sazabi log-sources
Command reference for sazabi log-sources.
sazabi log-sources — Manage log sources. Subcommands: providers, list, create, get, setup-instructions, enable, disable, delete.
sazabi log-sources
Manage log sources
sazabi log-sources <subcommand>sazabi log-sources providers # List providers and their setup modes
sazabi log-sources list # List log sources
sazabi log-sources create <slug> # One setup mode: creates
sazabi log-sources create <slug> --mode manual # Two modes: send data to an endpoint
sazabi log-sources create <slug> --mode native --metadata '{...}' # Two modes: connect your account
sazabi log-sources create cloudwatch --mode native --method cloudformation # Account mode with a recipe
sazabi log-sources setup-instructions <slug> # Setup instructions before anything exists
sazabi log-sources setup-instructions <log-source-id> # Setup instructions with this source's values
sazabi log-sources get <log-source-id> # Inspect one log sourcesazabi log-sources providers
List supported log source providers
sazabi log-sources providers [options]| Flag | Type | Required | Description |
|---|---|---|---|
--token | string | No | Override token |
--api-base-url | string | No | Override API base URL |
--json | boolean | No | Output as JSON |
sazabi log-sources providers # List providers and their setup modes
sazabi log-sources providers --json # Output as JSONsazabi log-sources list
List log sources
sazabi log-sources list [options]| Flag | Type | Required | Description |
|---|---|---|---|
--token | string | No | Override token |
--api-base-url | string | No | Override API base URL |
--json | boolean | No | Output as JSON |
--provider | string | No | Filter by provider slug |
--project-id | string | No | Project ID |
sazabi log-sources list # List log sources
sazabi log-sources list --provider <slug> # Filter by providersazabi log-sources create
Create a log source
A provider offers one or two setup paths: connect your account (--mode native, with the provider's credentials in --metadata) or send data to an endpoint (--mode manual, which mints a keyed intake endpoint). A provider with one path needs no --mode. A provider with both and no --mode prints the two commands and creates nothing.
--mode native without --metadata prints how to get the credentials and the finish command. A provider with several ways to build the credential (CloudWatch) takes --method to print one recipe; --method never changes what is created.
sazabi log-sources create <slug> [options]| Flag | Type | Required | Description |
|---|---|---|---|
--token | string | No | Override token |
--api-base-url | string | No | Override API base URL |
--json | boolean | No | Output as JSON |
--metadata | string | No | JSON credentials for the account path (see metadataFields in log-sources providers --json) |
--mode | string | No | Setup path: native (connect your account) or manual (send data to an endpoint); inferred from --metadata when omitted |
--method | string | No | Which credential recipe to print, for providers with several (CloudWatch: cloudformation, terraform, cli) |
--project-id | string | No | Project ID |
sazabi log-sources create <slug> # One setup mode: creates
sazabi log-sources create <slug> --mode manual # Two modes: send data to an endpoint
sazabi log-sources create <slug> --mode native # Two modes: print how to get the credentials
sazabi log-sources create <slug> --mode native --metadata '{...}' # Two modes: connect your account
sazabi log-sources create cloudwatch --mode native --method cloudformation # Account mode with a recipesazabi log-sources get
Get one log source
sazabi log-sources get <log-source-id> [options]| Flag | Type | Required | Description |
|---|---|---|---|
--token | string | No | Override token |
--api-base-url | string | No | Override API base URL |
--json | boolean | No | Output as JSON |
sazabi log-sources get <log-source-id> # Inspect one log source: its log streams and endpointssazabi log-sources setup-instructions
Print the setup instructions for a provider or a log source
A provider slug prints the generic instructions for every setup path the provider offers. A log source ID prints the instructions for that log source's path with its own values filled in: the endpoint for an endpoint source, the credential recipe and the log-stream selection command for an account source.
sazabi log-sources setup-instructions <slug | log-source-id> [options]| Flag | Type | Required | Description |
|---|---|---|---|
--token | string | No | Override token |
--api-base-url | string | No | Override API base URL |
--json | boolean | No | Output as JSON |
--method | string | No | Which credential recipe to print, for providers with several (CloudWatch: cloudformation, terraform, cli) |
sazabi log-sources setup-instructions <slug> # Setup instructions before anything exists
sazabi log-sources setup-instructions <log-source-id> # Setup instructions with this source's values
sazabi log-sources setup-instructions <log-source-id> --method cloudformation # One credential recipe (CloudWatch)sazabi log-sources enable
Resume ingestion for a log source's log streams
sazabi log-sources enable <log-source-id> [options]| Flag | Type | Required | Description |
|---|---|---|---|
--token | string | No | Override token |
--api-base-url | string | No | Override API base URL |
--json | boolean | No | Output as JSON |
sazabi log-sources enable <log-source-id> # Resume ingestionsazabi log-sources disable
Pause ingestion for a log source's log streams
sazabi log-sources disable <log-source-id> [options]| Flag | Type | Required | Description |
|---|---|---|---|
--token | string | No | Override token |
--api-base-url | string | No | Override API base URL |
--json | boolean | No | Output as JSON |
sazabi log-sources disable <log-source-id> # Pause ingestionsazabi log-sources delete
Delete a log source
sazabi log-sources delete <log-source-id> [options]| Flag | Type | Required | Description |
|---|---|---|---|
--token | string | No | Override token |
--api-base-url | string | No | Override API base URL |
--json | boolean | No | Output as JSON |
sazabi log-sources delete <log-source-id> # Delete a log source and deactivate its keys