datastore
Creates, updates, deletes, gets or lists a datastore resource.
Overview
| Name | datastore |
| Type | Resource |
| Id | sumologic.threat_intel.datastore |
Fields
The following fields are returned by SELECT queries:
- get
Threat intel ingest DB information.
| Name | Datatype | Description |
|---|---|---|
disk_size | integer (int64) | Total DB size in terms of disk bytes (wire: diskSize) |
indicator_count | integer (int64) | Total number of indicators in the DB (wire: indicatorCount) |
indicator_limit | integer (int64) | Limit number of indicators supported in the DB (wire: indicatorLimit) |
source_status | array | A list of sources and their individual DB sizes and indicator counts (wire: sourceStatus) |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get | select | region | Get threat intel indicators DB information, such as storage utilization and indicator counts | |
delete | delete | region | Removes the entire database and all indicators associated with this tenant |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | Sumo Logic deployment (au, ca, ch, de, eu, fed, in, jp, kr, us1, us2). Resolved from the SUMOLOGIC_ENVIRONMENT environment variable when it is set (x-stackQL-envVar, the same variable the Terraform provider reads); otherwise defaults to us2. A WHERE region = '...' value always takes precedence. (enum: [au, ca, ch, de, eu, fed, in, jp, kr, us1, us2], default: us2, x-stackQL-envVar: SUMOLOGIC_ENVIRONMENT) |
SELECT examples
- get
Get threat intel indicators DB information, such as storage utilization and indicator counts
SELECT
disk_size,
indicator_count,
indicator_limit,
source_status
FROM sumologic.threat_intel.datastore
WHERE region = '{{ region }}' -- required unless SUMOLOGIC_ENVIRONMENT is set
;
DELETE examples
- delete
Removes the entire database and all indicators associated with this tenant
DELETE FROM sumologic.threat_intel.datastore
WHERE region = '{{ region }}' --required unless SUMOLOGIC_ENVIRONMENT is set
;