsonStringifyParameters: {deleteSource: true, destinationField: '<string>'},
parseParameters: {destinationField: '<string>', rule: '<string>'},
removeFieldsParameters: {fields: ['<string>']},
replaceParameters: {destinationField: '<string>', replaceNewVal: '<string>', rule: '<string>'}
},
sourceField: '<string>'
}
]
}
]
})
};
fetch('https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'creator' => '<string>',
'description' => '<string>',
'enabled' => true,
'hidden' => true,
'name' => '<string>',
'order' => 1,
'ruleMatchers' => [
[
'applicationName' => [
'value' => '<string>'
],
'severity' => [
],
'subsystemName' => [
'value' => '<string>'
]
]
],
'ruleSubgroups' => [
[
'enabled' => true,
'order' => 1,
'rules' => [
[
'description' => '<string>',
'enabled' => true,
'name' => '<string>',
'order' => 1,
'parameters' => [
'extractParameters' => [
'rule' => '<string>'
],
'allowParameters' => [
'keepBlockedLogs' => true,
'rule' => '<string>'
],
'blockParameters' => [
'keepBlockedLogs' => true,
'rule' => '<string>'
],
'extractTimestampParameters' => [
'format' => '<string>'
],
'jsonExtractParameters' => [
'destinationFieldText' => '<string>',
'rule' => '<string>'
],
'jsonParseParameters' => [
'deleteSource' => true,
'destinationField' => '<string>',
'escapedValue' => true,
'overrideDest' => true
],
'jsonStringifyParameters' => [
'deleteSource' => true,
'destinationField' => '<string>'
],
'parseParameters' => [
'destinationField' => '<string>',
'rule' => '<string>'
],
'removeFieldsParameters' => [
'fields' => [
'<string>'
]
],
'replaceParameters' => [
'destinationField' => '<string>',
'replaceNewVal' => '<string>',
'rule' => '<string>'
]
],
'sourceField' => '<string>'
]
]
]
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: <api-key>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1"
payload := strings.NewReader("{\n \"creator\": \"<string>\",\n \"description\": \"<string>\",\n \"enabled\": true,\n \"hidden\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"ruleMatchers\": [\n {\n \"applicationName\": {\n \"value\": \"<string>\"\n },\n \"severity\": {},\n \"subsystemName\": {\n \"value\": \"<string>\"\n }\n }\n ],\n \"ruleSubgroups\": [\n {\n \"enabled\": true,\n \"order\": 1,\n \"rules\": [\n {\n \"description\": \"<string>\",\n \"enabled\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"parameters\": {\n \"extractParameters\": {\n \"rule\": \"<string>\"\n },\n \"allowParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"blockParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"extractTimestampParameters\": {\n \"format\": \"<string>\"\n },\n \"jsonExtractParameters\": {\n \"destinationFieldText\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"jsonParseParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\",\n \"escapedValue\": true,\n \"overrideDest\": true\n },\n \"jsonStringifyParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\"\n },\n \"parseParameters\": {\n \"destinationField\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"removeFieldsParameters\": {\n \"fields\": [\n \"<string>\"\n ]\n },\n \"replaceParameters\": {\n \"destinationField\": \"<string>\",\n \"replaceNewVal\": \"<string>\",\n \"rule\": \"<string>\"\n }\n },\n \"sourceField\": \"<string>\"\n }\n ]\n }\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1")
.header("Authorization", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"creator\": \"<string>\",\n \"description\": \"<string>\",\n \"enabled\": true,\n \"hidden\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"ruleMatchers\": [\n {\n \"applicationName\": {\n \"value\": \"<string>\"\n },\n \"severity\": {},\n \"subsystemName\": {\n \"value\": \"<string>\"\n }\n }\n ],\n \"ruleSubgroups\": [\n {\n \"enabled\": true,\n \"order\": 1,\n \"rules\": [\n {\n \"description\": \"<string>\",\n \"enabled\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"parameters\": {\n \"extractParameters\": {\n \"rule\": \"<string>\"\n },\n \"allowParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"blockParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"extractTimestampParameters\": {\n \"format\": \"<string>\"\n },\n \"jsonExtractParameters\": {\n \"destinationFieldText\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"jsonParseParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\",\n \"escapedValue\": true,\n \"overrideDest\": true\n },\n \"jsonStringifyParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\"\n },\n \"parseParameters\": {\n \"destinationField\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"removeFieldsParameters\": {\n \"fields\": [\n \"<string>\"\n ]\n },\n \"replaceParameters\": {\n \"destinationField\": \"<string>\",\n \"replaceNewVal\": \"<string>\",\n \"rule\": \"<string>\"\n }\n },\n \"sourceField\": \"<string>\"\n }\n ]\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.coralogix.com/mgmt/openapi/5/parsing-rules/mapping/v1")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"creator\": \"<string>\",\n \"description\": \"<string>\",\n \"enabled\": true,\n \"hidden\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"ruleMatchers\": [\n {\n \"applicationName\": {\n \"value\": \"<string>\"\n },\n \"severity\": {},\n \"subsystemName\": {\n \"value\": \"<string>\"\n }\n }\n ],\n \"ruleSubgroups\": [\n {\n \"enabled\": true,\n \"order\": 1,\n \"rules\": [\n {\n \"description\": \"<string>\",\n \"enabled\": true,\n \"name\": \"<string>\",\n \"order\": 1,\n \"parameters\": {\n \"extractParameters\": {\n \"rule\": \"<string>\"\n },\n \"allowParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"blockParameters\": {\n \"keepBlockedLogs\": true,\n \"rule\": \"<string>\"\n },\n \"extractTimestampParameters\": {\n \"format\": \"<string>\"\n },\n \"jsonExtractParameters\": {\n \"destinationFieldText\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"jsonParseParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\",\n \"escapedValue\": true,\n \"overrideDest\": true\n },\n \"jsonStringifyParameters\": {\n \"deleteSource\": true,\n \"destinationField\": \"<string>\"\n },\n \"parseParameters\": {\n \"destinationField\": \"<string>\",\n \"rule\": \"<string>\"\n },\n \"removeFieldsParameters\": {\n \"fields\": [\n \"<string>\"\n ]\n },\n \"replaceParameters\": {\n \"destinationField\": \"<string>\",\n \"replaceNewVal\": \"<string>\",\n \"rule\": \"<string>\"\n }\n },\n \"sourceField\": \"<string>\"\n }\n ]\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"ruleDefinition": {}
}{
"code": 349,
"message": "<string>"
}{
"code": 349,
"message": "<string>"
}{
"code": 349,
"message": "<string>"
}Authorizations
API key authentication
Body
application/json
Request for retrieving the model mapping for a parsing rule group.
Creator.
Human-readable description.
Whether this resource is enabled.
Whether to hide this rule group from the standard view.
Display name.
Sort order.
Required range:
x >= 0List of rule matchers that determine which logs this group applies to.
- Option 1
- Option 2
- Option 3
- Option 4
Show child attributes
Show child attributes
List of rule subgroups defining the ordered set of rules in this group.
Show child attributes
Show child attributes
Response
Response containing the model mapping for a parsing rule group.
The rule definition.
Was this page helpful?
⌘I